Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/_KFICuKhb2qHsiyV9xjfVZ4gUqU.roa
File: _KFICuKhb2qHsiyV9xjfVZ4gUqU.roa (raw, json)
Hash identifier: ZpbKTvbef4O9U57b+IeBikzoLXtjTgW8RzlhRxRcEEg=
Subject key identifier: FC:A1:48:0A:E2:A1:6F:6A:87:B2:2C:95:F7:18:DF:55:9E:20:52:A5
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0185715E80372701340CBE7CA42DBE9806D4
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/_KFICuKhb2qHsiyV9xjfVZ4gUqU.roa
Signing time: Mon 02 Jan 2023 07:24:56 +0000
ROA not before: Mon 02 Jan 2023 07:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198583
IP address blocks: 185.153.245.0/24 maxlen: 24
185.153.246.0/24 maxlen: 24
185.153.247.0/24 maxlen: 24
37.148.242.0/24 maxlen: 24
37.148.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:80:37:27:01:34:0c:be:7c:a4:2d:be:98:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 2 07:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca1480ae2a16f6a87b22c95f718df559e2052a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:eb:5c:ab:ef:64:4d:05:af:e0:1d:b5:91:
d8:bf:9d:50:f0:0d:0a:66:87:6c:74:6c:a8:36:09:
d5:f1:9f:eb:76:88:41:c9:88:02:e1:51:88:bf:39:
c2:06:25:c6:8b:31:4d:7c:41:25:d8:2d:2d:94:ff:
4d:d9:4f:79:06:74:fd:9d:8d:94:5f:b0:f7:bc:38:
f0:75:f6:85:1f:f5:82:84:10:28:48:59:65:04:b6:
88:84:67:11:e1:7a:a7:8a:8e:a6:4b:28:85:8f:f3:
5e:dd:65:a6:bd:cd:b1:11:18:fa:e0:19:b2:51:44:
2d:4a:15:21:38:f1:ac:ae:33:8f:e9:09:63:68:49:
db:c3:fe:62:78:6e:ab:c2:f8:29:95:15:8d:60:6d:
8d:6d:ac:27:c7:51:2a:45:6f:f0:45:b0:5f:cc:cd:
ff:15:95:6e:e8:eb:ff:e5:51:50:25:b7:6d:66:26:
4f:8f:ae:18:35:d1:4b:9a:ea:09:ef:0f:72:f2:28:
a8:ab:29:13:b9:3c:56:70:02:0a:0d:1f:bf:cd:1f:
51:a8:f5:b7:0a:b6:f4:4d:70:43:d9:8f:a2:99:02:
87:9a:8a:3c:d3:ed:71:02:78:5d:07:8f:95:6e:56:
e6:22:26:67:ea:6b:20:fd:09:26:fa:ec:73:35:b5:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:48:0A:E2:A1:6F:6A:87:B2:2C:95:F7:18:DF:55:9E:20:52:A5
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/_KFICuKhb2qHsiyV9xjfVZ4gUqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.242.0/23
185.153.245.0-185.153.247.255
Signature Algorithm: sha256WithRSAEncryption
3d:d6:28:8b:b2:e6:04:47:76:5b:84:63:64:5e:6b:25:73:24:
3e:9a:99:ea:d2:5b:0f:8a:d3:74:78:de:bb:81:90:52:ca:9d:
bb:65:38:cd:e2:6f:94:ef:8e:d5:78:ce:dd:4e:8e:59:d2:ac:
5f:d4:2c:cd:ea:ba:8f:de:86:d5:56:f7:74:60:4e:0c:4a:f2:
0c:b3:0e:4e:8f:6c:3e:9a:a6:fb:f5:83:40:6b:62:65:ca:db:
36:06:0d:80:ea:56:15:53:c2:df:35:4b:61:cd:c9:ba:5d:95:
9d:9c:03:6f:32:04:26:15:51:da:8c:6d:83:22:cd:c9:25:a0:
e5:a7:44:ee:20:84:87:a0:23:d1:29:b3:18:3a:fd:83:eb:ec:
e7:ad:85:b5:8d:cc:a7:88:3f:05:35:7b:a5:48:da:df:24:2d:
bb:4e:af:9c:ee:ba:8b:41:51:ae:af:23:8d:eb:75:49:87:58:
72:38:aa:33:f4:e8:37:fa:7b:95:df:64:de:f2:d4:10:46:97:
ab:99:b7:a8:0f:ec:87:af:d7:04:d1:34:59:d7:e6:43:1f:44:
67:64:be:9d:19:23:f4:56:21:29:da:91:8e:0a:77:0d:71:b2:
84:2b:45:73:c3:f3:f2:05:39:7b:7f:52:5f:4b:53:01:c4:7f:
d5:b7:a5:64
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVxXoA3JwE0DL58pC2+mAbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1
MGY1YTkwHhcNMjMwMTAyMDcyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2ExNDgwYWUyYTE2ZjZhODdiMjJjOTVmNzE4ZGY1NTllMjA1MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLTrXKvvZE0Fr+AdtZHYv51Q8A0K
ZodsdGyoNgnV8Z/rdohByYgC4VGIvznCBiXGizFNfEEl2C0tlP9N2U95BnT9nY2U
X7D3vDjwdfaFH/WChBAoSFllBLaIhGcR4Xqnio6mSyiFj/Ne3WWmvc2xERj64Bmy
UUQtShUhOPGsrjOP6QljaEnbw/5ieG6rwvgplRWNYG2Nbawnx1EqRW/wRbBfzM3/
FZVu6Ov/5VFQJbdtZiZPj64YNdFLmuoJ7w9y8iioqykTuTxWcAIKDR+/zR9RqPW3
Crb0TXBD2Y+imQKHmoo80+1xAnhdB4+VblbmIiZn6msg/Qkm+uxzNbWEwQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPyhSArioW9qh7IslfcY31WeIFKlMB8GA1UdIwQY
MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt
NjZkMjUzNDMyZjVmLzEvX0tGSUN1S2hiMnFIc2l5Vjl4amZWWjRnVXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm
LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBJZTyMAwD
BAC5mfUDBAO5mfAwDQYJKoZIhvcNAQELBQADggEBAD3WKIuy5gRHdluEY2ReayVz
JD6amerSWw+K03R43ruBkFLKnbtlOM3ib5TvjtV4zt1OjlnSrF/ULM3quo/ehtVW
93RgTgxK8gyzDk6PbD6apvv1g0BrYmXK2zYGDYDqVhVTwt81S2HNybpdlZ2cA28y
BCYVUdqMbYMizckloOWnRO4ghIegI9Epsxg6/YPr7OethbWNzKeIPwU1e6VI2t8k
LbtOr5zuuotBUa6vI43rdUmHWHI4qjP06Df6e5XfZN7y1BBGl6uZt6gP7Iev1wTR
NFnX5kMfRGdkvp0ZI/RWISnakY4Kdw1xsoQrRXPD8/IFOXt/Ul9LUwHEf9W3pWQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org