Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iMc2mzXuS_-rxQuAkwHG74iE0Bg.roa
File: iMc2mzXuS_-rxQuAkwHG74iE0Bg.roa (raw, json)
Hash identifier: 9CdW4k78mxl+c7SPvO84x9mwz1IZQfA+CiO2Sh0IKR0=
Subject key identifier: 88:C7:36:9B:35:EE:4B:FF:AB:C5:0B:80:93:01:C6:EF:88:84:D0:18
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0187CC14180A95FCC2C745D8B70AB75C630A
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iMc2mzXuS_-rxQuAkwHG74iE0Bg.roa
Signing time: Sat 29 Apr 2023 08:14:41 +0000
ROA not before: Sat 29 Apr 2023 08:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
45.149.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 16:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:14:18:0a:95:fc:c2:c7:45:d8:b7:0a:b7:5c:63:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 29 08:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c7369b35ee4bffabc50b809301c6ef8884d018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:7d:b3:79:e4:00:c3:a8:87:7c:47:b6:67:
d0:1f:c6:36:90:58:23:9a:82:62:c7:ba:af:da:fc:
ed:d9:87:00:1a:0b:ff:00:b5:3f:1c:ff:28:db:a3:
1a:79:eb:2d:89:bf:99:7c:10:d4:33:ad:8b:97:55:
f7:c1:37:ed:c1:dd:2e:24:ae:b6:81:c3:36:54:91:
6a:8f:46:27:81:df:1d:28:7c:67:07:97:31:ec:4e:
9f:8c:03:5b:30:e3:f0:bf:a9:b4:20:72:36:b7:31:
bc:5c:40:ed:12:b0:6e:44:b1:49:86:e2:8e:d8:f4:
2e:96:b9:95:99:e6:e0:05:49:04:42:eb:e4:69:5b:
03:ba:d8:49:4d:2e:e6:60:67:2f:7c:10:44:04:3d:
0c:df:74:42:0e:85:02:33:90:90:69:fd:c3:46:ee:
99:93:23:51:a0:9c:f4:7b:ce:17:a8:a2:df:b0:0c:
93:e3:1a:b5:fb:4b:16:d7:ec:9f:aa:a3:1a:38:e1:
51:82:76:62:36:1f:e2:f9:50:f7:af:71:71:a6:4a:
70:19:16:79:49:7d:42:18:8a:bc:14:aa:51:36:79:
8c:0e:7b:8f:85:26:f2:40:1f:0a:9c:4e:3f:2b:3a:
e4:7f:d0:2d:1f:01:1b:21:cf:1e:a0:49:42:b4:f3:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:36:9B:35:EE:4B:FF:AB:C5:0B:80:93:01:C6:EF:88:84:D0:18
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iMc2mzXuS_-rxQuAkwHG74iE0Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
45.149.166.0/24
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
12:86:ad:37:d1:ba:98:e4:4a:64:95:b4:eb:b9:f8:5f:68:5a:
fd:ff:a4:55:ce:75:9b:d1:dd:b8:a5:95:23:be:f9:6e:21:2e:
dd:e7:59:2d:be:98:fc:f4:95:84:73:14:c7:cb:9a:4d:e9:1f:
20:7f:ff:40:81:b1:35:7f:23:4a:4f:97:05:ff:ee:40:7d:f8:
d2:27:11:a1:82:66:11:5b:43:d3:02:db:8b:1e:e6:86:75:3c:
1f:30:33:2f:21:d4:f2:8a:da:e4:e9:c2:a5:a3:bb:a2:79:ae:
50:46:61:92:25:e3:84:ac:8c:35:11:70:d8:33:26:ab:84:69:
52:b0:64:3c:b6:68:62:5a:cf:8b:6c:ad:15:90:86:11:f7:87:
96:21:b6:3b:27:2d:91:79:6d:66:b7:9c:6f:34:d2:e6:96:a2:
86:f9:6e:fc:2a:34:8d:d9:a3:d0:52:4f:7f:00:e0:cb:34:ad:
b1:f3:c6:0c:49:ff:50:8c:50:53:6d:e5:c0:75:0e:66:b7:de:
5a:ff:5e:51:0a:17:29:3c:ee:ce:50:5a:45:04:5f:90:df:87:
6b:08:fd:b3:5b:71:b0:ea:e2:16:5e:d0:9a:5c:09:66:ff:f1:
24:c6:40:a6:81:c3:75:50:0f:f0:7a:53:77:7d:92:37:ba:c2:
42:6a:a3:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYfMFBgKlfzCx0XYtwq3XGMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwNDI5MDgxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGM3MzY5YjM1ZWU0YmZmYWJjNTBiODA5MzAxYzZlZjg4ODRkMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfN9s3nkAMOoh3xHtmfQH8Y2kFgj
moJix7qv2vzt2YcAGgv/ALU/HP8o26Maeestib+ZfBDUM62Ll1X3wTftwd0uJK62
gcM2VJFqj0Yngd8dKHxnB5cx7E6fjANbMOPwv6m0IHI2tzG8XEDtErBuRLFJhuKO
2PQulrmVmebgBUkEQuvkaVsDuthJTS7mYGcvfBBEBD0M33RCDoUCM5CQaf3DRu6Z
kyNRoJz0e84XqKLfsAyT4xq1+0sW1+yfqqMaOOFRgnZiNh/i+VD3r3FxpkpwGRZ5
SX1CGIq8FKpRNnmMDnuPhSbyQB8KnE4/Kzrkf9AtHwEbIc8eoElCtPNl2wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIjHNps17kv/q8ULgJMBxu+IhNAYMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvaU1jMm16WHVTXy1yeFF1QWt3SEc3NGlFMEJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZWkAwQA
LZWmAwQAwvYlMA0GCSqGSIb3DQEBCwUAA4IBAQAShq030bqY5EpklbTrufhfaFr9
/6RVznWb0d24pZUjvvluIS7d51ktvpj89JWEcxTHy5pN6R8gf/9AgbE1fyNKT5cF
/+5AffjSJxGhgmYRW0PTAtuLHuaGdTwfMDMvIdTyitrk6cKlo7uiea5QRmGSJeOE
rIw1EXDYMyarhGlSsGQ8tmhiWs+LbK0VkIYR94eWIbY7Jy2ReW1mt5xvNNLmlqKG
+W78KjSN2aPQUk9/AODLNK2x88YMSf9QjFBTbeXAdQ5mt95a/15RChcpPO7OUFpF
BF+Q34drCP2zW3Gw6uIWXtCaXAlm//EkxkCmgcN1UA/welN3fZI3usJCaqMH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org