Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/kGbxL4pvDgIk2YRsI1MHy31m2iI.roa
File: kGbxL4pvDgIk2YRsI1MHy31m2iI.roa (raw, json)
Hash identifier: GgVo5LIW+lYiYsewjaZoeb018sQ0Kc9DWk7YkIBjz8E=
Subject key identifier: 90:66:F1:2F:8A:6F:0E:02:24:D9:84:6C:23:53:07:CB:7D:66:DA:22
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01857295C736C720F1A87C2E8805E9A21B3A
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/kGbxL4pvDgIk2YRsI1MHy31m2iI.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207141
IP address blocks: 185.164.253.0/24 maxlen: 24
185.164.252.0/24 maxlen: 24
185.164.252.0/22 maxlen: 24
185.206.237.0/24 maxlen: 24
185.206.239.0/24 maxlen: 24
185.206.236.0/24 maxlen: 24
185.206.236.0/22 maxlen: 24
185.206.238.0/24 maxlen: 24
2a0b:1b40::/29 maxlen: 29
2a0b:b400::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c7:36:c7:20:f1:a8:7c:2e:88:05:e9:a2:1b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9066f12f8a6f0e0224d9846c235307cb7d66da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:89:2a:dc:8e:49:ae:66:75:d0:9e:08:0f:
5f:99:fc:04:33:97:65:cc:55:1b:06:c8:9f:aa:16:
8f:5a:36:6d:12:5a:19:1e:78:70:2b:cd:85:7f:f5:
9e:8b:50:cf:b8:9b:92:77:17:57:b1:a2:c2:6b:4c:
35:22:7c:87:09:e6:01:2c:24:1e:2d:99:d9:e8:9f:
11:e0:6f:20:3e:11:ec:c0:16:24:8f:a2:38:9d:8f:
d8:dd:5a:e0:86:da:cf:17:00:ac:5b:85:0d:c8:4c:
21:f2:05:39:e9:d9:78:b0:13:d2:42:24:b1:0f:ba:
a4:e5:34:e8:43:73:fb:fe:ef:a9:6c:13:2a:23:ed:
d9:e0:17:b9:4e:44:8f:f3:5d:63:ba:15:55:a9:6d:
70:8f:3c:22:be:51:49:49:79:ff:c1:54:8b:e9:3d:
f8:d8:ae:7a:fc:5f:d8:ca:9d:b5:90:29:67:35:31:
3b:00:81:af:1f:44:fc:ff:22:cc:23:e9:72:ec:16:
ac:a9:3b:e9:46:fc:d6:df:5a:ec:c0:80:bd:6d:4b:
af:c4:1a:5f:74:82:60:5a:2e:9d:77:c4:ee:ef:b4:
b5:1e:20:37:23:31:d9:f9:c2:02:53:60:ba:09:c4:
e1:dd:c8:dd:bb:47:cd:3a:51:76:cc:3c:79:e7:92:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:F1:2F:8A:6F:0E:02:24:D9:84:6C:23:53:07:CB:7D:66:DA:22
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/kGbxL4pvDgIk2YRsI1MHy31m2iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.252.0/22
185.206.236.0/22
IPv6:
2a0b:1b40::/29
2a0b:b400::/29
Signature Algorithm: sha256WithRSAEncryption
22:b2:8c:5b:3a:c1:7d:dd:6f:c2:52:af:7a:7b:45:27:41:a5:
39:1d:5e:3b:48:5d:e1:9d:22:3e:ab:15:52:5b:b7:25:e9:bd:
27:b9:d0:02:1d:32:59:06:49:7c:55:85:f0:f5:01:b2:2c:06:
ab:10:29:e3:e2:e4:72:12:c8:d2:78:c8:f2:0c:67:e6:39:01:
5d:9b:17:0e:47:3f:bb:a0:d9:d9:eb:9c:de:05:28:ed:03:ea:
c4:cd:12:1e:2b:87:38:90:7c:b1:36:62:7a:28:e9:0b:80:8b:
c6:f4:53:a5:34:5f:b5:97:32:b8:c2:6e:2e:b5:33:dd:af:24:
5f:bc:76:5b:2d:f0:9f:bb:39:f9:97:f9:bb:87:17:2a:85:47:
7a:34:42:8f:cd:5e:02:26:cb:bc:18:51:0b:f7:21:b7:bb:a8:
3f:41:35:09:0c:09:e2:6a:38:9c:a4:d1:be:09:6e:d3:44:01:
dc:4c:d1:60:6c:20:9a:60:cb:a3:48:1d:fe:23:6b:15:57:f8:
28:82:3c:66:28:26:1a:61:47:e3:59:7e:6e:4c:8d:5c:b2:60:
b4:76:1b:94:1e:14:68:7b:5e:ff:c7:3c:20:34:9c:9e:91:6c:
28:f0:98:6b:50:92:a9:b3:91:52:5c:fd:eb:5a:12:4e:25:03:
a6:99:90:13
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVylcc2xyDxqHwuiAXpohs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjMwMTAyMTMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDY2ZjEyZjhhNmYwZTAyMjRkOTg0NmMyMzUzMDdjYjdkNjZkYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwyJKtyOSa5mddCeCA9fmfwEM5dl
zFUbBsifqhaPWjZtEloZHnhwK82Ff/Wei1DPuJuSdxdXsaLCa0w1InyHCeYBLCQe
LZnZ6J8R4G8gPhHswBYkj6I4nY/Y3VrghtrPFwCsW4UNyEwh8gU56dl4sBPSQiSx
D7qk5TToQ3P7/u+pbBMqI+3Z4Be5TkSP811juhVVqW1wjzwivlFJSXn/wVSL6T34
2K56/F/Yyp21kClnNTE7AIGvH0T8/yLMI+ly7BasqTvpRvzW31rswIC9bUuvxBpf
dIJgWi6dd8Tu77S1HiA3IzHZ+cICU2C6CcTh3cjdu0fNOlF2zDx555KorwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJBm8S+Kbw4CJNmEbCNTB8t9ZtoiMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEva0dieEw0cHZEZ0lrMllSc0kxTUh5MzFtMmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuaT8AwQC
uc7sMBQEAgACMA4DBQMqCxtAAwUDKgu0ADANBgkqhkiG9w0BAQsFAAOCAQEAIrKM
WzrBfd1vwlKventFJ0GlOR1eO0hd4Z0iPqsVUlu3Jem9J7nQAh0yWQZJfFWF8PUB
siwGqxAp4+LkchLI0njI8gxn5jkBXZsXDkc/u6DZ2euc3gUo7QPqxM0SHiuHOJB8
sTZieijpC4CLxvRTpTRftZcyuMJuLrUz3a8kX7x2Wy3wn7s5+Zf5u4cXKoVHejRC
j81eAibLvBhRC/cht7uoP0E1CQwJ4mo4nKTRvglu00QB3EzRYGwgmmDLo0gd/iNr
FVf4KII8ZigmGmFH41l+bkyNXLJgtHYblB4UaHte/8c8IDScnpFsKPCYa1CSqbOR
Ulz961oSTiUDppmQEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org