Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/ccHc_ycmqakgwIkJ4z-OS4wGjPA.roa
File: ccHc_ycmqakgwIkJ4z-OS4wGjPA.roa (raw, json)
Hash identifier: y2uvmDzAE2aBNHdzRu0YS9tVxQB4tBkF54iuYtABwvs=
Subject key identifier: 71:C1:DC:FF:27:26:A9:A9:20:C0:89:09:E3:3F:8E:4B:8C:06:8C:F0
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 01856E942C13DB9CB8F6745ABE3915AE279E
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/ccHc_ycmqakgwIkJ4z-OS4wGjPA.roa
Signing time: Sun 01 Jan 2023 18:24:42 +0000
ROA not before: Sun 01 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209138
IP address blocks: 185.167.104.0/22 maxlen: 22
185.167.104.0/24 maxlen: 24
185.167.105.0/24 maxlen: 24
185.167.106.0/24 maxlen: 24
185.167.107.0/24 maxlen: 24
2a0f:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2c:13:db:9c:b8:f6:74:5a:be:39:15:ae:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Jan 1 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c1dcff2726a9a920c08909e33f8e4b8c068cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:01:81:16:7f:5f:8d:7a:80:6c:a4:5e:a7:
a0:7b:c1:5e:e0:4e:da:93:91:89:08:13:4e:4c:b5:
b3:5d:00:53:a1:1e:4f:93:3a:f1:f2:c5:91:71:54:
68:24:78:90:57:60:42:49:c4:81:e6:b0:b3:51:8b:
7a:e2:94:2c:93:61:79:4f:f6:7c:1d:c4:5e:48:60:
cb:15:53:aa:cc:f3:4f:e9:45:9c:71:6e:ae:34:94:
b9:39:ca:7c:31:6c:69:1c:4f:6b:96:a6:cc:be:88:
3c:35:82:6e:3f:ec:8f:04:10:6a:b6:6e:79:8b:41:
77:0a:6f:9a:8b:e6:12:dc:73:a4:25:e3:e4:9b:ea:
94:7b:68:3e:86:32:b2:f3:5c:d0:dd:46:dc:7d:f5:
8b:50:85:97:9a:ac:59:10:f0:71:a4:da:df:49:1d:
b7:a5:fb:f9:3a:26:ac:06:a4:43:56:7f:22:0e:b3:
e7:cf:17:85:a4:3d:ec:9c:1b:04:a9:a9:5d:1b:42:
6b:c8:98:0b:62:78:96:9a:a8:26:c5:b9:ae:27:ed:
61:c7:1a:4b:67:e2:78:3a:f8:61:11:50:d2:92:ae:
2f:f3:c7:4f:a4:20:6b:73:ad:5c:e2:0d:8e:dd:16:
dc:2e:fc:ad:87:57:ef:ad:d0:16:e8:93:7d:eb:6a:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:DC:FF:27:26:A9:A9:20:C0:89:09:E3:3F:8E:4B:8C:06:8C:F0
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/ccHc_ycmqakgwIkJ4z-OS4wGjPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.104.0/22
IPv6:
2a0f:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:82:09:e0:db:42:f7:29:b1:09:6c:ff:0b:aa:d7:c8:af:1f:
94:0f:e6:85:01:e0:8e:44:fc:61:73:fa:cb:5c:13:06:38:52:
79:53:fb:82:fa:c3:44:93:b9:70:3c:e9:e8:18:80:bf:43:8d:
0f:d5:df:36:5e:37:8d:b5:31:86:05:92:b8:bd:eb:c0:47:15:
e6:8e:c9:8a:12:48:3f:f6:c8:3d:3a:08:82:6e:07:8c:c2:3c:
bf:e3:0a:09:c2:64:92:b5:2b:9e:91:8c:e6:d9:44:e9:26:9d:
90:18:bc:71:3e:86:33:05:f1:5a:f6:fa:16:b9:78:cb:9a:05:
1b:a4:e7:70:4e:66:c4:57:24:3f:32:d7:d1:fd:5a:c7:3f:9f:
a8:e8:bf:bb:05:0f:1c:7a:5b:78:73:b9:0d:53:ef:89:86:27:
ed:65:2a:c1:d1:be:f3:9e:2e:a6:2b:57:e5:32:87:80:56:f3:
f9:4c:a2:c0:45:6d:1b:ff:00:66:ae:c4:11:70:52:9e:31:5a:
14:38:ab:a9:20:b4:9c:dc:69:0e:be:a5:17:36:d8:9a:e4:19:
ee:fb:03:a9:a4:e0:7e:7f:bb:8d:f0:86:6b:53:b6:5d:d4:ce:
b9:ed:29:70:89:c9:ba:9e:74:41:ec:22:09:b5:d4:cf:fc:f5:
50:35:94:8f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVulCwT25y49nRavjkVrieeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy
N2YxOGEwHhcNMjMwMTAxMTgyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWMxZGNmZjI3MjZhOWE5MjBjMDg5MDllMzNmOGU0YjhjMDY4Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqEBgRZ/X416gGykXqege8Fe4E7a
k5GJCBNOTLWzXQBToR5Pkzrx8sWRcVRoJHiQV2BCScSB5rCzUYt64pQsk2F5T/Z8
HcReSGDLFVOqzPNP6UWccW6uNJS5Ocp8MWxpHE9rlqbMvog8NYJuP+yPBBBqtm55
i0F3Cm+ai+YS3HOkJePkm+qUe2g+hjKy81zQ3UbcffWLUIWXmqxZEPBxpNrfSR23
pfv5OiasBqRDVn8iDrPnzxeFpD3snBsEqaldG0JryJgLYniWmqgmxbmuJ+1hxxpL
Z+J4OvhhEVDSkq4v88dPpCBrc61c4g2O3RbcLvyth1fvrdAW6JN962odmwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHHB3P8nJqmpIMCJCeM/jkuMBozwMB8GA1UdIwQY
MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct
MmVkMWZkZTY4NTE2LzEvY2NIY195Y21xYWtnd0lrSjR6LU9TNHdHalBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2
LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuadoMA0E
AgACMAcDBQMqD2LAMA0GCSqGSIb3DQEBCwUAA4IBAQA2ggng20L3KbEJbP8LqtfI
rx+UD+aFAeCORPxhc/rLXBMGOFJ5U/uC+sNEk7lwPOnoGIC/Q40P1d82XjeNtTGG
BZK4vevARxXmjsmKEkg/9sg9OgiCbgeMwjy/4woJwmSStSuekYzm2UTpJp2QGLxx
PoYzBfFa9voWuXjLmgUbpOdwTmbEVyQ/MtfR/VrHP5+o6L+7BQ8celt4c7kNU++J
hiftZSrB0b7zni6mK1flMoeAVvP5TKLARW0b/wBmrsQRcFKeMVoUOKupILSc3GkO
vqUXNtia5Bnu+wOppOB+f7uN8IZrU7Zd1M657Slwicm6nnRB7CIJtdTP/PVQNZSP
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:17 2024 by rpki-client on console-ams.rpki-client.org