Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/fOD6YO5sOBjXC8RagarkQusDCUc.roa
File: fOD6YO5sOBjXC8RagarkQusDCUc.roa (raw, json)
Hash identifier: 7cim+AfRVtnoDcj9xkVdhWVb6X2SOOE0IGJLo39NDAs=
Subject key identifier: 7C:E0:FA:60:EE:6C:38:18:D7:0B:C4:5A:81:AA:E4:42:EB:03:09:47
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 018A4158F8F139EC8BB9BC60720E567F9763
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/fOD6YO5sOBjXC8RagarkQusDCUc.roa
Signing time: Tue 29 Aug 2023 12:51:04 +0000
ROA not before: Tue 29 Aug 2023 12:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200713
IP address blocks: 185.66.108.0/22 maxlen: 22
185.117.168.0/22 maxlen: 22
2a0e:f0c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:58:f8:f1:39:ec:8b:b9:bc:60:72:0e:56:7f:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Aug 29 12:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ce0fa60ee6c3818d70bc45a81aae442eb030947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:19:c9:b9:4e:5a:0e:2e:08:4e:88:61:b7:
70:13:c2:fe:99:4a:51:65:05:d1:1c:02:a8:e3:e8:
65:0e:c1:c8:b1:1e:41:59:de:1a:48:de:bc:1a:46:
f5:89:31:5d:f7:2d:e5:a5:76:f7:f4:7f:2c:3b:87:
8b:9d:23:64:c1:8c:13:90:d2:e6:cc:02:a1:88:f3:
12:26:fc:a8:c7:f3:fa:c9:79:37:38:0d:74:db:57:
f2:b5:01:26:9b:af:c9:db:bc:aa:95:41:e0:28:88:
7a:a6:77:22:89:ac:8c:d3:c0:f3:37:ee:de:6e:80:
3f:12:17:cd:28:ee:60:9c:da:2d:96:be:2a:dd:1f:
81:18:fb:0b:2d:d0:7b:7f:a0:6e:f6:3d:95:7b:57:
1b:a2:7f:83:72:18:63:2b:17:c5:9a:5d:b0:c2:9f:
80:c1:3f:e0:a9:2e:32:6d:c5:2e:f3:5f:b8:39:d8:
eb:13:f9:9e:5a:05:95:46:9a:d0:ec:f6:5a:e9:63:
cc:50:62:85:55:f2:e4:a7:24:61:60:d3:29:8b:3b:
99:29:c9:77:77:d4:13:f8:96:ca:6e:00:95:14:03:
5f:bc:0c:19:76:0f:68:54:92:c1:87:82:c6:dc:92:
9f:e0:29:60:49:6d:1c:4f:33:b9:54:cc:14:be:8d:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:FA:60:EE:6C:38:18:D7:0B:C4:5A:81:AA:E4:42:EB:03:09:47
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/fOD6YO5sOBjXC8RagarkQusDCUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.108.0/22
185.117.168.0/22
IPv6:
2a0e:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a7:e0:c1:68:56:96:af:37:0d:f3:fe:42:17:ce:25:6b:82:
b2:78:27:70:52:7f:ee:e1:79:61:29:cc:49:9a:f2:bc:48:98:
14:ba:0b:eb:ad:9b:9a:b0:b8:e6:45:06:8b:8e:45:9f:30:33:
6b:cc:c3:da:78:33:28:21:c4:6d:23:3e:60:a4:89:5b:08:94:
04:43:d4:31:9b:8f:1e:31:1a:f2:f2:71:00:28:9f:34:67:47:
69:e0:8e:f3:fe:dd:01:18:c3:1a:5e:b6:d6:da:da:37:27:15:
f6:26:d0:2e:fd:c2:47:cb:a8:b6:83:94:16:eb:92:f3:46:2c:
9f:da:46:ef:ca:da:40:aa:93:d6:cd:2f:0e:d2:b1:da:7b:a2:
ef:4c:74:e0:50:53:49:f2:61:88:61:2d:ee:4a:dd:5a:b4:fe:
f3:bc:07:48:c2:8f:ac:67:9f:32:df:55:e7:1a:83:d7:fa:a1:
d4:ae:3e:6b:b6:e9:6e:18:fb:2c:8c:a0:2a:db:cc:ca:41:08:
3a:34:84:46:c6:11:0e:7d:ed:44:13:85:95:f2:76:22:cc:c1:
a9:31:a7:d3:44:fc:aa:9b:3d:60:68:2e:72:1a:47:fb:50:4a:
62:8a:f1:94:df:1c:2e:c1:ca:bb:2b:c2:ab:82:01:d3:c9:9f:
55:c9:fa:42
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYpBWPjxOeyLubxgcg5Wf5djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm
MzVkNzIwHhcNMjMwODI5MTI1MTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2UwZmE2MGVlNmMzODE4ZDcwYmM0NWE4MWFhZTQ0MmViMDMwOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkUZyblOWg4uCE6IYbdwE8L+mUpR
ZQXRHAKo4+hlDsHIsR5BWd4aSN68Gkb1iTFd9y3lpXb39H8sO4eLnSNkwYwTkNLm
zAKhiPMSJvyox/P6yXk3OA1021fytQEmm6/J27yqlUHgKIh6pnciiayM08DzN+7e
boA/EhfNKO5gnNotlr4q3R+BGPsLLdB7f6Bu9j2Ve1cbon+DchhjKxfFml2wwp+A
wT/gqS4ybcUu81+4OdjrE/meWgWVRprQ7PZa6WPMUGKFVfLkpyRhYNMpizuZKcl3
d9QT+JbKbgCVFANfvAwZdg9oVJLBh4LG3JKf4ClgSW0cTzO5VMwUvo360wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHzg+mDubDgY1wvEWoGq5ELrAwlHMB8GA1UdIwQY
MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt
ZWRjMzM2NjUyZWQ3LzEvZk9ENllPNXNPQmpYQzhSYWdhcmtRdXNEQ1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3
LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUJsAwQC
uXWoMA0EAgACMAcDBQMqDvDAMA0GCSqGSIb3DQEBCwUAA4IBAQAbp+DBaFaWrzcN
8/5CF84la4KyeCdwUn/u4XlhKcxJmvK8SJgUugvrrZuasLjmRQaLjkWfMDNrzMPa
eDMoIcRtIz5gpIlbCJQEQ9Qxm48eMRry8nEAKJ80Z0dp4I7z/t0BGMMaXrbW2to3
JxX2JtAu/cJHy6i2g5QW65LzRiyf2kbvytpAqpPWzS8O0rHae6LvTHTgUFNJ8mGI
YS3uSt1atP7zvAdIwo+sZ58y31XnGoPX+qHUrj5rtuluGPssjKAq28zKQQg6NIRG
xhEOfe1EE4WV8nYizMGpMafTRPyqmz1gaC5yGkf7UEpiivGU3xwuwcq7K8KrggHT
yZ9VyfpC
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:00 2024 by rpki-client on console-ams.rpki-client.org