Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/kWgDS_m7-VDoEXtjZCULBJ-2bqY.roa
File: kWgDS_m7-VDoEXtjZCULBJ-2bqY.roa (raw, json)
Hash identifier: 6b5Di2P5xHap8QRg75Z+xdA8MSgEO8LfQuM+bK70xZ4=
Subject key identifier: 91:68:03:4B:F9:BB:F9:50:E8:11:7B:63:64:25:0B:04:9F:B6:6E:A6
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018BCC2D6D520C7B39825D506EA82F6B414E
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/kWgDS_m7-VDoEXtjZCULBJ-2bqY.roa
Signing time: Tue 14 Nov 2023 04:53:31 +0000
ROA not before: Tue 14 Nov 2023 04:53:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206060
IP address blocks: 185.197.177.0/24 maxlen: 24
185.197.178.0/24 maxlen: 24
185.197.179.0/24 maxlen: 24
185.197.176.0/22 maxlen: 22
185.197.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:2d:6d:52:0c:7b:39:82:5d:50:6e:a8:2f:6b:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Nov 14 04:53:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9168034bf9bbf950e8117b6364250b049fb66ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:b2:38:e5:3c:e8:93:80:6f:2c:85:f7:eb:
40:05:28:78:3e:7f:8a:e7:1c:14:80:4a:da:e8:78:
72:97:26:3f:52:83:f8:55:32:cd:2f:25:00:57:5b:
dc:fc:91:ff:32:54:5a:fe:45:85:dc:96:dd:b9:b3:
6a:6d:de:b4:68:4f:24:fb:80:4d:17:4d:77:bc:96:
9b:cf:8c:51:f8:87:1a:14:ed:b3:7c:14:09:3e:c9:
00:e1:d5:bc:37:ba:0d:51:66:1c:c8:62:fa:2f:c8:
ca:84:f3:3d:39:85:12:4a:0d:9b:47:f5:54:18:49:
8a:74:4b:2b:70:56:82:60:a1:fd:84:02:94:88:da:
84:de:08:80:e4:a0:fd:25:19:6d:f6:18:0b:d1:24:
e9:00:7e:e3:c8:16:84:1e:13:5f:a2:12:c6:7b:7e:
be:5c:82:a8:bb:9a:2a:e6:78:d4:0e:82:79:c0:34:
b9:f4:bb:7d:97:ff:c5:1e:77:49:28:de:48:24:ce:
c9:db:bd:ac:d4:7d:15:b1:07:a3:bf:86:26:fa:3e:
17:93:b0:4e:19:94:5c:ba:b3:13:5e:1f:e3:49:e1:
25:65:01:7e:2c:8e:04:b2:a0:5e:82:5b:09:79:6d:
8b:42:47:a1:8c:6b:f3:e4:c4:48:96:fc:d0:4d:75:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:68:03:4B:F9:BB:F9:50:E8:11:7B:63:64:25:0B:04:9F:B6:6E:A6
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/kWgDS_m7-VDoEXtjZCULBJ-2bqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:f3:f6:4f:ce:bf:52:0b:42:eb:fc:4b:26:38:ea:e3:71:63:
a1:1b:84:8d:93:90:e3:50:ab:1a:b4:b8:ad:71:fb:83:59:8c:
90:8a:eb:f7:ee:84:a3:ba:2c:d0:06:30:81:1b:91:d7:32:b4:
d7:e2:d9:b4:03:b8:c3:e8:be:f8:50:71:f1:74:53:e1:a2:6f:
4f:56:80:c4:ad:70:c7:32:2d:5d:f7:58:0c:91:b7:7e:e7:8a:
2d:85:91:a3:7a:c9:cc:d9:ca:e7:a4:e2:d5:5e:ea:ac:86:3d:
b5:d6:35:91:88:c0:84:93:2c:1b:7f:ee:05:16:bd:2a:70:cf:
df:2c:00:45:1b:6d:99:81:cd:87:94:2a:5e:68:5a:8e:fd:0e:
79:6d:2e:df:d0:9c:18:f7:4d:a1:92:92:a5:80:0f:48:06:8d:
82:61:6a:5b:6e:6f:9b:0f:24:d1:e4:72:60:59:8e:d9:ef:a0:
d7:9b:d4:7e:ab:9d:6f:f8:cb:dd:25:0f:3e:6a:4a:5a:6e:47:
78:11:47:bf:95:33:49:c7:6a:b9:be:18:ae:f2:13:36:23:b6:
4a:75:52:b2:83:20:12:39:a1:75:cb:2e:98:5a:92:b9:6f:14:
75:c1:90:83:41:c0:41:42:19:78:4d:3b:79:59:60:a1:b5:62:
31:4b:e8:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvMLW1SDHs5gl1Qbqgva0FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx
MWY3MDkwHhcNMjMxMTE0MDQ1MzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTY4MDM0YmY5YmJmOTUwZTgxMTdiNjM2NDI1MGIwNDlmYjY2ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAKyOOU86JOAbyyF9+tABSh4Pn+K
5xwUgEra6HhylyY/UoP4VTLNLyUAV1vc/JH/MlRa/kWF3JbdubNqbd60aE8k+4BN
F013vJabz4xR+IcaFO2zfBQJPskA4dW8N7oNUWYcyGL6L8jKhPM9OYUSSg2bR/VU
GEmKdEsrcFaCYKH9hAKUiNqE3giA5KD9JRlt9hgL0STpAH7jyBaEHhNfohLGe36+
XIKou5oq5njUDoJ5wDS59Lt9l//FHndJKN5IJM7J272s1H0VsQejv4Ym+j4Xk7BO
GZRcurMTXh/jSeElZQF+LI4EsqBeglsJeW2LQkehjGvz5MRIlvzQTXWk/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFoA0v5u/lQ6BF7Y2QlCwSftm6mMB8GA1UdIwQY
MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt
MDdhMjhhZDNjYjY0LzEva1dnRFNfbTctVkRvRVh0alpDVUxCSi0yYnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0
LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucWwMA0G
CSqGSIb3DQEBCwUAA4IBAQCe8/ZPzr9SC0Lr/EsmOOrjcWOhG4SNk5DjUKsatLit
cfuDWYyQiuv37oSjuizQBjCBG5HXMrTX4tm0A7jD6L74UHHxdFPhom9PVoDErXDH
Mi1d91gMkbd+54othZGjesnM2crnpOLVXuqshj211jWRiMCEkywbf+4FFr0qcM/f
LABFG22Zgc2HlCpeaFqO/Q55bS7f0JwY902hkpKlgA9IBo2CYWpbbm+bDyTR5HJg
WY7Z76DXm9R+q51v+MvdJQ8+akpabkd4EUe/lTNJx2q5vhiu8hM2I7ZKdVKygyAS
OaF1yy6YWpK5bxR1wZCDQcBBQhl4TTt5WWChtWIxS+hF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:57 2024 by rpki-client on console-fra.rpki-client.org