Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/nsC_68OrCvTplHmZ8bhdPNgGydE.roa
File: nsC_68OrCvTplHmZ8bhdPNgGydE.roa (raw, json)
Hash identifier: p89rg/ZKAlMaPMm0juh1LifZ7mpSkOsmsbiv1ZcXLTE=
Subject key identifier: 9E:C0:BF:EB:C3:AB:0A:F4:E9:94:79:99:F1:B8:5D:3C:D8:06:C9:D1
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 0186C5C1BDE23219A80A9C036A0510A84DB5
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/nsC_68OrCvTplHmZ8bhdPNgGydE.roa
Signing time: Thu 09 Mar 2023 09:44:13 +0000
ROA not before: Thu 09 Mar 2023 09:44:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201612
IP address blocks: 185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:c1:bd:e2:32:19:a8:0a:9c:03:6a:05:10:a8:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Mar 9 09:44:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ec0bfebc3ab0af4e9947999f1b85d3cd806c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:c3:da:34:e3:17:c5:bc:5e:ce:c0:8b:e5:
de:6f:b1:a3:34:85:ac:5f:98:0b:9b:43:b0:ef:2d:
1c:18:34:81:6d:30:a9:c6:54:48:31:24:15:44:d3:
96:ca:ed:ab:ec:2f:8c:bf:7d:54:6b:08:33:6b:9f:
bf:c9:63:01:e1:79:a7:4c:30:41:93:22:11:5b:f1:
3b:5c:2a:5b:50:94:e5:3c:be:dc:5b:44:40:57:ea:
4b:e0:77:38:76:ab:a9:69:65:60:ab:65:06:90:cd:
3a:59:1b:99:7e:e8:7f:5e:e0:21:0d:dc:20:ba:66:
50:65:67:4d:80:51:9e:1d:29:81:a1:b8:d7:24:fe:
73:bc:a9:de:39:d6:24:47:2f:87:38:a4:24:bc:48:
4d:54:11:22:f3:fd:a1:24:a9:b8:9d:84:42:e2:dd:
0b:b0:0a:c5:1a:ae:84:52:f5:ae:8c:bd:15:1f:fb:
11:df:59:9b:5b:9a:cd:0c:f4:d4:2b:8d:fa:a2:ed:
4d:e7:18:a0:19:30:be:55:7a:0d:52:51:a4:a1:66:
65:4b:e3:0f:71:82:11:10:9e:b4:64:e9:7f:b4:70:
f5:bb:47:e0:51:2f:06:62:39:8a:e7:db:e4:3a:b5:
55:2b:3f:e6:d5:6f:ad:b8:d0:63:55:3b:4c:1a:65:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:BF:EB:C3:AB:0A:F4:E9:94:79:99:F1:B8:5D:3C:D8:06:C9:D1
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/nsC_68OrCvTplHmZ8bhdPNgGydE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
56:c0:bc:68:ae:4a:30:fc:7c:d6:ab:10:81:d9:83:f5:d4:0b:
94:f8:fc:d8:09:9a:6d:31:b5:d2:d3:28:e7:4c:64:d8:09:68:
6c:69:6e:19:f9:b7:28:f0:03:20:86:36:96:90:8b:bd:45:e0:
4c:87:42:cc:c3:06:0b:93:b7:fa:46:58:d5:48:ce:76:13:b9:
2e:ae:0f:48:5f:8f:5e:a2:67:e3:4f:94:3a:84:08:5e:c1:96:
65:c7:17:ad:be:ee:32:1b:dd:2d:69:2c:96:7a:df:09:47:1e:
07:f7:98:a5:fc:ab:6e:77:e3:10:20:7f:9a:30:6f:13:0c:56:
16:7f:f4:3c:3f:c5:9e:c7:85:92:a9:80:c5:f7:a9:b1:81:64:
c8:6e:fc:53:39:27:6c:2a:ab:d8:b3:ef:33:9b:e5:16:f5:89:
99:59:01:a1:85:67:ba:4c:fc:3a:65:ff:db:48:03:46:39:83:
37:e0:5e:9c:95:d5:02:e1:22:5a:5e:37:33:53:c8:b9:92:ae:
ef:e3:9f:1e:f2:fe:52:6d:6e:ae:cf:07:08:cd:f6:88:7e:ff:
33:d0:0f:8b:a2:bc:17:15:2f:0b:a2:9d:ce:6d:a8:10:10:44:
73:8b:7a:ff:1a:7d:ce:a5:31:d5:9a:e1:23:08:f8:b0:c4:f7:
83:73:5b:d1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYbFwb3iMhmoCpwDagUQqE21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi
N2YyZTcwHhcNMjMwMzA5MDk0NDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWMwYmZlYmMzYWIwYWY0ZTk5NDc5OTlmMWI4NWQzY2Q4MDZjOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFrD2jTjF8W8Xs7Ai+Xeb7GjNIWs
X5gLm0Ow7y0cGDSBbTCpxlRIMSQVRNOWyu2r7C+Mv31Uawgza5+/yWMB4XmnTDBB
kyIRW/E7XCpbUJTlPL7cW0RAV+pL4Hc4dqupaWVgq2UGkM06WRuZfuh/XuAhDdwg
umZQZWdNgFGeHSmBobjXJP5zvKneOdYkRy+HOKQkvEhNVBEi8/2hJKm4nYRC4t0L
sArFGq6EUvWujL0VH/sR31mbW5rNDPTUK436ou1N5xigGTC+VXoNUlGkoWZlS+MP
cYIREJ60ZOl/tHD1u0fgUS8GYjmK59vkOrVVKz/m1W+tuNBjVTtMGmUk3wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJ7Av+vDqwr06ZR5mfG4XTzYBsnRMB8GA1UdIwQY
MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt
YjdkYzgzNzA2YTJhLzEvbnNDXzY4T3JDdlRwbEhtWjhiaGRQTmdHeWRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh
LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVC8MBgE
AgACMBIDBwEqBX8AAYgDBwEqBX8AAZAwDQYJKoZIhvcNAQELBQADggEBAFbAvGiu
SjD8fNarEIHZg/XUC5T4/NgJmm0xtdLTKOdMZNgJaGxpbhn5tyjwAyCGNpaQi71F
4EyHQszDBguTt/pGWNVIznYTuS6uD0hfj16iZ+NPlDqECF7BlmXHF62+7jIb3S1p
LJZ63wlHHgf3mKX8q2534xAgf5owbxMMVhZ/9Dw/xZ7HhZKpgMX3qbGBZMhu/FM5
J2wqq9iz7zOb5Rb1iZlZAaGFZ7pM/Dpl/9tIA0Y5gzfgXpyV1QLhIlpeNzNTyLmS
ru/jnx7y/lJtbq7PBwjN9oh+/zPQD4uivBcVLwuinc5tqBAQRHOLev8afc6lMdWa
4SMI+LDE94NzW9E=
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:46 2024 by rpki-client on console-ams.rpki-client.org