Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tK-vKBdVTTxb3PFpznoGs9PQL_g.roa
File: tK-vKBdVTTxb3PFpznoGs9PQL_g.roa (raw, json)
Hash identifier: CuvTl5q+Ap/oI59fJGrNwJXJMI9ONZVmk6BAqj9HPqU=
Subject key identifier: B4:AF:AF:28:17:55:4D:3C:5B:DC:F1:69:CE:7A:06:B3:D3:D0:2F:F8
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018BF09D976003305197C7B1D7736DEF8623
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tK-vKBdVTTxb3PFpznoGs9PQL_g.roa
Signing time: Tue 21 Nov 2023 06:42:21 +0000
ROA not before: Tue 21 Nov 2023 06:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.196.117.0/24 maxlen: 24
185.68.22.0/24 maxlen: 24
85.209.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:9d:97:60:03:30:51:97:c7:b1:d7:73:6d:ef:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Nov 21 06:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4afaf2817554d3c5bdcf169ce7a06b3d3d02ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:b3:8c:50:58:11:76:9e:d6:51:ac:c5:42:
24:43:e5:4a:30:d4:03:5e:c4:b9:2d:52:0f:a8:55:
94:4a:fc:d3:7e:fe:1c:fa:85:9e:31:fa:8a:bb:16:
1c:f5:98:7c:ba:f4:36:fa:5b:6a:71:91:5b:a2:4d:
36:97:c2:c8:df:fc:d7:f8:15:2f:54:d3:fa:29:97:
4b:47:ed:11:94:89:8c:34:14:86:cd:de:b6:15:be:
10:67:13:9e:aa:36:3f:22:57:ab:c1:cc:2b:82:09:
2b:5f:8c:89:7a:cc:0a:d5:9d:c6:5c:34:53:e9:03:
30:dd:37:89:4b:f3:14:e2:40:ce:09:a6:07:98:96:
67:7c:ab:4f:07:b2:bf:8d:cb:2f:0a:90:42:56:17:
d5:fb:05:6f:72:e6:3f:c9:70:84:42:bf:c3:ad:fb:
f3:14:00:64:73:60:3a:03:29:cd:64:7d:b1:02:31:
29:9d:7f:a1:c2:65:68:e9:a1:4d:01:47:a4:a6:66:
ba:d8:ce:49:a2:83:0e:c2:2c:65:f1:76:13:5f:3e:
00:21:87:d9:2e:e1:52:69:d1:12:97:15:e9:08:cb:
b4:c3:e8:7d:22:d1:29:0b:f8:7e:81:f6:87:ba:ef:
9f:93:8b:8e:f7:9b:c6:12:09:c1:0c:e9:6d:17:99:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:AF:28:17:55:4D:3C:5B:DC:F1:69:CE:7A:06:B3:D3:D0:2F:F8
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tK-vKBdVTTxb3PFpznoGs9PQL_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.8.0/24
185.68.22.0/24
185.196.117.0/24
Signature Algorithm: sha256WithRSAEncryption
10:27:8c:44:b0:1f:5c:84:84:3e:cd:22:7d:db:00:75:3a:9a:
7e:88:33:d3:34:3f:d4:70:0f:77:3e:f8:9a:9e:18:4b:75:cd:
24:9c:7d:bb:50:b9:cd:e7:42:cd:d0:d7:06:76:de:68:9c:bd:
a3:28:da:23:a0:82:c4:07:55:09:5b:09:4e:a3:a8:00:ee:61:
6b:aa:ba:60:24:6f:25:f0:38:e1:53:a8:62:7e:00:78:c7:8f:
91:89:e5:3a:85:ff:2e:a0:48:ea:eb:ec:a1:40:35:f9:97:c4:
c2:6c:e6:19:64:a1:aa:b6:ea:f3:20:05:ae:60:0e:a9:fe:07:
6f:47:92:71:e7:e2:89:e4:9a:99:b7:47:c0:6e:24:a2:80:e6:
5f:3e:36:b8:db:f4:44:6b:2e:79:e9:f0:3c:25:93:2c:a0:96:
6e:7a:83:b9:c2:df:d6:73:84:b0:eb:19:a7:48:06:40:b8:ed:
c1:7b:44:d5:c4:85:f7:b8:8b:64:d8:a2:88:65:8b:08:37:c8:
30:3a:bc:de:8e:4a:60:01:80:ff:a4:c4:fb:f5:6b:00:5a:11:
7a:ec:f7:e0:9a:08:5f:91:c3:27:db:fc:32:72:47:d6:46:64:
28:78:1d:b7:49:f3:11:dd:12:43:2f:1d:5a:fc:e1:ff:62:da:
59:ff:49:35
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvwnZdgAzBRl8ex13Nt74YjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMxMTIxMDY0MjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGFmYWYyODE3NTU0ZDNjNWJkY2YxNjljZTdhMDZiM2QzZDAyZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyyzjFBYEXae1lGsxUIkQ+VKMNQD
XsS5LVIPqFWUSvzTfv4c+oWeMfqKuxYc9Zh8uvQ2+ltqcZFbok02l8LI3/zX+BUv
VNP6KZdLR+0RlImMNBSGzd62Fb4QZxOeqjY/IlerwcwrggkrX4yJeswK1Z3GXDRT
6QMw3TeJS/MU4kDOCaYHmJZnfKtPB7K/jcsvCpBCVhfV+wVvcuY/yXCEQr/Drfvz
FABkc2A6AynNZH2xAjEpnX+hwmVo6aFNAUekpma62M5JooMOwixl8XYTXz4AIYfZ
LuFSadESlxXpCMu0w+h9ItEpC/h+gfaHuu+fk4uO95vGEgnBDOltF5nmKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLSvrygXVU08W9zxac56BrPT0C/4MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvdEstdktCZFZUVHhiM1BGcHpub0dzOVBRTF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVdEIAwQA
uUQWAwQAucR1MA0GCSqGSIb3DQEBCwUAA4IBAQAQJ4xEsB9chIQ+zSJ92wB1Opp+
iDPTND/UcA93PvianhhLdc0knH27ULnN50LN0NcGdt5onL2jKNojoILEB1UJWwlO
o6gA7mFrqrpgJG8l8DjhU6hifgB4x4+RieU6hf8uoEjq6+yhQDX5l8TCbOYZZKGq
turzIAWuYA6p/gdvR5Jx5+KJ5JqZt0fAbiSigOZfPja42/REay556fA8JZMsoJZu
eoO5wt/Wc4Sw6xmnSAZAuO3Be0TVxIX3uItk2KKIZYsIN8gwOrzejkpgAYD/pMT7
9WsAWhF67PfgmghfkcMn2/wyckfWRmQoeB23SfMR3RJDLx1a/OH/YtpZ/0k1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org