Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/eiT9LEtdrgUNUV0u1rmzR7LYPTM.roa
File: eiT9LEtdrgUNUV0u1rmzR7LYPTM.roa (raw, json)
Hash identifier: Tx80Rbp6QreJYZmw+e1ItZHyr0UMbPaJuCRugOanTt8=
Subject key identifier: 7A:24:FD:2C:4B:5D:AE:05:0D:51:5D:2E:D6:B9:B3:47:B2:D8:3D:33
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018CC6B784677BD2DBF234AA043C361B36E7
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/eiT9LEtdrgUNUV0u1rmzR7LYPTM.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 185.84.220.0/22 maxlen: 22
109.122.243.0/24 maxlen: 24
109.122.244.0/22 maxlen: 22
109.122.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:84:67:7b:d2:db:f2:34:aa:04:3c:36:1b:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a24fd2c4b5dae050d515d2ed6b9b347b2d83d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:7c:24:82:22:4d:ae:db:12:97:64:7c:68:
9b:5c:ad:b6:14:ff:f0:9f:63:2a:b2:02:de:5f:c4:
a8:9a:3a:84:96:94:64:0d:29:5c:c6:e0:67:2d:5b:
dd:62:11:e5:cc:08:a6:28:c2:8f:5a:99:5f:c7:95:
e8:f7:e9:24:c6:08:2a:80:06:6e:c3:77:be:cc:52:
79:10:ce:b0:c8:b7:e1:bf:35:10:ce:84:1a:3b:79:
13:6e:ee:1e:ec:aa:40:90:a2:3b:2d:95:22:1a:9f:
d6:67:ab:d1:5e:11:80:6d:73:a0:62:a0:29:56:da:
95:01:af:1c:99:7a:8b:c9:57:2b:d7:49:fa:da:94:
b2:02:33:b3:4d:6b:91:55:eb:4c:21:01:30:02:25:
be:05:30:a1:bb:f9:e7:16:45:17:e7:bc:7d:31:4b:
7d:b9:af:4c:ab:a8:8c:40:08:c3:41:c3:54:85:4c:
fd:13:a9:d2:8b:87:04:a7:1c:ad:c1:66:c3:57:a2:
26:bf:66:47:25:4b:af:e1:bb:ac:35:e7:99:8a:92:
fb:40:cb:b2:be:b2:a7:05:3f:12:7c:d8:fe:6d:6a:
0f:0b:e0:da:89:6c:17:9b:e9:06:01:4f:20:13:ac:
b0:c8:bd:22:f8:93:a1:1e:41:8e:fd:d9:c0:48:7e:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:FD:2C:4B:5D:AE:05:0D:51:5D:2E:D6:B9:B3:47:B2:D8:3D:33
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/eiT9LEtdrgUNUV0u1rmzR7LYPTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.243.0-109.122.251.255
185.84.220.0/22
Signature Algorithm: sha256WithRSAEncryption
86:2a:82:a0:80:a9:3d:9c:32:68:30:c1:bb:92:89:f8:fe:57:
a1:6f:c6:13:bf:14:a7:f1:6b:f0:ed:81:26:6d:4c:c6:ec:3c:
16:f9:e9:93:b8:5d:2c:0b:7b:96:4d:2a:66:bf:32:90:01:e2:
99:10:5b:87:30:f3:5e:37:63:fc:d0:5a:bf:25:53:6d:99:4f:
c7:77:bd:25:c5:4a:3f:8a:1b:75:3e:3f:ab:03:0b:25:55:e3:
aa:5f:cb:64:80:91:e4:82:7b:e5:6e:f0:e0:b6:03:e0:67:83:
29:cb:4e:12:e8:d6:20:cc:63:e8:76:fe:23:8f:60:98:a4:a3:
bc:74:86:b9:a3:10:d7:7f:f8:1d:7b:6a:2e:e8:61:ba:a4:e5:
9e:5e:7f:f3:9c:01:e6:d4:77:fb:71:25:a4:79:9b:1b:7e:26:
cb:b0:f0:1d:bf:cf:8b:21:ff:d3:e0:71:c9:4c:da:d2:dd:fb:
76:29:fa:3b:12:da:45:6c:2b:62:69:c6:55:0d:82:74:6d:a4:
e1:67:b7:61:a9:58:f9:25:4d:e4:90:ff:e2:6e:fc:6b:3c:f1:
b5:b5:c4:67:e9:75:d0:2a:63:23:64:a1:e9:b1:1e:d4:e7:7b:
13:2e:0e:b3:73:02:3b:12:a3:d8:b3:4d:99:57:f4:f9:44:c9:
25:20:7d:85
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzGt4Rne9Lb8jSqBDw2GzbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjQwMTAxMjAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTI0ZmQyYzRiNWRhZTA1MGQ1MTVkMmVkNmI5YjM0N2IyZDgzZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTh8JIIiTa7bEpdkfGibXK22FP/w
n2MqsgLeX8SomjqElpRkDSlcxuBnLVvdYhHlzAimKMKPWplfx5Xo9+kkxggqgAZu
w3e+zFJ5EM6wyLfhvzUQzoQaO3kTbu4e7KpAkKI7LZUiGp/WZ6vRXhGAbXOgYqAp
VtqVAa8cmXqLyVcr10n62pSyAjOzTWuRVetMIQEwAiW+BTChu/nnFkUX57x9MUt9
ua9Mq6iMQAjDQcNUhUz9E6nSi4cEpxytwWbDV6Imv2ZHJUuv4busNeeZipL7QMuy
vrKnBT8SfNj+bWoPC+DaiWwXm+kGAU8gE6ywyL0i+JOhHkGO/dnASH48DwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHok/SxLXa4FDVFdLta5s0ey2D0zMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvZWlUOUxFdGRyZ1VOVVYwdTFybXpSN0xZUFRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABtevMD
BAJtevgDBAK5VNwwDQYJKoZIhvcNAQELBQADggEBAIYqgqCAqT2cMmgwwbuSifj+
V6FvxhO/FKfxa/DtgSZtTMbsPBb56ZO4XSwLe5ZNKma/MpAB4pkQW4cw8143Y/zQ
Wr8lU22ZT8d3vSXFSj+KG3U+P6sDCyVV46pfy2SAkeSCe+Vu8OC2A+BngynLThLo
1iDMY+h2/iOPYJiko7x0hrmjENd/+B17ai7oYbqk5Z5ef/OcAebUd/txJaR5mxt+
Jsuw8B2/z4sh/9PgcclM2tLd+3Yp+jsS2kVsK2JpxlUNgnRtpOFnt2GpWPklTeSQ
/+Ju/Gs88bW1xGfpddAqYyNkoemxHtTnexMuDrNzAjsSo9izTZlX9PlEySUgfYU=
-----END CERTIFICATE-----
Generated at Tue Mar 5 15:06:30 2024 by rpki-client on console-fra.rpki-client.org