Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/PaOD_cOFphbxZHt239CfW08Wn_g.roa
File: PaOD_cOFphbxZHt239CfW08Wn_g.roa (raw, json)
Hash identifier: YD4Qw407Gawb6ZDELgAprdxjnVZWWI2nSPxPCILIkgo=
Subject key identifier: 3D:A3:83:FD:C3:85:A6:16:F1:64:7B:76:DF:D0:9F:5B:4F:16:9F:F8
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 01856F024DD6DC60510A5E944C8B2E7CE5FA
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/PaOD_cOFphbxZHt239CfW08Wn_g.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200127
IP address blocks: 185.36.237.0/24 maxlen: 24
185.36.236.0/24 maxlen: 24
185.36.239.0/24 maxlen: 24
185.36.238.0/24 maxlen: 24
185.76.244.0/24 maxlen: 24
185.76.246.0/24 maxlen: 24
185.76.245.0/24 maxlen: 24
185.76.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4d:d6:dc:60:51:0a:5e:94:4c:8b:2e:7c:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3da383fdc385a616f1647b76dfd09f5b4f169ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:27:0d:1a:ab:d6:77:0d:a0:e2:37:88:48:
45:c2:59:fc:fc:a3:29:8b:ca:0a:ed:30:cb:48:37:
06:42:56:fe:ef:bb:66:7e:f3:5f:74:c0:c6:c9:76:
2a:50:80:34:71:e8:79:d1:65:e5:2b:3b:fc:47:6c:
e3:26:06:9f:94:c6:3a:d7:d0:61:0b:e8:2d:54:e5:
39:c4:b9:d7:5a:f5:a6:3a:7a:45:a1:10:e7:f0:4d:
b0:85:2a:58:2b:97:13:91:66:75:79:2e:4a:77:dc:
76:d5:b8:0d:bc:36:fe:9d:d5:75:c7:1f:db:40:16:
a8:7c:91:69:57:61:9e:3c:3b:de:b2:50:d5:0f:15:
f7:39:e1:bd:f3:26:81:56:7f:3c:c2:02:a6:c6:82:
1c:5f:e5:a1:b1:e9:91:aa:fa:aa:91:4d:da:ca:87:
fc:78:88:b1:88:51:be:8f:8f:5e:17:c5:f9:a1:50:
c2:97:50:9a:c5:33:0e:ea:90:ec:16:a7:34:5a:39:
7f:cd:d8:a6:52:40:12:52:6f:4d:b8:8a:d3:d0:14:
60:d8:b0:57:98:03:e4:80:b9:2e:35:84:4d:64:9c:
4a:e8:66:c1:0f:4c:13:40:9e:46:ee:6a:ad:2f:37:
ce:a3:9e:04:70:7c:11:16:8f:7f:32:fd:cb:3e:8b:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:83:FD:C3:85:A6:16:F1:64:7B:76:DF:D0:9F:5B:4F:16:9F:F8
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/PaOD_cOFphbxZHt239CfW08Wn_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.236.0/22
185.76.244.0/22
Signature Algorithm: sha256WithRSAEncryption
15:23:73:c8:b3:ed:53:8c:64:1e:2a:82:ef:55:c8:e3:7e:c6:
de:9c:f8:8a:79:ee:ea:d4:91:0b:da:5d:bf:27:51:89:15:f8:
b8:bb:1e:31:c5:d2:a1:43:a5:ad:d5:bf:55:7d:d6:d1:12:f0:
70:01:70:44:e3:ee:76:49:ab:87:7c:7f:57:62:30:8c:18:34:
79:76:5f:08:41:1d:2d:0f:54:35:41:47:f4:ec:ef:76:32:cc:
0d:89:ed:9f:e8:13:f1:91:d9:74:ec:84:a5:f6:24:cd:b3:f7:
bd:ad:14:55:a7:b6:b8:63:d8:17:6a:3d:3f:b8:d7:40:a3:36:
e8:cf:c1:e1:2e:43:dc:24:9f:4f:1a:7a:d9:a0:e5:ed:c5:c4:
ff:5f:05:00:1f:eb:ea:47:fb:21:76:8b:46:05:25:28:ae:ff:
4e:ba:62:19:2b:eb:84:08:ca:f6:47:97:75:af:39:95:b0:80:
d2:9f:64:eb:e1:9d:ae:63:e6:80:3b:30:bf:d1:4e:51:a4:cb:
18:67:1e:ab:94:9a:73:85:ec:01:90:2b:29:55:c9:7b:e9:82:
2f:9a:35:58:d5:a9:fb:40:3f:87:af:cd:a8:7a:15:c8:45:0a:
2f:fd:7e:a6:82:c8:75:d7:1b:98:5c:07:74:7d:31:68:ed:bc:
20:df:7a:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvAk3W3GBRCl6UTIsufOX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzFhMTI5YzhiMDg5OTU5NDIxOTllYTZkMWIyMjgyNjUz
NTBkMGIwHhcNMjMwMTAxMjAyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGEzODNmZGMzODVhNjE2ZjE2NDdiNzZkZmQwOWY1YjRmMTY5ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq78nDRqr1ncNoOI3iEhFwln8/KMp
i8oK7TDLSDcGQlb+77tmfvNfdMDGyXYqUIA0ceh50WXlKzv8R2zjJgaflMY619Bh
C+gtVOU5xLnXWvWmOnpFoRDn8E2whSpYK5cTkWZ1eS5Kd9x21bgNvDb+ndV1xx/b
QBaofJFpV2GePDveslDVDxX3OeG98yaBVn88wgKmxoIcX+WhsemRqvqqkU3ayof8
eIixiFG+j49eF8X5oVDCl1CaxTMO6pDsFqc0Wjl/zdimUkASUm9NuIrT0BRg2LBX
mAPkgLkuNYRNZJxK6GbBD0wTQJ5G7mqtLzfOo54EcHwRFo9/Mv3LPos3VQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD2jg/3DhaYW8WR7dt/Qn1tPFp/4MB8GA1UdIwQY
MBaAFN1xoSnIsImVlCGZ6m0bIoJlNQ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hHaEtjaXdpWldVSVpucWJSc2lnbVUxRFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNDk5YjYtMDFmNC00NDJjLWJlNzYt
YzBkOGM4NjY4OTNmLzEvUGFPRF9jT0ZwaGJ4Wkh0MjM5Q2ZXMDhXbl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNDk5YjYtMDFmNC00NDJjLWJlNzYtYzBkOGM4NjY4OTNm
LzEvM1hHaEtjaXdpWldVSVpucWJSc2lnbVUxRFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSTsAwQC
uUz0MA0GCSqGSIb3DQEBCwUAA4IBAQAVI3PIs+1TjGQeKoLvVcjjfsbenPiKee7q
1JEL2l2/J1GJFfi4ux4xxdKhQ6Wt1b9VfdbREvBwAXBE4+52SauHfH9XYjCMGDR5
dl8IQR0tD1Q1QUf07O92MswNie2f6BPxkdl07ISl9iTNs/e9rRRVp7a4Y9gXaj0/
uNdAozboz8HhLkPcJJ9PGnrZoOXtxcT/XwUAH+vqR/shdotGBSUorv9OumIZK+uE
CMr2R5d1rzmVsIDSn2Tr4Z2uY+aAOzC/0U5RpMsYZx6rlJpzhewBkCspVcl76YIv
mjVY1an7QD+Hr82oehXIRQov/X6mgsh11xuYXAd0fTFo7bwg33qx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org