Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lPiJsFXcBPhbzB2pBO5BrBRkUdM.roa
File: lPiJsFXcBPhbzB2pBO5BrBRkUdM.roa (raw, json)
Hash identifier: eqIloI2MO4Q+Yrwo09eBjReGaWm2pzA2NGAyuE0qmVU=
Subject key identifier: 94:F8:89:B0:55:DC:04:F8:5B:CC:1D:A9:04:EE:41:AC:14:64:51:D3
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 0185A29A627A1EB78BE625C746AF133BC78E
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lPiJsFXcBPhbzB2pBO5BrBRkUdM.roa
Signing time: Wed 11 Jan 2023 20:51:44 +0000
ROA not before: Wed 11 Jan 2023 20:51:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202932
IP address blocks: 185.47.224.0/22 maxlen: 24
185.47.227.0/24 maxlen: 24
185.150.68.0/22 maxlen: 22
2a07:6e80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:9a:62:7a:1e:b7:8b:e6:25:c7:46:af:13:3b:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 11 20:51:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f889b055dc04f85bcc1da904ee41ac146451d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:87:96:7a:d5:26:ad:5a:b4:95:c0:d8:a0:
b4:8b:e6:dd:83:2a:00:f2:23:a7:9b:a0:93:4b:aa:
49:9f:bb:e5:bb:9d:90:6b:98:17:c2:87:a9:c0:75:
75:67:1a:82:bc:cc:41:6e:83:b3:7c:a7:52:99:d6:
85:fd:db:98:48:ff:8f:93:cc:14:90:cc:99:a5:9e:
78:e2:32:59:23:b0:2a:20:9f:58:7b:e8:e1:d9:4e:
db:81:06:68:52:76:cb:8e:d0:b8:ce:34:53:32:54:
07:11:5e:67:04:23:84:31:4b:07:80:5d:e1:38:ea:
7f:33:6d:da:32:b1:b2:45:65:e4:cd:b6:8a:67:a1:
93:31:d4:06:e9:e9:b0:d0:35:64:2c:eb:df:ac:4c:
a9:62:9c:ab:10:ae:16:1e:7f:3f:7c:31:8d:ff:54:
c2:8b:6a:d1:ab:dd:18:75:0a:ab:9c:07:be:ed:91:
ca:06:d5:bf:5e:81:05:f5:2a:65:9f:11:bb:a6:c2:
97:bc:37:57:16:ae:a6:a9:04:7b:da:75:71:c7:a4:
a4:35:a0:35:1d:6c:8d:94:a4:f0:a1:fd:9f:35:77:
6b:6d:44:7c:30:19:5c:bd:e1:40:80:70:b7:60:7e:
09:60:96:77:b6:6f:31:03:14:5e:01:61:68:a8:da:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:89:B0:55:DC:04:F8:5B:CC:1D:A9:04:EE:41:AC:14:64:51:D3
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lPiJsFXcBPhbzB2pBO5BrBRkUdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.224.0/22
185.150.68.0/22
IPv6:
2a07:6e80::/29
Signature Algorithm: sha256WithRSAEncryption
03:5c:11:e8:4c:4a:34:0a:4d:4a:4c:e2:c4:49:4d:30:79:e6:
0d:b3:58:23:59:c7:a3:cd:a5:ab:4f:6b:d2:b9:44:50:e9:63:
55:1a:83:c0:6e:9c:c2:2a:c9:40:6c:66:a0:f9:a6:42:18:14:
29:4f:ac:ee:52:b0:f7:8d:ab:aa:e1:d0:7f:4d:64:d9:d7:f2:
72:fa:e5:7c:f6:f4:d5:84:02:ec:f1:6d:36:83:a8:18:67:23:
cb:39:80:f8:1a:b9:90:e9:33:9b:76:b1:07:81:f0:40:f6:a0:
7e:8b:62:0b:e7:d3:79:0c:85:ab:1d:8a:1f:11:1d:49:fd:73:
1a:ae:a6:ea:46:a1:85:3e:66:1c:a5:5d:4b:57:64:a4:93:ae:
fd:f3:50:45:b3:70:bd:22:da:86:8a:4a:39:dd:5c:51:ca:d2:
69:a1:f8:a5:65:49:66:d5:70:23:f4:b6:0b:07:9d:3a:bd:8c:
ef:3d:2b:87:98:64:77:71:a7:68:00:e3:e3:76:8c:44:6f:b2:
dc:30:bf:88:fc:11:e6:f6:b2:86:ea:87:0f:f0:1a:ad:2a:b1:
21:7b:6f:30:f5:bb:fd:e8:5d:59:0e:8b:64:be:3f:58:de:75:
cc:8a:4a:2f:7d:56:3e:40:2c:24:ab:30:1a:64:7f:15:e7:f8:
cd:9d:68:ce
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYWimmJ6HreL5iXHRq8TO8eOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTgyNmRlMTA3MGQ5ZDc5ZGFhOWU0MTVmYzQzMjYxM2Nj
NTdlNTcwHhcNMjMwMTExMjA1MTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY4ODliMDU1ZGMwNGY4NWJjYzFkYTkwNGVlNDFhYzE0NjQ1MWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLWHlnrVJq1atJXA2KC0i+bdgyoA
8iOnm6CTS6pJn7vlu52Qa5gXwoepwHV1ZxqCvMxBboOzfKdSmdaF/duYSP+Pk8wU
kMyZpZ544jJZI7AqIJ9Ye+jh2U7bgQZoUnbLjtC4zjRTMlQHEV5nBCOEMUsHgF3h
OOp/M23aMrGyRWXkzbaKZ6GTMdQG6emw0DVkLOvfrEypYpyrEK4WHn8/fDGN/1TC
i2rRq90YdQqrnAe+7ZHKBtW/XoEF9SplnxG7psKXvDdXFq6mqQR72nVxx6SkNaA1
HWyNlKTwof2fNXdrbUR8MBlcveFAgHC3YH4JYJZ3tm8xAxReAWFoqNpBfQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJT4ibBV3AT4W8wdqQTuQawUZFHTMB8GA1UdIwQY
MBaAFPjoJt4QcNnXnaqeQV/EMmE8xX5XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PZ20zaEJ3MmRlZHFwNUJYOFF5WVR6RmZsYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4
LWVhZWRiNzA5ZWZiZi8xL2xQaUpzRlhjQlBoYnpCMnBCTzVCckJSa1VkTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4LWVhZWRiNzA5ZWZi
Zi8xLzEtT2dtM2hCdzJkZWRxcDVCWDhReVlUekZmbGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK5L+AD
BAK5lkQwDQQCAAIwBwMFAyoHboAwDQYJKoZIhvcNAQELBQADggEBAANcEehMSjQK
TUpM4sRJTTB55g2zWCNZx6PNpatPa9K5RFDpY1Uag8BunMIqyUBsZqD5pkIYFClP
rO5SsPeNq6rh0H9NZNnX8nL65Xz29NWEAuzxbTaDqBhnI8s5gPgauZDpM5t2sQeB
8ED2oH6LYgvn03kMhasdih8RHUn9cxqupupGoYU+ZhylXUtXZKSTrv3zUEWzcL0i
2oaKSjndXFHK0mmh+KVlSWbVcCP0tgsHnTq9jO89K4eYZHdxp2gA4+N2jERvstww
v4j8Eeb2sobqhw/wGq0qsSF7bzD1u/3oXVkOi2S+P1jedcyKSi99Vj5ALCSrMBpk
fxXn+M2daM4=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:49 2024 by rpki-client on console-fra.rpki-client.org