Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/8nARsJaQOwdLaMkkISoV81kHcW4.roa
File: 8nARsJaQOwdLaMkkISoV81kHcW4.roa (raw, json)
Hash identifier: /0T7MRqeaqo1C4kaz6AYzk1b+D8H9p6d4RlrxcU3PPI=
Subject key identifier: F2:70:11:B0:96:90:3B:07:4B:68:C9:24:21:2A:15:F3:59:07:71:6E
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 018CC86F8158BDADDA3560BD29ACBD14B82F
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/8nARsJaQOwdLaMkkISoV81kHcW4.roa
Signing time: Tue 02 Jan 2024 04:29:59 +0000
ROA not before: Tue 02 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205561
IP address blocks: 185.160.221.0/24 maxlen: 24
185.160.222.0/24 maxlen: 24
185.160.220.0/22 maxlen: 24
185.160.220.0/24 maxlen: 24
185.160.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:81:58:bd:ad:da:35:60:bd:29:ac:bd:14:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jan 2 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f27011b096903b074b68c924212a15f35907716e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:d5:d8:45:a5:f0:d0:38:6d:a0:dc:53:fc:
61:f4:69:82:07:2a:10:32:7b:ce:5c:04:e6:23:ea:
16:2a:35:33:d9:c4:66:65:68:7c:25:43:6c:f9:66:
ae:54:77:36:ee:13:6f:1d:52:ba:e4:86:db:08:fc:
4e:98:f2:01:42:8c:e6:50:81:06:5c:47:09:29:7b:
92:28:7d:b8:52:95:a6:42:f1:85:ee:84:69:ec:e9:
88:ac:ef:70:95:16:4f:56:d1:aa:c2:bc:d1:2c:eb:
49:90:b3:c3:2e:69:cf:1c:ed:64:da:06:24:10:fa:
75:14:02:74:51:a3:5e:e6:8d:ec:c4:ff:fe:e3:a8:
fb:22:fe:ef:63:64:ae:8c:55:d1:c4:0b:11:6b:0b:
45:f0:fd:cd:70:61:ec:c6:92:17:74:86:b6:46:0d:
e3:ba:ce:02:13:d6:11:b9:b9:2f:78:4d:3d:cf:bb:
bd:30:68:81:29:d2:a9:cb:dc:d3:bc:6a:8f:c4:32:
d2:90:ea:cc:de:76:83:64:40:f3:7c:c4:ba:0f:d1:
8f:06:26:77:4b:b8:05:7f:94:6b:3b:7e:ab:7b:6c:
7e:eb:9e:aa:ab:f2:41:50:9b:28:6a:35:6b:87:02:
39:2c:32:a0:c2:c0:57:25:e2:6f:76:3f:89:4f:6f:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:11:B0:96:90:3B:07:4B:68:C9:24:21:2A:15:F3:59:07:71:6E
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/8nARsJaQOwdLaMkkISoV81kHcW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d0:0a:70:01:1a:65:b3:cb:6e:5c:4f:e4:68:c0:de:75:ab:
9e:90:59:16:34:3a:11:74:55:eb:32:59:f1:96:4b:2a:65:ba:
5b:52:06:dc:bf:9c:1d:83:25:39:7a:14:fe:c7:9f:7a:9e:8c:
43:44:7e:4a:36:62:61:02:8b:ed:27:e3:d0:a4:d6:d6:7b:53:
a5:95:02:b8:91:10:dc:f4:1a:a9:35:74:39:72:17:40:13:69:
eb:08:55:51:18:e6:c7:69:10:45:3d:c1:45:15:6d:74:1b:11:
ec:c0:6b:8b:13:b9:ed:d4:79:69:b1:97:ee:34:ff:ca:0a:5e:
9b:1b:19:ea:24:9a:49:4c:3b:3e:b4:28:80:02:69:05:80:ba:
c7:d4:d7:2f:e9:f5:56:f9:75:df:61:f2:4f:5a:7b:60:c5:3c:
e7:df:98:f4:28:54:21:89:41:92:14:10:05:4a:c2:eb:61:64:
c6:17:a1:d7:07:5f:cd:21:35:b8:2d:e0:24:5c:ba:15:38:4a:
b5:18:0b:3b:e9:d0:ea:68:cc:db:4d:95:e7:ff:c7:56:09:07:
b4:3c:58:0a:43:bb:e4:b0:f1:8d:1e:2a:11:d5:bf:e2:ef:d0:
ce:99:34:e1:bf:8d:b9:f0:e1:1d:d2:22:8c:fe:4f:a2:ac:09:
94:bf:35:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb4FYva3aNWC9Kay9FLgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk
YmI4YzIwHhcNMjQwMTAyMDQyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjcwMTFiMDk2OTAzYjA3NGI2OGM5MjQyMTJhMTVmMzU5MDc3MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5vV2EWl8NA4baDcU/xh9GmCByoQ
MnvOXATmI+oWKjUz2cRmZWh8JUNs+WauVHc27hNvHVK65IbbCPxOmPIBQozmUIEG
XEcJKXuSKH24UpWmQvGF7oRp7OmIrO9wlRZPVtGqwrzRLOtJkLPDLmnPHO1k2gYk
EPp1FAJ0UaNe5o3sxP/+46j7Iv7vY2SujFXRxAsRawtF8P3NcGHsxpIXdIa2Rg3j
us4CE9YRubkveE09z7u9MGiBKdKpy9zTvGqPxDLSkOrM3naDZEDzfMS6D9GPBiZ3
S7gFf5RrO36re2x+656qq/JBUJsoajVrhwI5LDKgwsBXJeJvdj+JT2++rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJwEbCWkDsHS2jJJCEqFfNZB3FuMB8GA1UdIwQY
MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt
ODEwMzlmM2NmM2ZkLzEvOG5BUnNKYVFPd2RMYU1ra0lTb1Y4MWtIY1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk
LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaDcMA0G
CSqGSIb3DQEBCwUAA4IBAQCl0ApwARpls8tuXE/kaMDedauekFkWNDoRdFXrMlnx
lksqZbpbUgbcv5wdgyU5ehT+x596noxDRH5KNmJhAovtJ+PQpNbWe1OllQK4kRDc
9BqpNXQ5chdAE2nrCFVRGObHaRBFPcFFFW10GxHswGuLE7nt1HlpsZfuNP/KCl6b
GxnqJJpJTDs+tCiAAmkFgLrH1Ncv6fVW+XXfYfJPWntgxTzn35j0KFQhiUGSFBAF
SsLrYWTGF6HXB1/NITW4LeAkXLoVOEq1GAs76dDqaMzbTZXn/8dWCQe0PFgKQ7vk
sPGNHioR1b/i79DOmTThv4258OEd0iKM/k+irAmUvzWN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:06 2024 by rpki-client on console-ams.rpki-client.org