Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/61jl8eRJ2q1vM1amCKRrL9KOtCY.roa
File: 61jl8eRJ2q1vM1amCKRrL9KOtCY.roa (raw, json)
Hash identifier: OwLMJuAmqovgt0VwsPW4m1Hi6gJbDEmyd/Q8lbmCM6Q=
Subject key identifier: EB:58:E5:F1:E4:49:DA:AD:6F:33:56:A6:08:A4:6B:2F:D2:8E:B4:26
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 0185704298245B8CB3C2832CA60A296EA346
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/61jl8eRJ2q1vM1amCKRrL9KOtCY.roa
Signing time: Mon 02 Jan 2023 02:14:50 +0000
ROA not before: Mon 02 Jan 2023 02:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201597
IP address blocks: 185.66.92.0/22 maxlen: 22
185.232.252.0/22 maxlen: 22
185.232.254.0/24 maxlen: 24
2a05:680::/29 maxlen: 29
2a05:687::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:98:24:5b:8c:b3:c2:83:2c:a6:0a:29:6e:a3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Jan 2 02:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb58e5f1e449daad6f3356a608a46b2fd28eb426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:b5:f5:bf:4e:04:c6:43:dd:f4:92:2f:a3:
ee:c2:6d:e8:84:01:18:da:0e:26:ee:67:bb:e1:96:
5f:40:57:02:e1:81:2e:a8:ea:c5:6c:bf:f5:c7:47:
d8:3a:9d:56:a0:ff:6d:25:76:f6:55:a2:8f:ed:0a:
32:ae:a8:95:c1:0f:84:59:be:f4:00:e5:c1:1d:31:
d8:6f:08:f0:df:23:a3:d1:e2:c9:c3:e1:cb:22:94:
f5:e1:cd:5a:33:f8:df:13:07:3b:58:46:53:16:d6:
fa:8f:4e:06:3b:77:7a:c3:a4:42:04:69:a1:78:95:
31:3e:b6:ec:67:7e:8f:8f:d5:d2:48:e2:a1:96:58:
ab:18:dd:d0:94:95:aa:c7:af:15:fd:43:eb:ea:63:
9f:64:9a:fe:9a:62:53:c7:a4:d3:25:7d:30:0e:79:
74:d3:33:e3:88:65:77:e1:bf:58:5e:00:b1:e7:08:
68:9d:20:e1:4f:7d:19:b7:c6:a8:1e:14:ce:c6:c6:
6d:b0:e2:e8:30:57:9b:b3:f3:b8:be:9b:f8:31:de:
29:a2:c7:75:f9:ab:a6:d0:51:16:55:94:17:63:a8:
33:91:3e:65:a6:46:aa:8e:2e:92:b1:9e:50:b7:e1:
58:93:61:57:2e:fd:02:62:a7:a6:b1:01:0f:1d:9b:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:E5:F1:E4:49:DA:AD:6F:33:56:A6:08:A4:6B:2F:D2:8E:B4:26
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/61jl8eRJ2q1vM1amCKRrL9KOtCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.92.0/22
185.232.252.0/22
IPv6:
2a05:680::/29
Signature Algorithm: sha256WithRSAEncryption
37:b5:f6:1c:29:37:1d:e9:cc:3e:1f:db:cd:87:4b:d6:22:55:
c2:65:10:0f:6f:9f:29:a1:15:b1:6d:d3:c5:e0:e1:fa:56:c1:
b0:87:74:7f:2c:55:68:22:a5:5c:da:fe:e6:e7:01:88:71:90:
a8:b7:cd:01:cc:45:1c:99:26:b5:d0:ad:29:9d:ce:5a:61:c8:
95:cd:a0:8e:6c:e1:56:5b:7e:d5:f4:31:69:be:db:57:34:a8:
31:ab:15:55:b2:f6:f0:b2:50:fa:e7:47:40:44:b6:1a:0b:0b:
23:eb:7f:20:22:92:38:0b:c0:5a:1b:71:4d:13:74:ee:2b:14:
0f:ca:50:b5:e1:36:33:de:35:0e:76:87:e0:4e:09:97:a7:42:
65:05:ad:2a:cf:99:e8:6e:5d:8d:36:0e:99:03:22:80:7e:31:
ac:e6:2e:c8:9e:66:0a:85:42:4d:c5:32:d1:73:c8:10:b0:72:
df:f5:5e:12:fa:9c:ea:d6:1f:28:b5:4b:d6:86:7a:b2:01:2e:
56:aa:5e:7a:a1:97:bd:cc:f6:3c:6f:e5:8f:5f:8d:6f:31:6b:
0b:c4:b6:6f:6b:52:8d:9d:2e:dd:76:7a:a5:7e:8f:02:b8:a3:
06:e7:01:b5:35:9f:fc:dc:c8:01:22:15:bc:eb:77:fa:d2:4e:
b0:63:5d:8f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwQpgkW4yzwoMspgopbqNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw
ZjgyNmIwHhcNMjMwMTAyMDIxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjU4ZTVmMWU0NDlkYWFkNmYzMzU2YTYwOGE0NmIyZmQyOGViNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0619b9OBMZD3fSSL6Puwm3ohAEY
2g4m7me74ZZfQFcC4YEuqOrFbL/1x0fYOp1WoP9tJXb2VaKP7QoyrqiVwQ+EWb70
AOXBHTHYbwjw3yOj0eLJw+HLIpT14c1aM/jfEwc7WEZTFtb6j04GO3d6w6RCBGmh
eJUxPrbsZ36Pj9XSSOKhllirGN3QlJWqx68V/UPr6mOfZJr+mmJTx6TTJX0wDnl0
0zPjiGV34b9YXgCx5whonSDhT30Zt8aoHhTOxsZtsOLoMFebs/O4vpv4Md4posd1
+aum0FEWVZQXY6gzkT5lpkaqji6SsZ5Qt+FYk2FXLv0CYqemsQEPHZsqKwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOtY5fHkSdqtbzNWpgikay/SjrQmMB8GA1UdIwQY
MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt
YzFlOTQxZTU5YzE0LzEvNjFqbDhlUkoycTF2TTFhbUNLUnJMOUtPdENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0
LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUJcAwQC
uej8MA0EAgACMAcDBQMqBQaAMA0GCSqGSIb3DQEBCwUAA4IBAQA3tfYcKTcd6cw+
H9vNh0vWIlXCZRAPb58poRWxbdPF4OH6VsGwh3R/LFVoIqVc2v7m5wGIcZCot80B
zEUcmSa10K0pnc5aYciVzaCObOFWW37V9DFpvttXNKgxqxVVsvbwslD650dARLYa
Cwsj638gIpI4C8BaG3FNE3TuKxQPylC14TYz3jUOdofgTgmXp0JlBa0qz5nobl2N
Ng6ZAyKAfjGs5i7InmYKhUJNxTLRc8gQsHLf9V4S+pzq1h8otUvWhnqyAS5Wql56
oZe9zPY8b+WPX41vMWsLxLZva1KNnS7ddnqlfo8CuKMG5wG1NZ/83MgBIhW863f6
0k6wY12P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:20 2024 by rpki-client on console-ams.rpki-client.org