Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/ay2maZ0g9DahhZpx0YGuRQEYCWs.roa
File: ay2maZ0g9DahhZpx0YGuRQEYCWs.roa (raw, json)
Hash identifier: 8D/YFGIInlkFIE2TfjEG5b8464Ad/EsoR7xLddKS/g8=
Subject key identifier: 6B:2D:A6:69:9D:20:F4:36:A1:85:9A:71:D1:81:AE:45:01:18:09:6B
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 0187C2F92954AD965F791E22C2A9D9ED7D16
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/ay2maZ0g9DahhZpx0YGuRQEYCWs.roa
Signing time: Thu 27 Apr 2023 13:48:41 +0000
ROA not before: Thu 27 Apr 2023 13:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52756
IP address blocks: 149.226.240.0/24 maxlen: 24
149.226.243.0/24 maxlen: 24
149.226.241.0/24 maxlen: 24
149.226.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:f9:29:54:ad:96:5f:79:1e:22:c2:a9:d9:ed:7d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 27 13:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b2da6699d20f436a1859a71d181ae450118096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:2b:2b:98:3d:a7:41:0a:07:92:37:bd:5c:
d9:ea:b8:97:c3:77:0b:9f:f0:73:4a:db:bd:a0:ff:
c9:8f:e1:3d:9a:bf:58:94:38:e4:1a:3f:c3:b9:cd:
a1:06:07:43:f6:95:29:f2:38:38:c4:29:50:24:bb:
93:12:0a:7a:8c:99:d5:1a:d2:01:92:4e:b5:c3:b7:
44:f7:33:08:60:3e:79:66:19:8d:f3:aa:cf:80:b2:
2f:41:ee:bc:4a:d8:1c:fd:6c:0d:da:c0:be:c9:7c:
40:04:2a:07:c4:55:81:9b:cc:0f:a3:e2:92:92:1b:
84:7a:ac:9f:87:8e:5f:89:01:d9:06:f3:60:1a:6f:
8a:41:70:44:b9:ec:7c:4c:11:b1:4d:71:7f:e3:19:
04:a4:72:a3:30:f2:eb:59:e5:8d:6e:25:11:4d:5b:
11:1c:f1:34:fb:36:8b:36:0a:e7:61:a8:7b:75:ed:
a0:8d:1d:ff:25:e8:59:c5:b9:67:49:ba:d3:00:5a:
2e:3f:84:34:f7:e6:e2:7c:41:01:48:ec:4e:31:ee:
04:78:68:cb:d1:5b:35:92:b9:20:ce:3c:ef:99:17:
8d:e0:6a:be:43:09:1e:4c:ee:1a:ee:90:a9:ee:62:
93:82:43:37:5a:3b:b5:e5:d3:96:2e:6e:00:c9:f0:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:A6:69:9D:20:F4:36:A1:85:9A:71:D1:81:AE:45:01:18:09:6B
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/ay2maZ0g9DahhZpx0YGuRQEYCWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.240.0/22
Signature Algorithm: sha256WithRSAEncryption
43:39:b6:f2:37:36:db:3a:63:fc:7f:f0:d0:de:81:be:e5:29:
4d:58:eb:21:57:2d:76:d3:21:dc:08:78:39:31:ce:fe:e0:f2:
40:55:b4:81:5d:84:44:15:86:9a:d0:a8:fc:5a:ba:3d:a7:0d:
39:e6:e3:21:4e:ee:e4:3d:6c:01:78:4a:c8:ca:f7:09:22:e6:
5b:da:6b:9e:4e:a1:fc:30:3e:4a:76:b2:b2:7b:94:af:bf:fa:
a5:cd:fe:24:70:f8:80:eb:03:09:e6:77:3d:d4:30:1e:ea:df:
a8:f7:4c:4d:b0:38:20:f1:df:57:e9:60:11:27:85:75:76:b1:
91:e8:7f:b0:4e:94:25:3c:60:55:d2:3d:99:f4:93:fa:e0:ee:
bd:fb:5d:b0:7e:cc:dc:62:ae:7c:f5:c5:2b:6f:2b:99:82:b8:
62:fd:85:00:88:7c:08:31:cc:37:d1:03:cb:91:89:23:9d:73:
b8:b5:e6:08:d0:e5:b8:4a:9f:b3:65:46:d9:b2:df:dc:85:9c:
b4:e9:f6:ed:73:96:23:f2:ed:b2:c3:bc:88:fa:74:33:d1:c4:
b4:92:9e:21:0f:67:36:d6:97:56:1f:d1:0a:6f:c8:53:ba:f8:
26:5e:3e:85:00:6b:9e:41:b2:d1:52:5c:c6:e4:c8:21:5c:55:
a7:78:3f:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfC+SlUrZZfeR4iwqnZ7X0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi
Mjk5NDAwHhcNMjMwNDI3MTM0ODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjJkYTY2OTlkMjBmNDM2YTE4NTlhNzFkMTgxYWU0NTAxMTgwOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY8rK5g9p0EKB5I3vVzZ6riXw3cL
n/BzStu9oP/Jj+E9mr9YlDjkGj/Duc2hBgdD9pUp8jg4xClQJLuTEgp6jJnVGtIB
kk61w7dE9zMIYD55ZhmN86rPgLIvQe68Stgc/WwN2sC+yXxABCoHxFWBm8wPo+KS
khuEeqyfh45fiQHZBvNgGm+KQXBEuex8TBGxTXF/4xkEpHKjMPLrWeWNbiURTVsR
HPE0+zaLNgrnYah7de2gjR3/JehZxblnSbrTAFouP4Q09+bifEEBSOxOMe4EeGjL
0Vs1krkgzjzvmReN4Gq+QwkeTO4a7pCp7mKTgkM3Wju15dOWLm4AyfBk/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGstpmmdIPQ2oYWacdGBrkUBGAlrMB8GA1UdIwQY
MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt
MTU5M2Q0MDQ1Y2JjLzEvYXkybWFaMGc5RGFoaFpweDBZR3VSUUVZQ1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj
LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCleLwMA0G
CSqGSIb3DQEBCwUAA4IBAQBDObbyNzbbOmP8f/DQ3oG+5SlNWOshVy120yHcCHg5
Mc7+4PJAVbSBXYREFYaa0Kj8Wro9pw055uMhTu7kPWwBeErIyvcJIuZb2mueTqH8
MD5KdrKye5Svv/qlzf4kcPiA6wMJ5nc91DAe6t+o90xNsDgg8d9X6WARJ4V1drGR
6H+wTpQlPGBV0j2Z9JP64O69+12wfszcYq589cUrbyuZgrhi/YUAiHwIMcw30QPL
kYkjnXO4teYI0OW4Sp+zZUbZst/chZy06fbtc5Yj8u2yw7yI+nQz0cS0kp4hD2c2
1pdWH9EKb8hTuvgmXj6FAGueQbLRUlzG5MghXFWneD/k
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:05 2024 by rpki-client on console-ams.rpki-client.org