Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/fC9qZMh5VW4UEKPL0k73GGrQE6g.roa
File: fC9qZMh5VW4UEKPL0k73GGrQE6g.roa (raw, json)
Hash identifier: weTOuEWOTlONIpD2tFIXfnMY0kzZhbnHAHrcHmlpWKo=
Subject key identifier: 7C:2F:6A:64:C8:79:55:6E:14:10:A3:CB:D2:4E:F7:18:6A:D0:13:A8
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01856C4A4853D34FC9BBBAE48242E117BAC7
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/fC9qZMh5VW4UEKPL0k73GGrQE6g.roa
Signing time: Sun 01 Jan 2023 07:44:45 +0000
ROA not before: Sun 01 Jan 2023 07:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208221
IP address blocks: 185.84.172.0/23 maxlen: 23
185.84.172.0/24 maxlen: 24
185.84.173.0/24 maxlen: 24
2a05:7400:8000::/34 maxlen: 34
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:48:53:d3:4f:c9:bb:ba:e4:82:42:e1:17:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 07:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2f6a64c879556e1410a3cbd24ef7186ad013a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:d3:61:a4:e9:74:d8:58:27:f3:86:71:3b:
86:3c:9d:49:c4:f1:c9:71:f5:30:69:9c:ac:bb:78:
9d:d6:cb:90:5d:f1:84:f7:59:67:9b:41:a3:28:d7:
36:1c:04:ab:f7:1d:4f:dd:a0:62:fe:77:1a:15:d7:
60:d1:58:34:b6:37:88:bf:18:80:db:13:8a:1f:b1:
ba:fb:27:0d:b3:9d:ae:d6:03:cf:60:d9:60:59:2a:
c7:05:e0:66:14:fb:07:5a:01:bd:2f:7d:e5:d6:05:
be:b3:3f:a1:be:dc:89:70:eb:70:80:89:d8:43:49:
b2:51:75:00:ae:ae:b8:75:13:be:98:e1:97:64:9d:
73:64:f3:91:70:b1:f1:32:26:06:8d:25:60:93:8b:
f6:2f:fc:7b:57:35:f0:ae:48:da:8d:80:2a:92:e5:
5a:24:fd:2c:95:eb:d8:5f:56:cc:77:23:cf:fc:1b:
dd:ba:9f:a4:ae:aa:e8:48:c3:ec:86:fc:2e:a5:79:
aa:c3:35:7d:37:d8:17:6b:87:ba:40:65:85:a8:1c:
ae:55:f6:03:4b:e9:5a:47:34:9d:08:d6:44:4b:a7:
a7:b7:50:9d:55:0e:0f:03:19:0c:16:84:bb:71:de:
a6:40:6b:ac:a2:28:2d:e4:79:71:41:08:a2:f7:15:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:6A:64:C8:79:55:6E:14:10:A3:CB:D2:4E:F7:18:6A:D0:13:A8
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/fC9qZMh5VW4UEKPL0k73GGrQE6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.172.0/23
IPv6:
2a05:7400:8000::/34
Signature Algorithm: sha256WithRSAEncryption
45:b9:a5:0d:17:a7:b6:bb:69:4d:be:d1:6e:b8:a4:04:84:62:
36:6b:f4:2e:ed:3d:ec:c3:20:d2:14:19:a8:54:9e:ef:b2:e1:
7e:cf:c6:1f:e5:b1:80:b7:d8:d6:91:1e:66:53:79:33:6a:c6:
aa:9b:56:9b:e8:89:46:8e:29:47:5e:8a:1d:57:30:cf:ca:e5:
a0:2a:4e:5a:97:c8:95:c9:af:03:1d:bc:ef:cf:f8:e8:f2:79:
38:54:2d:d1:7b:31:a3:35:05:81:f2:b5:91:1f:15:79:73:2a:
90:47:ec:01:3b:68:f3:31:5a:2e:b4:f2:8d:62:a6:0c:3e:47:
34:9a:60:5d:88:5a:3d:a5:93:e7:54:f9:f3:ec:ba:40:ea:ce:
76:dd:e4:ab:15:ce:e8:15:5c:37:52:86:00:eb:57:36:74:b7:
07:a5:42:91:a7:24:bb:ef:69:1a:8a:a5:83:bb:8d:78:f9:d0:
58:9c:b6:84:a0:e5:4d:81:bb:ff:28:b8:7f:43:e4:fc:ec:10:
fa:e2:f0:2c:c6:d5:b9:a6:c3:28:1b:09:d7:ef:d3:9f:0a:de:
64:53:4c:6b:89:a8:09:07:9c:42:8e:64:13:14:28:e4:18:ad:
f0:d7:eb:30:8a:1e:d6:c8:ec:fc:5d:a4:42:77:53:8e:65:fb:
9b:09:9b:cd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVsSkhT00/Ju7rkgkLhF7rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1
M2U5MDAwHhcNMjMwMTAxMDc0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzJmNmE2NGM4Nzk1NTZlMTQxMGEzY2JkMjRlZjcxODZhZDAxM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuHTYaTpdNhYJ/OGcTuGPJ1JxPHJ
cfUwaZysu3id1suQXfGE91lnm0GjKNc2HASr9x1P3aBi/ncaFddg0Vg0tjeIvxiA
2xOKH7G6+ycNs52u1gPPYNlgWSrHBeBmFPsHWgG9L33l1gW+sz+hvtyJcOtwgInY
Q0myUXUArq64dRO+mOGXZJ1zZPORcLHxMiYGjSVgk4v2L/x7VzXwrkjajYAqkuVa
JP0slevYX1bMdyPP/Bvdup+krqroSMPshvwupXmqwzV9N9gXa4e6QGWFqByuVfYD
S+laRzSdCNZES6ent1CdVQ4PAxkMFoS7cd6mQGusoigt5HlxQQii9xWSCQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFHwvamTIeVVuFBCjy9JO9xhq0BOoMB8GA1UdIwQY
MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et
YzZmMWU2YWM5YmE5LzEvZkM5cVpNaDVWVzRVRUtQTDBrNzNHR3JRRTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5
LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuVSsMA4E
AgACMAgDBgYqBXQAgDANBgkqhkiG9w0BAQsFAAOCAQEARbmlDRentrtpTb7Rbrik
BIRiNmv0Lu097MMg0hQZqFSe77Lhfs/GH+WxgLfY1pEeZlN5M2rGqptWm+iJRo4p
R16KHVcwz8rloCpOWpfIlcmvAx2878/46PJ5OFQt0XsxozUFgfK1kR8VeXMqkEfs
ATto8zFaLrTyjWKmDD5HNJpgXYhaPaWT51T58+y6QOrOdt3kqxXO6BVcN1KGAOtX
NnS3B6VCkacku+9pGoqlg7uNePnQWJy2hKDlTYG7/yi4f0Pk/OwQ+uLwLMbVuabD
KBsJ1+/TnwreZFNMa4moCQecQo5kExQo5Bit8NfrMIoe1sjs/F2kQndTjmX7mwmb
zQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org