Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Hw2bWq-e0pL_EipG34t_u2QPHhI.roa
File: Hw2bWq-e0pL_EipG34t_u2QPHhI.roa (raw, json)
Hash identifier: zWz1T496L6VN1gbM6SjvBb5oqr180Tvs4NwizXtyfd4=
Subject key identifier: 1F:0D:9B:5A:AF:9E:D2:92:FF:12:2A:46:DF:8B:7F:BB:64:0F:1E:12
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01856CC1661ADDF478C679B142AD8A286673
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Hw2bWq-e0pL_EipG34t_u2QPHhI.roa
Signing time: Sun 01 Jan 2023 09:54:51 +0000
ROA not before: Sun 01 Jan 2023 09:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48659
IP address blocks: 185.228.140.0/24 maxlen: 24
185.228.142.0/24 maxlen: 24
185.38.225.0/24 maxlen: 24
2a00:fb20:8::/46 maxlen: 46
2a00:fb20:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Apr 2023 18:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:66:1a:dd:f4:78:c6:79:b1:42:ad:8a:28:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jan 1 09:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f0d9b5aaf9ed292ff122a46df8b7fbb640f1e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8d:56:de:fc:b4:23:0e:33:05:3d:ca:80:79:
ab:5e:b0:39:1f:fd:98:28:2b:37:aa:8f:10:ab:7a:
bc:cf:ae:aa:31:34:64:ae:16:e2:cf:5b:f6:1d:69:
b2:db:36:b1:59:e5:f9:8d:a7:56:bc:6a:4b:cf:50:
03:d5:1b:63:3b:8f:56:f5:b2:25:d4:0e:44:cc:34:
47:87:0c:ba:8a:c6:7c:95:d1:eb:8b:da:12:21:87:
24:bb:0c:07:1d:a7:92:2c:d1:e9:df:54:f4:45:a0:
82:ed:e3:89:cc:9e:e1:92:12:ca:dd:9b:11:9a:df:
1b:5f:33:3a:81:01:69:32:3c:fb:dd:f1:78:e6:1e:
c0:db:29:8f:5a:b8:ae:17:82:d5:b0:75:d0:96:7a:
c5:44:86:cd:fe:14:10:6b:23:a1:9f:13:45:7e:cc:
af:31:e8:3e:91:22:9c:f5:7b:dd:3f:15:ad:61:2b:
ae:a5:4d:1d:2e:91:75:95:6b:2a:6b:e1:3b:c3:2e:
9a:f5:84:23:5a:bd:f4:6b:76:a1:3b:55:53:f4:7b:
9d:1d:85:ec:e8:68:90:31:31:14:09:b8:69:cb:db:
4b:5b:43:70:80:29:fc:79:17:37:32:89:2e:09:47:
aa:d3:20:dc:00:e3:38:c7:b6:9e:df:06:19:70:c4:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:9B:5A:AF:9E:D2:92:FF:12:2A:46:DF:8B:7F:BB:64:0F:1E:12
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Hw2bWq-e0pL_EipG34t_u2QPHhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.225.0/24
185.228.140.0/24
185.228.142.0/24
IPv6:
2a00:fb20:1::/48
2a00:fb20:8::/46
Signature Algorithm: sha256WithRSAEncryption
51:e9:65:93:c2:98:a2:f0:3d:4b:a0:2a:bb:2f:91:18:0e:8f:
c1:5d:cd:2b:44:86:f1:cb:91:75:cf:ae:c5:1c:3a:71:97:63:
a7:b1:76:4e:01:b0:44:dd:e9:80:87:bc:81:97:a9:58:82:a5:
0a:47:bf:c6:bf:0e:54:95:49:da:61:a5:11:b2:24:26:66:12:
03:0b:e6:af:81:4a:c2:5c:30:0f:6b:a6:67:27:d8:8c:45:3c:
47:bd:da:17:10:0f:e9:9d:f8:87:c3:95:61:96:2f:71:ca:5a:
bf:90:83:f7:8e:15:a5:20:33:44:d9:78:df:7e:43:83:85:c7:
57:c3:f6:ad:92:5f:83:5a:7d:c7:53:03:05:ee:bc:48:f7:d5:
9b:63:d0:ca:52:e0:cc:f0:ee:0d:a1:46:10:32:3d:2a:1e:c8:
0a:83:3f:d3:29:7f:1d:d9:d0:c8:06:bb:18:b2:83:c6:5a:22:
71:b9:88:6c:2a:8a:1d:2e:90:c2:31:7d:65:32:09:81:70:49:
05:fc:b0:f5:a3:41:62:ec:e5:5c:b2:31:6a:bc:60:a1:3e:ae:
fd:37:d5:17:8f:99:8b:e5:b3:cf:36:3a:92:b7:fc:9b:b6:07:
da:f6:61:ca:3d:74:81:2e:17:e2:59:8a:bc:b5:02:a7:c1:23:
7f:93:f7:a7
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVswWYa3fR4xnmxQq2KKGZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjMwMTAxMDk1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjBkOWI1YWFmOWVkMjkyZmYxMjJhNDZkZjhiN2ZiYjY0MGYxZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo1W3vy0Iw4zBT3KgHmrXrA5H/2Y
KCs3qo8Qq3q8z66qMTRkrhbiz1v2HWmy2zaxWeX5jadWvGpLz1AD1RtjO49W9bIl
1A5EzDRHhwy6isZ8ldHri9oSIYckuwwHHaeSLNHp31T0RaCC7eOJzJ7hkhLK3ZsR
mt8bXzM6gQFpMjz73fF45h7A2ymPWriuF4LVsHXQlnrFRIbN/hQQayOhnxNFfsyv
Meg+kSKc9XvdPxWtYSuupU0dLpF1lWsqa+E7wy6a9YQjWr30a3ahO1VT9HudHYXs
6GiQMTEUCbhpy9tLW0NwgCn8eRc3MokuCUeq0yDcAOM4x7ae3wYZcMRJWwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFB8Nm1qvntKS/xIqRt+Lf7tkDx4SMB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvSHcyYldxLWUwcExfRWlwRzM0dF91MlFQSGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAuSbhAwQA
ueSMAwQAueSOMBgEAgACMBIDBwAqAPsgAAEDBwIqAPsgAAgwDQYJKoZIhvcNAQEL
BQADggEBAFHpZZPCmKLwPUugKrsvkRgOj8FdzStEhvHLkXXPrsUcOnGXY6exdk4B
sETd6YCHvIGXqViCpQpHv8a/DlSVSdphpRGyJCZmEgML5q+BSsJcMA9rpmcn2IxF
PEe92hcQD+md+IfDlWGWL3HKWr+Qg/eOFaUgM0TZeN9+Q4OFx1fD9q2SX4NafcdT
AwXuvEj31Ztj0MpS4Mzw7g2hRhAyPSoeyAqDP9Mpfx3Z0MgGuxiyg8ZaInG5iGwq
ih0ukMIxfWUyCYFwSQX8sPWjQWLs5VyyMWq8YKE+rv031RePmYvls882OpK3/Ju2
B9r2Yco9dIEuF+JZiry1AqfBI3+T96c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:21 2024 by rpki-client on console-fra.rpki-client.org