Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/SozSzXY9g31NLod-plEMrizA5z0.roa
File: SozSzXY9g31NLod-plEMrizA5z0.roa (raw, json)
Hash identifier: uJa3ZaxRHF0NpA0cmbm1+My52av0/+uukEmhcA6YyPg=
Subject key identifier: 4A:8C:D2:CD:76:3D:83:7D:4D:2E:87:7E:A6:51:0C:AE:2C:C0:E7:3D
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 01856D6F6A511B91903AF63B983348021E4E
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/SozSzXY9g31NLod-plEMrizA5z0.roa
Signing time: Sun 01 Jan 2023 13:04:56 +0000
ROA not before: Sun 01 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39396
IP address blocks: 185.251.39.0/24 maxlen: 24
85.187.216.0/23 maxlen: 24
185.138.176.0/22 maxlen: 24
2a10:bac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:6a:51:1b:91:90:3a:f6:3b:98:33:48:02:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Jan 1 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a8cd2cd763d837d4d2e877ea6510cae2cc0e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:26:b9:c3:8c:38:b7:9d:32:46:cf:51:33:
92:b8:f3:34:a3:df:a5:11:e7:f2:cd:63:f4:44:49:
df:bf:a3:1d:a7:f7:64:62:22:16:6b:7a:3f:d8:03:
bc:69:81:61:3e:d7:5d:12:c2:b7:28:bd:6f:83:67:
da:43:1e:4e:7f:e8:83:fa:53:98:40:9f:d4:8f:70:
90:bd:4b:a6:2c:b9:2f:05:15:40:8c:15:d9:cf:97:
49:a3:f4:96:5c:a9:c6:f2:f9:24:d6:46:2e:69:ef:
79:65:db:db:e8:2b:b2:5b:43:ff:3f:81:f7:d3:13:
a8:ab:ec:fa:59:5c:90:9e:4c:64:f0:b8:35:db:26:
7b:31:43:59:fb:59:fa:c2:0c:f0:a9:00:3c:e2:0f:
97:ba:ca:73:f7:3b:dc:46:f4:2b:41:9f:00:90:91:
16:2c:59:e9:89:35:ff:28:17:48:f5:3b:b8:c4:7d:
3a:f7:d9:ac:7c:a0:6f:b3:6a:97:9f:21:bb:53:5b:
8a:13:f8:55:4d:48:88:a1:55:56:df:74:90:67:a3:
58:93:1f:3d:60:fc:1a:d5:68:73:03:d1:3e:79:33:
83:64:14:3f:cd:fd:56:57:07:e5:7d:1b:c0:f0:c3:
d7:6e:a1:2d:41:df:ca:36:fb:94:0b:c5:7a:1b:09:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:D2:CD:76:3D:83:7D:4D:2E:87:7E:A6:51:0C:AE:2C:C0:E7:3D
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/SozSzXY9g31NLod-plEMrizA5z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.216.0/23
185.138.176.0/22
185.251.39.0/24
IPv6:
2a10:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
41:ee:77:65:56:24:dc:ae:20:4d:4e:0b:84:a2:1e:5c:20:be:
4b:36:ae:50:dd:f9:dd:1d:94:a7:03:cf:6b:f6:4d:33:d8:98:
2b:78:ba:b6:1e:89:68:2c:dc:3d:36:52:c2:d2:7f:bd:1e:f9:
cd:02:30:23:f9:21:a9:0a:21:81:46:8a:18:54:5f:5a:4a:29:
81:ec:88:d5:f1:92:51:70:0a:f6:05:a0:fb:29:ba:52:fd:a1:
b6:6d:4c:98:2b:8f:11:55:78:50:6e:89:58:7c:7b:5c:b8:b9:
c3:02:0a:d5:40:fd:f6:fe:87:82:c5:11:8f:b8:74:b5:0d:cb:
fb:60:f6:ba:d8:5b:a6:56:4b:7c:ad:a2:8d:17:1d:43:c1:97:
8a:7a:09:ca:c0:5f:10:4e:b1:87:91:36:a7:7b:fb:83:4e:7b:
27:05:c1:4c:0b:e9:f0:b6:cb:e6:f7:e1:93:f8:28:96:45:fb:
9f:ff:1f:04:cd:06:30:25:3b:53:a4:d7:89:58:a9:1a:08:c4:
05:89:a1:c3:25:4c:2a:4d:a8:d7:9e:7c:25:a7:de:0f:0c:12:
0b:44:8e:c8:0b:63:03:1d:6c:8c:0f:ee:36:13:3d:4f:2b:32:
8a:08:90:ee:41:bb:68:bb:ae:b6:63:76:cb:72:d7:a1:3c:de:
86:9e:44:e7
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVtb2pRG5GQOvY7mDNIAh5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjQzMGQ5YWQ5Y2I5YzQyYzRiZDY2OTBlOWY1ODEyYTQ1
N2EwMmYwHhcNMjMwMTAxMTMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YThjZDJjZDc2M2Q4MzdkNGQyZTg3N2VhNjUxMGNhZTJjYzBlNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiQmucOMOLedMkbPUTOSuPM0o9+l
EefyzWP0REnfv6Mdp/dkYiIWa3o/2AO8aYFhPtddEsK3KL1vg2faQx5Of+iD+lOY
QJ/Uj3CQvUumLLkvBRVAjBXZz5dJo/SWXKnG8vkk1kYuae95Zdvb6CuyW0P/P4H3
0xOoq+z6WVyQnkxk8Lg12yZ7MUNZ+1n6wgzwqQA84g+Xuspz9zvcRvQrQZ8AkJEW
LFnpiTX/KBdI9Tu4xH0699msfKBvs2qXnyG7U1uKE/hVTUiIoVVW33SQZ6NYkx89
YPwa1WhzA9E+eTODZBQ/zf1WVwflfRvA8MPXbqEtQd/KNvuUC8V6GwnSWwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFEqM0s12PYN9TS6HfqZRDK4swOc9MB8GA1UdIwQY
MBaAFIT0MNmtnLnELEvWaQ6fWBKkV6AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQt
YjkwNTZlYmJjNTc2LzEvU296U3pYWTlnMzFOTG9kLXBsRU1yaXpBNXowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQtYjkwNTZlYmJjNTc2
LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBVbvYAwQC
uYqwAwQAufsnMA0EAgACMAcDBQAqELrAMA0GCSqGSIb3DQEBCwUAA4IBAQBB7ndl
ViTcriBNTguEoh5cIL5LNq5Q3fndHZSnA89r9k0z2JgreLq2HoloLNw9NlLC0n+9
HvnNAjAj+SGpCiGBRooYVF9aSimB7IjV8ZJRcAr2BaD7KbpS/aG2bUyYK48RVXhQ
bolYfHtcuLnDAgrVQP32/oeCxRGPuHS1Dcv7YPa62FumVkt8raKNFx1DwZeKegnK
wF8QTrGHkTane/uDTnsnBcFMC+nwtsvm9+GT+CiWRfuf/x8EzQYwJTtTpNeJWKka
CMQFiaHDJUwqTajXnnwlp94PDBILRI7IC2MDHWyMD+42Ez1PKzKKCJDuQbtou662
Y3bLctehPN6GnkTn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:47 2024 by rpki-client on console-fra.rpki-client.org