Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/B6lJL1OBTFBMwuxpBOW9Fy4kjPU.roa
File: B6lJL1OBTFBMwuxpBOW9Fy4kjPU.roa (raw, json)
Hash identifier: zyVoPG+FYpEN032MDn6whLss13fRWMpWCQJfpx1zvX4=
Subject key identifier: 07:A9:49:2F:53:81:4C:50:4C:C2:EC:69:04:E5:BD:17:2E:24:8C:F5
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 018C5EBC463299E838318F81CF8830B88746
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/B6lJL1OBTFBMwuxpBOW9Fy4kjPU.roa
Signing time: Tue 12 Dec 2023 15:54:06 +0000
ROA not before: Tue 12 Dec 2023 15:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203187
IP address blocks: 185.82.80.0/22 maxlen: 24
185.238.124.0/22 maxlen: 24
2a0c:2e80::/29 maxlen: 48
2a05:8e00::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:bc:46:32:99:e8:38:31:8f:81:cf:88:30:b8:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Dec 12 15:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07a9492f53814c504cc2ec6904e5bd172e248cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:87:f2:90:7e:dc:c8:13:fd:3f:a4:17:01:
b0:59:04:16:eb:1e:c3:63:7d:e7:e7:eb:c9:91:e2:
c0:fc:0d:6f:0b:7d:e9:39:d6:a0:4a:9c:7d:ba:f8:
8d:b8:7c:58:8f:6e:0b:c0:90:d9:c2:92:5b:62:f0:
7e:b6:27:e1:18:c6:4d:e7:4e:72:94:2d:4a:54:fb:
31:f9:5a:3a:2c:24:9a:79:d9:92:b0:53:4e:2c:09:
ec:a2:b6:b8:18:f9:7f:cc:09:67:08:8d:5b:56:26:
3f:93:82:da:10:22:83:68:41:b1:eb:67:5c:cc:fd:
00:6e:15:86:82:57:19:8a:f5:c6:82:75:ed:2c:61:
e0:25:66:18:08:ea:af:46:56:67:bf:2b:c4:ca:bc:
76:b2:27:a6:aa:14:8e:eb:4d:a8:e3:92:b6:d6:03:
ed:7e:2f:18:18:dc:cb:2b:cb:0d:bc:62:92:ad:f1:
6c:2b:ac:4d:47:71:86:e6:9b:c9:ec:0d:f4:16:6c:
4a:ad:cc:13:b2:9f:1c:62:8f:e7:5b:a1:c4:70:30:
30:40:42:75:a2:f4:73:ff:55:bd:3f:02:80:89:56:
78:b9:a4:ff:c9:2d:a4:7b:82:1a:38:34:6e:59:90:
ea:d1:a5:be:e5:b8:5f:c1:ab:8e:0b:d5:5e:1e:a3:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:49:2F:53:81:4C:50:4C:C2:EC:69:04:E5:BD:17:2E:24:8C:F5
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/B6lJL1OBTFBMwuxpBOW9Fy4kjPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.80.0/22
185.238.124.0/22
IPv6:
2a05:8e00::/29
2a0c:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
b7:fb:0f:7b:52:6b:f5:53:87:be:62:ad:52:74:13:b2:91:a9:
40:13:cb:74:2b:20:6d:1e:2b:ea:10:ce:bc:19:0c:eb:72:62:
f5:ae:7a:f4:b5:b9:ee:24:68:17:95:25:a9:97:ba:d4:3b:ab:
fe:e6:5c:95:75:28:8e:20:bb:4b:6b:8c:86:59:69:de:95:04:
0c:74:d7:47:f8:81:2b:c9:08:a3:f0:4c:c5:0d:ff:18:b3:13:
fe:04:01:76:27:f6:83:77:c1:fa:fd:c2:87:d4:ce:21:17:9f:
7a:ba:72:68:cd:49:4a:ef:9e:98:32:2a:58:8c:1d:11:e6:98:
60:88:1d:0f:f2:54:60:c4:e3:d9:fd:78:e5:32:78:0d:61:ee:
40:7e:63:92:d9:12:2e:95:08:4d:e0:f3:62:22:d1:ba:74:80:
7a:81:8c:dd:3b:55:80:43:bd:e4:dc:ae:af:15:07:23:86:74:
a8:a2:7b:08:ee:8d:08:a2:c2:34:bd:e6:8f:d4:8f:8e:38:a2:
8d:2a:77:84:aa:75:96:94:08:a3:6a:b2:2f:94:c4:96:1c:8b:
a3:a1:bb:f6:fe:a7:ec:5b:5d:d4:3f:15:e1:de:20:b7:2d:63:
5c:e3:3c:f7:31:b8:fc:f5:81:a8:82:b1:30:15:17:ec:0f:e7:
60:4e:6b:61
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYxevEYymeg4MY+Bz4gwuIdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWQzNzQwOGEyMjVmMWE4OTY0ZjhkNzJiYzk5ZDliYmU1
MzMyMzQwHhcNMjMxMjEyMTU1NDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2E5NDkyZjUzODE0YzUwNGNjMmVjNjkwNGU1YmQxNzJlMjQ4Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3iH8pB+3MgT/T+kFwGwWQQW6x7D
Y33n5+vJkeLA/A1vC33pOdagSpx9uviNuHxYj24LwJDZwpJbYvB+tifhGMZN505y
lC1KVPsx+Vo6LCSaedmSsFNOLAnsora4GPl/zAlnCI1bViY/k4LaECKDaEGx62dc
zP0AbhWGglcZivXGgnXtLGHgJWYYCOqvRlZnvyvEyrx2siemqhSO602o45K21gPt
fi8YGNzLK8sNvGKSrfFsK6xNR3GG5pvJ7A30FmxKrcwTsp8cYo/nW6HEcDAwQEJ1
ovRz/1W9PwKAiVZ4uaT/yS2ke4IaODRuWZDq0aW+5bhfwauOC9VeHqMyPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAepSS9TgUxQTMLsaQTlvRcuJIz1MB8GA1UdIwQY
MBaAFINdN0CKIl8aiWT41yvJnZu+UzI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQt
Y2I2YzY3NGM1YTNjLzEvQjZsSkwxT0JURkJNd3V4cEJPVzlGeTRralBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQtY2I2YzY3NGM1YTNj
LzEvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuVJQAwQC
ue58MBQEAgACMA4DBQMqBY4AAwUDKgwugDANBgkqhkiG9w0BAQsFAAOCAQEAt/sP
e1Jr9VOHvmKtUnQTspGpQBPLdCsgbR4r6hDOvBkM63Ji9a569LW57iRoF5UlqZe6
1Dur/uZclXUojiC7S2uMhllp3pUEDHTXR/iBK8kIo/BMxQ3/GLMT/gQBdif2g3fB
+v3Ch9TOIReferpyaM1JSu+emDIqWIwdEeaYYIgdD/JUYMTj2f145TJ4DWHuQH5j
ktkSLpUITeDzYiLRunSAeoGM3TtVgEO95NyurxUHI4Z0qKJ7CO6NCKLCNL3mj9SP
jjiijSp3hKp1lpQIo2qyL5TElhyLo6G79v6n7Ftd1D8V4d4gty1jXOM89zG4/PWB
qIKxMBUX7A/nYE5rYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org