Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/t4-is_JnE6QUUqEIogwkNc6CmNk.roa
File: t4-is_JnE6QUUqEIogwkNc6CmNk.roa (raw, json)
Hash identifier: uDN9LKtNq/w5qLwYVoC7aehiBuByUmLf3c+OAxCbZzY=
Subject key identifier: B7:8F:A2:B3:F2:67:13:A4:14:52:A1:08:A2:0C:24:35:CE:82:98:D9
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 01879E8C83EE960876884867F437A48891AE
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/t4-is_JnE6QUUqEIogwkNc6CmNk.roa
Signing time: Thu 20 Apr 2023 12:03:41 +0000
ROA not before: Thu 20 Apr 2023 12:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 07:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:8c:83:ee:96:08:76:88:48:67:f4:37:a4:88:91:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 20 12:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78fa2b3f26713a41452a108a20c2435ce8298d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:78:35:b6:34:87:78:3c:6b:24:6b:90:73:
e6:a4:29:96:97:fd:fc:ea:f8:31:2f:f8:38:c5:8c:
40:a9:92:f6:6f:53:83:9a:e6:0a:a7:d5:f6:4b:39:
ae:18:97:5c:94:09:38:89:53:eb:57:ed:aa:85:c7:
e1:4e:8c:73:da:6c:47:74:d2:b7:55:53:f5:38:d6:
5e:bc:b0:77:4e:08:78:46:08:5b:c0:99:80:5d:51:
be:a7:3b:2e:79:53:1e:bf:32:2f:c7:2e:e0:a7:85:
66:65:d5:9b:ce:f2:7a:2b:32:20:ac:93:91:4d:32:
ae:b0:b3:96:ca:b6:17:67:d9:cd:e1:d1:6a:f9:9c:
40:53:d1:73:0a:23:16:c2:bb:b0:f0:97:a0:68:41:
8e:82:09:54:af:8a:ab:2f:e8:99:a8:a2:b5:43:72:
1d:b1:2d:19:c7:8a:a1:1d:8a:8c:6b:41:5f:e1:b1:
db:cb:7e:8a:b0:71:99:53:16:45:89:be:40:db:de:
03:e3:a1:51:e4:f4:dc:14:23:b4:f4:ca:2b:f7:66:
a3:fe:a4:5a:36:e0:32:7c:8a:01:f6:42:50:c9:8b:
26:3c:94:18:1a:06:e8:b6:dc:39:6a:4c:07:ef:02:
05:ff:01:30:76:f6:f1:43:41:ef:50:01:eb:9e:3f:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8F:A2:B3:F2:67:13:A4:14:52:A1:08:A2:0C:24:35:CE:82:98:D9
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/t4-is_JnE6QUUqEIogwkNc6CmNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.110.0/24
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
08:72:67:e9:9d:9a:0d:e6:f0:eb:20:d8:7d:5f:ad:f2:34:9f:
d5:94:bf:36:52:08:c2:f0:02:2f:0d:02:4f:e5:f7:e9:df:35:
8f:9a:47:16:76:a3:f8:92:45:2f:d8:78:01:d2:db:10:9d:c6:
82:1b:c3:2b:20:72:89:4e:5b:ed:6e:e9:b1:1b:a8:f4:a3:d0:
0e:fd:9f:50:40:56:68:61:2a:08:90:18:01:a8:61:7f:0f:68:
ef:04:f6:f2:5a:88:1c:ea:53:01:fd:10:a0:23:b4:b5:b2:f7:
b2:75:5d:1f:e1:c1:12:31:0c:90:a5:7c:c3:59:af:e0:f8:4e:
15:f5:3d:b3:6a:cc:be:28:02:8f:df:9b:ef:e6:d7:e1:94:79:
e6:bd:87:5d:41:fc:12:88:5b:46:2f:b1:bd:d6:b5:75:65:d5:
c9:d4:60:3b:ce:a0:ad:19:60:85:50:dd:c1:3f:64:0b:f9:4a:
26:7e:5d:e0:a4:6e:0d:57:e5:1f:e8:d6:b4:6b:2c:c3:9c:2f:
b5:39:7b:28:62:6f:d7:91:1d:83:58:cb:94:30:9c:92:92:33:
c0:ad:c5:42:86:c3:a5:b6:ac:3d:0b:a4:06:30:1d:93:b4:c0:
5e:a2:c0:2d:a7:29:41:c4:98:17:89:0c:3f:ec:70:3f:d7:0c:
5e:2e:70:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYeejIPulgh2iEhn9DekiJGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjMwNDIwMTIwMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzhmYTJiM2YyNjcxM2E0MTQ1MmExMDhhMjBjMjQzNWNlODI5OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn614NbY0h3g8ayRrkHPmpCmWl/38
6vgxL/g4xYxAqZL2b1ODmuYKp9X2SzmuGJdclAk4iVPrV+2qhcfhToxz2mxHdNK3
VVP1ONZevLB3Tgh4RghbwJmAXVG+pzsueVMevzIvxy7gp4VmZdWbzvJ6KzIgrJOR
TTKusLOWyrYXZ9nN4dFq+ZxAU9FzCiMWwruw8JegaEGOgglUr4qrL+iZqKK1Q3Id
sS0Zx4qhHYqMa0Ff4bHby36KsHGZUxZFib5A294D46FR5PTcFCO09Mor92aj/qRa
NuAyfIoB9kJQyYsmPJQYGgbottw5akwH7wIF/wEwdvbxQ0HvUAHrnj9NdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLePorPyZxOkFFKhCKIMJDXOgpjZMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvdDQtaXNfSm5FNlFVVXFFSW9nd2tOYzZDbU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVepuAwQC
uZrAMA0GCSqGSIb3DQEBCwUAA4IBAQAIcmfpnZoN5vDrINh9X63yNJ/VlL82UgjC
8AIvDQJP5ffp3zWPmkcWdqP4kkUv2HgB0tsQncaCG8MrIHKJTlvtbumxG6j0o9AO
/Z9QQFZoYSoIkBgBqGF/D2jvBPbyWogc6lMB/RCgI7S1sveydV0f4cESMQyQpXzD
Wa/g+E4V9T2zasy+KAKP35vv5tfhlHnmvYddQfwSiFtGL7G91rV1ZdXJ1GA7zqCt
GWCFUN3BP2QL+Uomfl3gpG4NV+Uf6Na0ayzDnC+1OXsoYm/XkR2DWMuUMJySkjPA
rcVChsOltqw9C6QGMB2TtMBeosAtpylBxJgXiQw/7HA/1wxeLnB6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:34 2024 by rpki-client on console-ams.rpki-client.org