Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/CkrnDe6qiZhS3E1rBKb_MxcTDMk.roa
File: CkrnDe6qiZhS3E1rBKb_MxcTDMk.roa (raw, json)
Hash identifier: GKpqekKxM2EkYvA81aRO82TrNFGoxWPGh0DuL+dH2rY=
Subject key identifier: 0A:4A:E7:0D:EE:AA:89:98:52:DC:4D:6B:04:A6:FF:33:17:13:0C:C9
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01856EAFD610D9C3602CF945A9E626EEF5DE
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/CkrnDe6qiZhS3E1rBKb_MxcTDMk.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51262
IP address blocks: 185.147.8.0/24 maxlen: 24
185.147.10.0/23 maxlen: 23
185.147.9.0/24 maxlen: 24
2a0a:dc01::/32 maxlen: 32
2a0a:dc05::/32 maxlen: 32
2a0a:dc02::/32 maxlen: 32
2a0a:dc00::/32 maxlen: 32
2a0a:dc06::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d6:10:d9:c3:60:2c:f9:45:a9:e6:26:ee:f5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a4ae70deeaa899852dc4d6b04a6ff3317130cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:c3:5f:58:33:6a:4b:82:32:5f:74:94:b2:
35:14:f5:9e:6e:95:77:f8:a9:3a:b0:2a:06:75:1e:
c8:8c:59:5a:85:28:8b:b5:fd:6e:31:1a:0f:bf:58:
fa:36:00:a0:f7:b1:31:4f:e9:2d:5d:cb:7f:e6:58:
4d:79:82:8f:db:31:72:77:0b:ef:d3:42:8c:e3:ab:
04:ca:36:d7:ac:7c:5c:4c:30:c9:f0:49:30:36:bf:
dc:4c:d6:b4:e0:06:b1:94:6b:f8:70:41:77:54:3f:
2a:4f:e6:4d:6c:06:a3:be:3d:5e:7e:60:a6:d7:91:
8e:af:5d:b7:da:e3:48:06:a6:ca:17:24:4c:e9:f3:
64:58:5c:1f:b4:08:9b:3a:ac:02:e4:99:ae:9f:ad:
06:dc:4a:09:4a:db:0f:a8:f0:bc:7b:39:59:bc:e2:
be:e6:ad:9f:92:2e:50:ad:fc:99:a3:8c:86:78:5f:
75:b3:b5:d2:f3:a1:13:15:82:95:27:91:f9:20:9f:
d8:a2:25:ba:f5:c9:76:e8:ad:9b:de:7b:55:30:ac:
5f:a4:b9:e4:9f:97:fa:ef:a5:44:c8:26:fe:8d:d6:
8b:b1:cd:d3:52:7a:ec:85:5d:28:1b:06:57:58:1b:
7e:22:e9:fe:4e:42:45:2a:c3:f9:f9:b0:0e:cb:9e:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:E7:0D:EE:AA:89:98:52:DC:4D:6B:04:A6:FF:33:17:13:0C:C9
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/CkrnDe6qiZhS3E1rBKb_MxcTDMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.8.0/22
IPv6:
2a0a:dc00::-2a0a:dc02:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:dc05::-2a0a:dc06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:02:4f:92:b6:57:63:ff:d5:82:f5:44:d9:7f:4e:ad:34:89:
d3:e5:7a:43:e8:77:9b:20:b9:a7:18:7f:a2:d4:16:04:42:62:
eb:c2:6d:8d:2f:a4:86:86:57:cf:7a:e8:dc:8c:f0:ac:06:9c:
37:df:d5:20:79:7f:a1:fa:83:bd:35:3e:c2:28:4b:86:7d:e6:
b5:36:42:bc:97:b2:12:a1:9d:4d:e5:f4:e0:f0:a1:39:47:38:
6a:7b:09:b7:49:ab:3c:9d:5b:88:82:ea:fc:1a:10:08:60:ff:
56:d9:90:c5:73:7e:17:75:f9:2b:51:f3:a7:c1:87:43:2d:b7:
89:49:7a:fe:91:45:4a:23:63:ae:91:05:a9:bb:74:a8:93:f9:
ce:ba:69:cf:78:34:b6:d7:20:20:6a:14:e9:cd:7f:fb:75:e4:
5c:1e:98:7a:33:58:48:6a:3c:91:2e:95:c1:d8:a4:cf:98:64:
a0:81:0b:f1:e7:cc:d4:88:c1:71:00:1c:1e:31:b5:37:93:9f:
ed:79:2d:cb:79:3a:0b:8d:f2:dd:5e:59:7c:a9:2a:75:44:12:
f3:fe:de:a7:e4:29:b0:bd:5b:46:e4:8c:d5:d3:ef:cb:fc:be:
e9:b4:87:e8:eb:19:f5:29:b3:86:95:c4:e6:84:e6:fc:46:2b:
fe:50:c7:0a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVur9YQ2cNgLPlFqeYm7vXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjMwMTAxMTg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRhZTcwZGVlYWE4OTk4NTJkYzRkNmIwNGE2ZmYzMzE3MTMwY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjovDX1gzakuCMl90lLI1FPWebpV3
+Kk6sCoGdR7IjFlahSiLtf1uMRoPv1j6NgCg97ExT+ktXct/5lhNeYKP2zFydwvv
00KM46sEyjbXrHxcTDDJ8EkwNr/cTNa04AaxlGv4cEF3VD8qT+ZNbAajvj1efmCm
15GOr1232uNIBqbKFyRM6fNkWFwftAibOqwC5Jmun60G3EoJStsPqPC8ezlZvOK+
5q2fki5QrfyZo4yGeF91s7XS86ETFYKVJ5H5IJ/YoiW69cl26K2b3ntVMKxfpLnk
n5f676VEyCb+jdaLsc3TUnrshV0oGwZXWBt+Iun+TkJFKsP5+bAOy54U2QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFApK5w3uqomYUtxNawSm/zMXEwzJMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvQ2tybkRlNnFpWmhTM0UxckJLYl9NeGNURE1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAMBAIAATAGAwQCuZMIMCUE
AgACMB8wDQMEAioK3AMFACoK3AIwDgMFACoK3AUDBQAqCtwGMA0GCSqGSIb3DQEB
CwUAA4IBAQARAk+Stldj/9WC9UTZf06tNInT5XpD6HebILmnGH+i1BYEQmLrwm2N
L6SGhlfPeujcjPCsBpw339UgeX+h+oO9NT7CKEuGfea1NkK8l7ISoZ1N5fTg8KE5
Rzhqewm3Sas8nVuIgur8GhAIYP9W2ZDFc34XdfkrUfOnwYdDLbeJSXr+kUVKI2Ou
kQWpu3Sok/nOumnPeDS21yAgahTpzX/7deRcHph6M1hIajyRLpXB2KTPmGSggQvx
58zUiMFxABweMbU3k5/teS3LeToLjfLdXll8qSp1RBLz/t6n5CmwvVtG5IzV0+/L
/L7ptIfo6xn1KbOGlcTmhOb8Riv+UMcK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:52 2023 by rpki-client on console-ams.rpki-client.org