Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/RAKm-i8C9bKIAHa5P5Ko4ckl4Ak.roa
File: RAKm-i8C9bKIAHa5P5Ko4ckl4Ak.roa (raw, json)
Hash identifier: 5meT6YNWvsbyNPSyZwhGbpvYAk5EQa41UhbIcjzc/IM=
Subject key identifier: 44:02:A6:FA:2F:02:F5:B2:88:00:76:B9:3F:92:A8:E1:C9:25:E0:09
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 01856D5CF896B018B0D2F568B54B1630F14D
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/RAKm-i8C9bKIAHa5P5Ko4ckl4Ak.roa
Signing time: Sun 01 Jan 2023 12:44:47 +0000
ROA not before: Sun 01 Jan 2023 12:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60627
IP address blocks: 185.124.112.0/22 maxlen: 22
185.143.204.0/22 maxlen: 22
185.113.56.0/22 maxlen: 22
185.140.56.0/22 maxlen: 22
185.145.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f8:96:b0:18:b0:d2:f5:68:b5:4b:16:30:f1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jan 1 12:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4402a6fa2f02f5b2880076b93f92a8e1c925e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:be:d0:f3:44:57:84:f0:92:93:77:9e:63:
0b:b4:c9:aa:f9:b0:b0:10:20:41:67:03:04:8d:d4:
72:1d:7b:02:e2:b2:72:10:68:5e:6d:ad:d6:3e:25:
d4:1e:9e:5e:b3:47:34:49:b4:17:14:26:bb:a9:11:
53:b4:a5:b0:62:e1:84:9d:98:f0:0e:40:f6:81:5b:
2f:64:d7:ab:c6:e1:80:1c:03:36:37:7a:34:e5:cf:
d4:d8:5a:23:1e:1c:48:f4:2d:bc:d2:e7:e6:bf:60:
0c:e5:24:3d:70:7d:fd:e5:33:67:3c:9b:7b:97:1e:
4d:27:96:26:db:9b:fe:7e:92:50:cf:8e:86:d6:7b:
43:cb:76:72:61:bc:10:bf:4c:d4:18:ea:2d:f5:ef:
f5:c1:79:01:3b:27:b9:5c:d6:eb:54:fe:e4:99:01:
d5:16:ca:64:ac:28:f1:3d:27:4e:46:9d:c8:e7:c8:
ab:f7:88:71:e8:2e:c7:76:01:57:60:0f:58:27:a3:
cd:40:6e:bd:44:61:5c:b8:a2:aa:e3:a5:05:52:11:
8e:89:4b:56:e0:84:c1:3a:70:60:d9:fb:7b:6c:91:
85:62:3e:f5:47:83:36:5b:4f:70:e2:c3:4a:20:b4:
60:72:e0:d0:af:f7:42:96:66:a4:e1:68:b7:71:71:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:A6:FA:2F:02:F5:B2:88:00:76:B9:3F:92:A8:E1:C9:25:E0:09
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/RAKm-i8C9bKIAHa5P5Ko4ckl4Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.56.0/22
185.124.112.0/22
185.140.56.0/22
185.143.204.0/22
185.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:cb:eb:95:41:d3:12:10:1a:b0:0f:9d:1c:6d:b6:0e:ca:f9:
e3:48:08:dd:f7:de:1f:d1:0e:70:a7:fc:ce:99:db:29:fc:19:
cb:ed:cb:5e:1f:d0:55:a6:8c:3e:34:09:14:3d:fc:4f:b0:39:
7a:e6:31:fe:57:57:ed:29:d4:e4:d5:14:b8:dc:6a:b5:b7:5c:
fb:ca:67:fb:32:b9:98:80:42:0d:75:21:9a:e8:38:a5:f2:03:
40:2e:4d:53:da:0c:0f:64:47:ee:c6:36:80:70:d7:f4:1a:d9:
0b:f0:b6:72:07:f6:44:26:b5:80:22:01:e1:e4:40:ea:18:1c:
ac:e9:15:bf:26:1d:24:d3:d9:63:32:96:9c:d2:5c:46:94:78:
11:cc:08:49:30:f7:17:14:a6:64:65:e6:f0:9b:f0:6c:49:09:
90:a9:0c:80:c2:16:9b:58:29:4d:9c:a5:b9:d3:01:4e:ef:7b:
41:1a:7e:2d:ea:3e:65:0a:b8:34:8c:92:b5:3b:04:94:98:12:
14:20:f7:3c:16:85:0f:4c:e7:3c:f0:07:e0:85:f7:69:d6:6d:
cf:d6:c9:aa:b6:72:dc:f1:0e:95:5d:88:7f:16:6d:f8:9e:a6:
72:d7:e0:04:25:fb:b9:6e:cc:53:8b:62:3c:16:eb:c6:ab:59:
d4:ed:1e:6e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVtXPiWsBiw0vVotUsWMPFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjMwMTAxMTI0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDAyYTZmYTJmMDJmNWIyODgwMDc2YjkzZjkyYThlMWM5MjVlMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+0PNEV4TwkpN3nmMLtMmq+bCw
ECBBZwMEjdRyHXsC4rJyEGheba3WPiXUHp5es0c0SbQXFCa7qRFTtKWwYuGEnZjw
DkD2gVsvZNerxuGAHAM2N3o05c/U2FojHhxI9C280ufmv2AM5SQ9cH395TNnPJt7
lx5NJ5Ym25v+fpJQz46G1ntDy3ZyYbwQv0zUGOot9e/1wXkBOye5XNbrVP7kmQHV
FspkrCjxPSdORp3I58ir94hx6C7HdgFXYA9YJ6PNQG69RGFcuKKq46UFUhGOiUtW
4ITBOnBg2ft7bJGFYj71R4M2W09w4sNKILRgcuDQr/dClmak4Wi3cXE62wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEQCpvovAvWyiAB2uT+SqOHJJeAJMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUkFLbS1pOEM5YktJQUhhNVA1S280Y2tsNEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCuXE4AwQC
uXxwAwQCuYw4AwQCuY/MAwQCuZEIMA0GCSqGSIb3DQEBCwUAA4IBAQCby+uVQdMS
EBqwD50cbbYOyvnjSAjd994f0Q5wp/zOmdsp/BnL7cteH9BVpow+NAkUPfxPsDl6
5jH+V1ftKdTk1RS43Gq1t1z7ymf7MrmYgEINdSGa6Dil8gNALk1T2gwPZEfuxjaA
cNf0GtkL8LZyB/ZEJrWAIgHh5EDqGBys6RW/Jh0k09ljMpac0lxGlHgRzAhJMPcX
FKZkZebwm/BsSQmQqQyAwhabWClNnKW50wFO73tBGn4t6j5lCrg0jJK1OwSUmBIU
IPc8FoUPTOc88Afghfdp1m3P1smqtnLc8Q6VXYh/Fm34nqZy1+AEJfu5bsxTi2I8
FuvGq1nU7R5u
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:34 2024 by rpki-client on console-ams.rpki-client.org