Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/deRt5wnae8KUSMKvo9MT4JRB5oU.roa
File: deRt5wnae8KUSMKvo9MT4JRB5oU.roa (raw, json)
Hash identifier: dPH1pmbgx/R03+5LHV8nprla8RoDccLnde/EtCPS7xo=
Subject key identifier: 75:E4:6D:E7:09:DA:7B:C2:94:48:C2:AF:A3:D3:13:E0:94:41:E6:85
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0186070CD8861992BBFE4EF85B35E5DE1E2C
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/deRt5wnae8KUSMKvo9MT4JRB5oU.roa
Signing time: Tue 31 Jan 2023 08:58:47 +0000
ROA not before: Tue 31 Jan 2023 08:58:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198440
IP address blocks: 185.102.148.0/22 maxlen: 22
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
62.64.144.0/20 maxlen: 24
217.168.248.0/21 maxlen: 21
2a05:87c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Feb 2023 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:0c:d8:86:19:92:bb:fe:4e:f8:5b:35:e5:de:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 31 08:58:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e46de709da7bc29448c2afa3d313e09441e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:21:cb:6a:61:cb:78:2b:db:8b:ba:65:b1:
d0:ba:0d:6e:3e:80:17:df:6b:e5:3f:9d:58:cb:50:
9c:64:3d:a6:f9:4b:86:07:ec:a9:0a:63:c1:b4:f7:
05:30:5a:44:ca:ce:39:bb:a2:c8:d8:50:b3:f6:1c:
94:79:86:4c:4b:dd:ea:e7:12:80:83:07:6d:32:b7:
4a:cd:f6:45:9c:d6:0b:55:5c:58:dc:91:8e:fe:66:
1f:41:c7:19:e3:94:f3:29:fe:7f:8d:e8:b7:93:16:
fc:e3:ce:23:7e:c6:74:5c:42:ec:10:39:ee:9b:30:
99:39:d9:67:4a:07:e6:e8:df:2c:87:75:3d:aa:5b:
c7:30:35:de:15:ca:96:ea:f4:e9:d0:fe:8d:63:20:
2d:fc:c4:a7:5d:dd:60:03:48:e1:92:63:77:20:d4:
7b:27:0d:b5:95:50:26:26:87:ed:e7:a4:60:a9:4f:
29:e1:77:02:2f:d3:08:a1:90:be:be:ea:58:a8:00:
e6:9d:3f:28:b0:78:d0:77:7d:10:8b:8b:38:b6:04:
28:f6:66:6b:8d:19:6e:0a:5a:8b:f9:d0:88:fe:e9:
9a:e1:05:e2:3b:6e:1b:6b:1c:6b:85:fc:66:07:3e:
1b:f8:17:21:e5:a6:13:e1:d8:b0:00:f8:36:ab:f7:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:6D:E7:09:DA:7B:C2:94:48:C2:AF:A3:D3:13:E0:94:41:E6:85
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/deRt5wnae8KUSMKvo9MT4JRB5oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
62.64.128.0-62.64.139.255
62.64.144.0/20
185.102.148.0/22
188.74.64.0/19
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:3f:b7:34:e5:ce:ea:f9:7b:2c:fd:0d:4b:7f:58:e8:73:82:
23:ba:e5:da:5e:38:fd:c0:46:a9:aa:fc:e9:52:ab:ba:c7:45:
57:4f:18:15:fa:a2:fb:36:72:31:e5:74:d5:2c:a4:7d:cb:72:
1f:ed:29:1d:c6:ef:c0:dc:50:8a:94:04:b4:47:0c:b2:39:02:
bf:0e:56:da:7e:07:ce:2e:ba:84:ee:53:55:77:3e:ab:a5:5f:
12:2b:b3:07:16:84:9c:39:8c:a4:54:43:6a:4f:b2:47:e5:5b:
6c:61:1b:ce:53:4c:14:b6:58:6b:0b:51:6c:b6:dc:af:42:59:
c5:56:b2:28:a4:09:3a:46:b5:30:03:04:b7:27:64:7b:8b:97:
22:3f:63:e4:6e:38:90:bb:2a:0e:22:81:c1:bb:f9:3d:13:51:
9b:75:9e:e7:93:8e:22:3e:aa:0a:ae:9a:62:aa:d6:15:b3:a5:
af:2c:9f:8a:77:80:c9:3d:13:fb:61:26:d6:11:be:76:7a:c1:
1c:21:1c:93:3e:44:cf:b7:0d:dc:7c:62:e3:be:bf:24:4b:62:
f7:03:95:f7:8c:5a:24:34:d6:34:54:4a:eb:b5:7e:3d:25:bb:
ef:4b:4d:a4:ba:a4:c5:6d:94:49:a3:fa:ae:ce:6e:63:a0:00:
f4:c9:06:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAYYHDNiGGZK7/k74WzXl3h4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjMwMTMxMDg1ODQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWU0NmRlNzA5ZGE3YmMyOTQ0OGMyYWZhM2QzMTNlMDk0NDFlNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyEhy2phy3gr24u6ZbHQug1uPoAX
32vlP51Yy1CcZD2m+UuGB+ypCmPBtPcFMFpEys45u6LI2FCz9hyUeYZMS93q5xKA
gwdtMrdKzfZFnNYLVVxY3JGO/mYfQccZ45TzKf5/jei3kxb8484jfsZ0XELsEDnu
mzCZOdlnSgfm6N8sh3U9qlvHMDXeFcqW6vTp0P6NYyAt/MSnXd1gA0jhkmN3INR7
Jw21lVAmJoft56RgqU8p4XcCL9MIoZC+vupYqADmnT8osHjQd30Qi4s4tgQo9mZr
jRluClqL+dCI/uma4QXiO24baxxrhfxmBz4b+Bch5aYT4diwAPg2q/cv1QIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFHXkbecJ2nvClEjCr6PTE+CUQeaFMB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvZGVSdDV3bmFlOEtVU01Ldm85TVQ0SlJCNW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwQAJTDgMAwD
BAAlMOUDBAAlMOYwDAMEBz5AgAMEAj5AiAMEBD5AkAMEArlmlAMEBbxKQAMEA9mo
+DANBAIAAjAHAwUDKgWHwDANBgkqhkiG9w0BAQsFAAOCAQEACD+3NOXO6vl7LP0N
S39Y6HOCI7rl2l44/cBGqar86VKrusdFV08YFfqi+zZyMeV01SykfctyH+0pHcbv
wNxQipQEtEcMsjkCvw5W2n4Hzi66hO5TVXc+q6VfEiuzBxaEnDmMpFRDak+yR+Vb
bGEbzlNMFLZYawtRbLbcr0JZxVayKKQJOka1MAMEtydke4uXIj9j5G44kLsqDiKB
wbv5PRNRm3We55OOIj6qCq6aYqrWFbOlryyfineAyT0T+2Em1hG+dnrBHCEckz5E
z7cN3Hxi476/JEti9wOV94xaJDTWNFRK67V+PSW770tNpLqkxW2USaP6rs5uY6AA
9MkGTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org