Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/L_G6j9DO9p5rpEL5eegT7fSdvME.roa
File: L_G6j9DO9p5rpEL5eegT7fSdvME.roa (raw, json)
Hash identifier: gjt20AOgtWw6RgGxHz+KjvHmlGiFEl+b9zKbkSz29Dk=
Subject key identifier: 2F:F1:BA:8F:D0:CE:F6:9E:6B:A4:42:F9:79:E8:13:ED:F4:9D:BC:C1
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01856E942DDE52A90CF321C6F30E5ED26856
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/L_G6j9DO9p5rpEL5eegT7fSdvME.roa
Signing time: Sun 01 Jan 2023 18:24:42 +0000
ROA not before: Sun 01 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202872
IP address blocks: 185.149.128.0/23 maxlen: 23
185.149.130.0/23 maxlen: 23
2a07:6880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2d:de:52:a9:0c:f3:21:c6:f3:0e:5e:d2:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff1ba8fd0cef69e6ba442f979e813edf49dbcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:3f:f9:5b:9e:c7:7b:f5:37:a8:63:c9:09:
98:de:3c:5d:86:1d:2a:c1:c1:e8:e3:a4:71:79:57:
56:d5:eb:6c:18:32:e8:97:43:b6:2d:f9:04:1c:ac:
32:fd:c5:99:d2:46:c4:63:c3:f6:6a:7b:1a:f6:8d:
43:d2:1c:82:83:5f:1e:a5:28:ca:db:3c:59:02:80:
c7:39:fa:d6:f1:36:ca:3c:fc:f1:80:19:c8:57:63:
8b:a7:1b:db:a0:9b:c3:ea:44:2b:73:54:86:fe:e8:
f2:24:34:69:dc:1b:60:93:df:5c:88:7f:92:7f:31:
e4:86:e8:e7:3d:cb:36:8a:38:1f:4a:e2:40:b9:9c:
24:88:d6:09:53:72:67:ae:f1:cf:e3:a2:ab:3c:39:
11:a0:2c:ea:f2:d8:9a:d8:25:6c:0d:d5:b7:9e:0e:
45:b8:b1:31:eb:5f:ff:b7:c7:dc:d1:69:83:f0:9e:
d3:60:28:86:f5:42:7a:8a:e7:7b:ee:30:3f:39:ad:
c5:44:d9:39:65:ac:cb:51:4d:d5:98:d5:ff:48:0f:
82:42:fe:20:49:1a:76:8d:62:95:8e:60:11:7b:df:
01:42:af:e1:b4:85:f6:9d:f9:5c:51:09:38:57:97:
86:b3:79:9e:31:26:2c:f2:a0:a9:e9:ac:2d:b2:10:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:BA:8F:D0:CE:F6:9E:6B:A4:42:F9:79:E8:13:ED:F4:9D:BC:C1
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/L_G6j9DO9p5rpEL5eegT7fSdvME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.128.0/22
IPv6:
2a07:6880::/32
Signature Algorithm: sha256WithRSAEncryption
a0:dc:de:d2:e1:84:17:ab:7a:26:4c:06:a1:0d:aa:4a:e2:ba:
aa:60:44:d3:e2:0f:fd:48:62:f4:19:f6:bd:00:7d:eb:bf:f6:
e7:db:c6:ff:ba:ca:3a:13:ee:dd:90:e3:e2:e3:97:a3:5b:fd:
b0:75:64:f7:4f:7e:39:78:fe:b1:a2:d3:d7:d0:dd:d1:08:1a:
8d:6f:00:47:28:97:e7:5a:a4:2d:0c:05:77:7a:bd:71:e0:1b:
9b:97:e1:c1:45:27:fa:1e:f8:52:b8:53:24:ba:21:7c:70:95:
1c:de:f3:c4:c0:e0:d6:38:cb:9b:69:d9:77:86:9c:86:28:ef:
ce:4b:2d:f1:c2:b3:8d:0c:5a:67:87:3b:79:14:e7:41:cc:03:
9a:d9:8f:13:eb:ad:99:41:41:d1:88:c7:1d:fc:1c:bd:dd:3e:
77:b0:a3:5a:b1:a3:51:9b:b8:32:fe:d2:4e:35:b2:82:b0:24:
c2:e0:05:2c:45:14:61:01:a4:d9:64:e8:a2:56:39:f2:1f:b8:
34:7d:b3:16:e2:91:b7:cf:89:7c:20:7e:4b:42:b4:e4:f4:5b:
c8:e0:35:f5:d4:45:75:78:6e:5d:10:36:c6:b3:ba:25:12:9a:
32:8f:62:14:d3:36:54:24:98:e8:4a:ba:81:18:1f:be:07:a8:
4a:3f:7a:d0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVulC3eUqkM8yHG8w5e0mhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjMwMTAxMTgyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmYxYmE4ZmQwY2VmNjllNmJhNDQyZjk3OWU4MTNlZGY0OWRiY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmU/+Vuex3v1N6hjyQmY3jxdhh0q
wcHo46RxeVdW1etsGDLol0O2LfkEHKwy/cWZ0kbEY8P2ansa9o1D0hyCg18epSjK
2zxZAoDHOfrW8TbKPPzxgBnIV2OLpxvboJvD6kQrc1SG/ujyJDRp3Btgk99ciH+S
fzHkhujnPcs2ijgfSuJAuZwkiNYJU3JnrvHP46KrPDkRoCzq8tia2CVsDdW3ng5F
uLEx61//t8fc0WmD8J7TYCiG9UJ6iud77jA/Oa3FRNk5ZazLUU3VmNX/SA+CQv4g
SRp2jWKVjmARe98BQq/htIX2nflcUQk4V5eGs3meMSYs8qCp6awtshBr6QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFC/xuo/Qzvaea6RC+XnoE+30nbzBMB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvTF9HNmo5RE85cDVycEVMNWVlZ1Q3ZlNkdk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZWAMA0E
AgACMAcDBQAqB2iAMA0GCSqGSIb3DQEBCwUAA4IBAQCg3N7S4YQXq3omTAahDapK
4rqqYETT4g/9SGL0Gfa9AH3rv/bn28b/uso6E+7dkOPi45ejW/2wdWT3T345eP6x
otPX0N3RCBqNbwBHKJfnWqQtDAV3er1x4Bubl+HBRSf6HvhSuFMkuiF8cJUc3vPE
wODWOMubadl3hpyGKO/OSy3xwrONDFpnhzt5FOdBzAOa2Y8T662ZQUHRiMcd/By9
3T53sKNasaNRm7gy/tJONbKCsCTC4AUsRRRhAaTZZOiiVjnyH7g0fbMW4pG3z4l8
IH5LQrTk9FvI4DX11EV1eG5dEDbGs7olEpoyj2IU0zZUJJjoSrqBGB++B6hKP3rQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org