Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PA77zf9GT2a-jOkozbEjIOoyuWs.roa
File: PA77zf9GT2a-jOkozbEjIOoyuWs.roa (raw, json)
Hash identifier: nj98baoMnk7vTnXUGId2SIXpl1dJszKNIDav9p3dmNQ=
Subject key identifier: 3C:0E:FB:CD:FF:46:4F:66:BE:8C:E9:28:CD:B1:23:20:EA:32:B9:6B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0191FCCC8A8F62119C54765695C206D07599
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PA77zf9GT2a-jOkozbEjIOoyuWs.roa
Signing time: Mon 16 Sep 2024 21:45:48 +0000
ROA not before: Mon 16 Sep 2024 21:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 185.166.154.0/24 maxlen: 24
185.166.155.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 16:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:cc:8a:8f:62:11:9c:54:76:56:95:c2:06:d0:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 16 21:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c0efbcdff464f66be8ce928cdb12320ea32b96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:db:da:4d:31:08:f5:98:f1:17:9e:b6:62:
35:17:64:63:4d:5e:c5:06:7e:ba:fd:6e:29:81:4d:
98:fc:2f:31:58:db:98:99:00:4b:bf:86:f2:c7:4c:
0f:a7:96:35:e4:56:1d:cf:18:cc:b9:51:c8:f3:2c:
00:1d:35:15:ea:e7:58:c9:2b:d0:91:18:c5:64:d2:
08:30:79:06:8a:ba:02:44:94:56:ad:c9:a2:6a:47:
06:e1:f8:da:3b:96:1c:a0:57:db:86:ca:d2:b1:2e:
d7:86:59:81:c6:c3:47:ab:37:c3:a7:f5:0c:ac:c5:
8b:ff:e4:5f:11:ce:89:e8:c1:9d:a8:1e:b8:5c:e3:
66:58:b6:a3:d5:99:86:a5:c1:9a:76:07:e8:eb:f5:
9c:6a:74:1e:3d:9b:99:47:e9:75:df:4c:df:22:c0:
b3:1e:80:d5:70:7a:08:1e:81:60:f0:60:a1:c2:1f:
a5:02:94:9d:06:1c:34:31:8e:40:f1:14:a1:ce:e4:
99:e6:ce:85:26:e9:65:84:9b:44:08:17:93:14:42:
56:c5:b5:ea:00:1a:b6:4a:d2:43:63:0c:9d:59:0e:
62:c5:6e:31:e5:cc:e9:e3:c5:67:1b:67:1a:1c:51:
1b:08:36:b5:ce:5d:7f:37:dd:cb:3f:a8:33:a8:ec:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:FB:CD:FF:46:4F:66:BE:8C:E9:28:CD:B1:23:20:EA:32:B9:6B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PA77zf9GT2a-jOkozbEjIOoyuWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.154.0/23
185.203.4.0/22
194.76.136.0/24
194.76.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e1:3f:54:1b:f2:11:8d:8c:c7:96:1b:a3:d1:ad:15:cd:69:
59:68:26:2a:35:b5:6a:95:7d:1c:2a:a4:15:82:cc:0c:e8:cb:
af:ab:b9:ac:ea:ff:a1:b0:b0:98:d7:f8:d8:59:34:ed:32:6c:
13:d6:64:81:86:6e:17:19:37:28:be:a3:15:a9:45:46:cb:92:
57:68:cb:6a:3d:59:4f:17:4f:5e:b9:fb:92:87:ad:f1:38:aa:
3b:30:f9:f9:67:d0:f8:16:a0:a5:b7:57:45:d1:8d:97:01:4c:
9a:13:55:99:d2:c5:82:60:0e:5a:f2:fe:b2:3f:36:3f:8e:52:
a2:22:55:1f:08:ab:c0:48:2b:ca:70:10:d5:df:09:fc:d2:f8:
41:a2:a6:09:94:8e:9b:b1:e9:b7:46:42:52:be:09:88:8d:b5:
90:aa:45:87:a2:f0:bb:4b:28:f7:70:61:1c:95:8c:3f:b6:83:
1f:d5:bb:4e:d0:31:f6:38:04:4e:bd:93:85:1c:62:35:5a:fe:
e3:bd:98:9e:a6:f3:ad:c6:a2:06:91:cd:d7:59:74:e3:e0:20:
d8:c7:a3:f0:9c:ba:53:c6:cd:9a:ad:21:14:47:b4:81:ba:72:
48:b9:04:fb:5b:67:fc:34:a5:9e:2b:46:73:8b:79:6f:8c:9c:
da:66:92:c7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZH8zIqPYhGcVHZWlcIG0HWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwOTE2MjE0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzBlZmJjZGZmNDY0ZjY2YmU4Y2U5MjhjZGIxMjMyMGVhMzJiOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnb2k0xCPWY8ReetmI1F2RjTV7F
Bn66/W4pgU2Y/C8xWNuYmQBLv4byx0wPp5Y15FYdzxjMuVHI8ywAHTUV6udYySvQ
kRjFZNIIMHkGiroCRJRWrcmiakcG4fjaO5YcoFfbhsrSsS7XhlmBxsNHqzfDp/UM
rMWL/+RfEc6J6MGdqB64XONmWLaj1ZmGpcGadgfo6/WcanQePZuZR+l130zfIsCz
HoDVcHoIHoFg8GChwh+lApSdBhw0MY5A8RShzuSZ5s6FJullhJtECBeTFEJWxbXq
ABq2StJDYwydWQ5ixW4x5czp48VnG2caHFEbCDa1zl1/N93LP6gzqOxmgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDwO+83/Rk9mvozpKM2xIyDqMrlrMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvUEE3N3pmOUdUMmEtak9rb3piRWpJT295dVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBuaaaAwQC
ucsEAwQAwkyIAwQAwkyKMA0GCSqGSIb3DQEBCwUAA4IBAQDT4T9UG/IRjYzHlhuj
0a0VzWlZaCYqNbVqlX0cKqQVgswM6Muvq7ms6v+hsLCY1/jYWTTtMmwT1mSBhm4X
GTcovqMVqUVGy5JXaMtqPVlPF09eufuSh63xOKo7MPn5Z9D4FqClt1dF0Y2XAUya
E1WZ0sWCYA5a8v6yPzY/jlKiIlUfCKvASCvKcBDV3wn80vhBoqYJlI6bsem3RkJS
vgmIjbWQqkWHovC7Syj3cGEclYw/toMf1btO0DH2OAROvZOFHGI1Wv7jvZiepvOt
xqIGkc3XWXTj4CDYx6PwnLpTxs2arSEUR7SBunJIuQT7W2f8NKWeK0Zzi3lvjJza
ZpLH
-----END CERTIFICATE-----
Generated at Mon Sep 30 19:44:48 2024 by rpki-client on console-fra.rpki-client.org