Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/KawbNNbZBbDl6ATQuB7M9VRquzM.roa
File: KawbNNbZBbDl6ATQuB7M9VRquzM.roa (raw, json)
Hash identifier: eRkglZVWpIVlmZXO8uDOHPZD9yXCpfISYMic4YC3qhk=
Subject key identifier: 29:AC:1B:34:D6:D9:05:B0:E5:E8:04:D0:B8:1E:CC:F5:54:6A:BB:33
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 0189F3B5642BF9A35A8FB5D6B2017F3567D2
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/KawbNNbZBbDl6ATQuB7M9VRquzM.roa
Signing time: Mon 14 Aug 2023 11:01:38 +0000
ROA not before: Mon 14 Aug 2023 11:01:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 149.236.0.0/17 maxlen: 17
149.236.9.0/24 maxlen: 24
149.236.0.0/16 maxlen: 16
149.236.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:b5:64:2b:f9:a3:5a:8f:b5:d6:b2:01:7f:35:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Aug 14 11:01:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29ac1b34d6d905b0e5e804d0b81eccf5546abb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:66:04:33:6c:b8:31:b5:2a:76:47:a5:38:
98:fc:dc:ec:42:7c:59:ff:69:e5:17:a9:c5:a2:1a:
92:59:9e:a5:c5:2f:04:77:0b:c2:e3:f8:3e:28:55:
2c:d2:dd:5c:59:aa:86:1e:4d:17:c7:1b:ce:db:87:
b9:5c:44:75:08:ce:90:dd:6a:5a:20:0b:f0:c6:55:
62:83:28:0a:6c:84:d0:86:d6:97:54:23:b2:73:4e:
73:60:49:75:57:a2:6b:2d:3b:c7:23:6c:51:98:ea:
ce:27:39:10:a1:76:62:04:45:69:61:16:78:b6:8a:
9a:e8:81:e8:e7:93:b8:a5:7a:23:9c:97:0a:07:88:
01:a6:68:f3:be:a8:83:51:ce:83:3a:96:ad:55:ea:
fa:ad:72:1b:42:32:a7:9f:fb:7c:14:b9:f2:4e:da:
62:f4:45:8e:5a:a2:65:dd:3e:08:e8:29:3b:08:b7:
43:5f:37:f5:a1:b9:7d:ac:75:f9:2e:4a:58:ae:f0:
e7:41:d1:fa:fe:5a:13:fc:07:73:cf:b3:d6:e1:7e:
27:d8:d9:78:f2:46:32:c4:12:03:3c:52:31:1a:28:
de:3b:de:42:a3:8b:df:80:90:14:c5:e3:3b:c3:57:
45:f4:f9:8f:75:9a:e4:e4:af:e4:0d:ea:7d:89:0a:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:1B:34:D6:D9:05:B0:E5:E8:04:D0:B8:1E:CC:F5:54:6A:BB:33
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/KawbNNbZBbDl6ATQuB7M9VRquzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:90:e1:96:5d:67:cd:6d:2e:ec:be:d9:57:18:f0:d9:2a:cd:
6a:a6:64:d9:74:99:0f:cc:2a:d4:f2:a2:23:cc:2b:89:48:ca:
14:d1:6f:8d:03:fc:75:3a:fc:74:5f:6e:18:58:ab:86:cb:c1:
90:8c:2d:d2:35:4d:0c:45:84:64:a5:ec:b5:64:f7:10:89:6b:
6c:07:4a:f8:8e:1e:16:a1:51:b6:b4:fb:cc:a0:ad:ee:a8:1a:
6a:c5:22:25:1e:b0:49:a9:90:28:3b:1e:ea:fd:a5:36:a2:2a:
72:0b:9f:74:c2:e6:80:ae:02:a0:e6:1f:ed:7c:76:8e:88:91:
c1:c9:2c:b6:46:82:6f:dc:e0:ac:d2:58:ed:09:54:9b:56:20:
2a:45:df:9a:79:70:44:09:32:a8:ea:e6:a3:ea:63:18:d3:c0:
7f:eb:e9:81:38:d6:a5:c4:b8:ad:65:8e:d1:a6:8e:88:ac:89:
1b:86:31:33:1f:30:d1:b0:3e:55:9c:bc:fd:d4:d8:2c:38:6c:
eb:95:a8:ac:d8:2a:4b:d8:87:bd:85:73:f9:b4:4c:3f:db:72:
e7:00:59:7f:99:9e:0c:2e:91:7c:c1:9c:d7:a9:cd:04:1d:6c:
aa:04:79:55:dd:42:b2:d2:6d:ca:ff:35:45:bd:67:58:2d:62:
cb:68:90:18
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYnztWQr+aNaj7XWsgF/NWfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzN2VkNjYwMmJjMjdmMTk2YTQ5ZWU0YjMwNmEwZmE2ZGVl
OWQyOWQwHhcNMjMwODE0MTEwMTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFjMWIzNGQ2ZDkwNWIwZTVlODA0ZDBiODFlY2NmNTU0NmFiYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbFmBDNsuDG1KnZHpTiY/NzsQnxZ
/2nlF6nFohqSWZ6lxS8EdwvC4/g+KFUs0t1cWaqGHk0XxxvO24e5XER1CM6Q3Wpa
IAvwxlVigygKbITQhtaXVCOyc05zYEl1V6JrLTvHI2xRmOrOJzkQoXZiBEVpYRZ4
toqa6IHo55O4pXojnJcKB4gBpmjzvqiDUc6DOpatVer6rXIbQjKnn/t8FLnyTtpi
9EWOWqJl3T4I6Ck7CLdDXzf1obl9rHX5LkpYrvDnQdH6/loT/Adzz7PW4X4n2Nl4
8kYyxBIDPFIxGijeO95Co4vfgJAUxeM7w1dF9PmPdZrk5K/kDep9iQqHZwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCmsGzTW2QWw5egE0LgezPVUarszMB8GA1UdIwQY
MBaAFIN+1mArwn8ZaknuSzBqD6be6dKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzM3V1lDdkNmeGxxU2U1TE1Hb1BwdDdwMHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80Y2ZiOGMtMjBmMC00N2YxLThiODYt
MjhlNjk3YzcxNWNhLzEvS2F3Yk5OYlpCYkRsNkFUUXVCN005VlJxdXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi80Y2ZiOGMtMjBmMC00N2YxLThiODYtMjhlNjk3YzcxNWNh
LzEvZzM3V1lDdkNmeGxxU2U1TE1Hb1BwdDdwMHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlewwDQYJ
KoZIhvcNAQELBQADggEBAAGQ4ZZdZ81tLuy+2VcY8NkqzWqmZNl0mQ/MKtTyoiPM
K4lIyhTRb40D/HU6/HRfbhhYq4bLwZCMLdI1TQxFhGSl7LVk9xCJa2wHSviOHhah
Uba0+8ygre6oGmrFIiUesEmpkCg7Hur9pTaiKnILn3TC5oCuAqDmH+18do6IkcHJ
LLZGgm/c4KzSWO0JVJtWICpF35p5cEQJMqjq5qPqYxjTwH/r6YE41qXEuK1ljtGm
joisiRuGMTMfMNGwPlWcvP3U2Cw4bOuVqKzYKkvYh72Fc/m0TD/bcucAWX+Zngwu
kXzBnNepzQQdbKoEeVXdQrLSbcr/NUW9Z1gtYstokBg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org