Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/9jxNqZ1m5S-phxgXLPFGJuBI4fE.roa
File: 9jxNqZ1m5S-phxgXLPFGJuBI4fE.roa (raw, json)
Hash identifier: cb5Q8nDenY0WDoM66jl4Mcb54ZfXILPrgszNpZXsons=
Subject key identifier: F6:3C:4D:A9:9D:66:E5:2F:A9:87:18:17:2C:F1:46:26:E0:48:E1:F1
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 018CC9BCF31E7D883CF9146944656462D606
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/9jxNqZ1m5S-phxgXLPFGJuBI4fE.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47704
IP address blocks: 185.60.120.0/24 maxlen: 24
185.60.120.0/23 maxlen: 23
185.60.123.0/24 maxlen: 24
185.60.122.0/23 maxlen: 23
185.60.122.0/24 maxlen: 24
185.60.121.0/24 maxlen: 24
185.96.200.0/22 maxlen: 22
2a04:e840::/29 maxlen: 29
2a06:140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f3:1e:7d:88:3c:f9:14:69:44:65:64:62:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63c4da99d66e52fa98718172cf14626e048e1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:26:22:e6:f9:1c:0d:5a:31:27:4d:84:34:
a8:74:54:e2:7f:b3:7c:80:37:ef:ad:3f:f6:96:4a:
5d:99:62:bb:f1:fc:b3:2a:b5:32:ef:96:ea:e4:98:
ae:32:1a:67:e7:ed:94:6c:86:7f:a4:33:9e:c1:1e:
5c:b8:1a:f9:ff:39:ad:da:0a:01:08:82:7d:44:31:
49:ab:c9:60:bc:ea:09:1f:6f:f3:2a:6e:57:13:8d:
2e:2a:22:86:ff:50:c5:8e:4f:5e:8f:b7:0b:a3:5c:
d2:a0:61:b1:f1:63:67:02:31:34:71:6b:7e:49:9d:
43:61:d6:ad:d6:90:33:7c:8f:93:0e:5d:bd:03:a1:
82:32:87:88:13:d5:f6:89:12:81:50:3b:fa:81:84:
42:b6:d3:28:50:e3:58:3f:48:68:2d:41:7f:61:46:
f2:36:67:d1:85:23:9c:17:8e:31:65:db:74:1a:01:
cd:f6:ae:2c:3d:3e:c1:c2:01:2b:67:88:bf:c0:29:
3d:43:03:da:f8:8c:01:2b:c5:e0:f4:46:e8:e5:9c:
d8:1f:26:66:13:d2:b7:0a:36:d3:2b:70:66:69:f2:
de:17:d2:c6:1d:74:11:f3:19:4c:ec:13:7b:c8:d0:
ba:f3:6f:9f:09:9d:85:14:a1:e6:f4:e4:5c:b4:22:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:4D:A9:9D:66:E5:2F:A9:87:18:17:2C:F1:46:26:E0:48:E1:F1
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/9jxNqZ1m5S-phxgXLPFGJuBI4fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.120.0/22
185.96.200.0/22
IPv6:
2a04:e840::/29
2a06:140::/29
Signature Algorithm: sha256WithRSAEncryption
63:d5:95:8e:cf:ac:5f:ec:36:67:d5:45:23:f2:2c:01:28:1e:
98:76:41:b7:13:a2:47:ed:16:c0:a6:55:d8:f6:27:5a:7c:f9:
f8:00:d7:7d:1a:bb:62:cb:3e:ac:c3:c8:47:3f:8f:58:44:3c:
02:f3:ee:9f:06:82:37:15:41:bd:94:6d:52:3c:7b:e1:bd:22:
7b:ef:c1:94:78:33:68:d0:75:8b:bb:44:99:24:b5:df:3c:f0:
32:fd:b0:49:ff:6b:49:b0:9d:ba:34:bb:ca:4c:c0:91:89:9f:
c4:11:e4:3b:88:9b:e4:71:76:f0:48:3a:0f:05:50:0c:3a:44:
d5:4a:1b:d4:5e:04:f4:aa:a1:5c:4e:58:52:3d:0f:ee:47:db:
b1:1c:ee:9f:75:ef:c0:24:3f:08:88:35:b7:db:38:7c:1b:2e:
52:87:3e:45:a3:80:15:38:b7:e1:ec:1e:67:f9:82:9b:13:a7:
b3:41:1b:48:cf:08:f9:69:4b:2b:f0:ef:6f:48:3c:81:39:1e:
17:fc:f5:d3:39:44:be:7f:e5:b8:a9:6b:ef:af:0c:e3:ee:bd:
0a:cf:08:4d:57:31:89:5a:0c:d6:3d:a2:e7:65:61:0b:ac:5f:
32:e5:4d:a1:f0:2e:07:ef:80:93:91:2f:8e:82:1c:55:5a:f9:
04:17:2e:46
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzJvPMefYg8+RRpRGVkYtYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjQwMTAyMTAzNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNjNGRhOTlkNjZlNTJmYTk4NzE4MTcyY2YxNDYyNmUwNDhlMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGMmIub5HA1aMSdNhDSodFTif7N8
gDfvrT/2lkpdmWK78fyzKrUy75bq5JiuMhpn5+2UbIZ/pDOewR5cuBr5/zmt2goB
CIJ9RDFJq8lgvOoJH2/zKm5XE40uKiKG/1DFjk9ej7cLo1zSoGGx8WNnAjE0cWt+
SZ1DYdat1pAzfI+TDl29A6GCMoeIE9X2iRKBUDv6gYRCttMoUONYP0hoLUF/YUby
NmfRhSOcF44xZdt0GgHN9q4sPT7BwgErZ4i/wCk9QwPa+IwBK8Xg9Ebo5ZzYHyZm
E9K3CjbTK3BmafLeF9LGHXQR8xlM7BN7yNC682+fCZ2FFKHm9ORctCLgxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPY8TamdZuUvqYcYFyzxRibgSOHxMB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvOWp4TnFaMW01Uy1waHhnWExQRkdKdUJJNGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuTx4AwQC
uWDIMBQEAgACMA4DBQMqBOhAAwUDKgYBQDANBgkqhkiG9w0BAQsFAAOCAQEAY9WV
js+sX+w2Z9VFI/IsASgemHZBtxOiR+0WwKZV2PYnWnz5+ADXfRq7Yss+rMPIRz+P
WEQ8AvPunwaCNxVBvZRtUjx74b0ie+/BlHgzaNB1i7tEmSS13zzwMv2wSf9rSbCd
ujS7ykzAkYmfxBHkO4ib5HF28Eg6DwVQDDpE1Uob1F4E9KqhXE5YUj0P7kfbsRzu
n3XvwCQ/CIg1t9s4fBsuUoc+RaOAFTi34eweZ/mCmxOns0EbSM8I+WlLK/Dvb0g8
gTkeF/z10zlEvn/luKlr768M4+69Cs8ITVcxiVoM1j2i52VhC6xfMuVNofAuB++A
k5EvjoIcVVr5BBcuRg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:35 2025 by rpki-client