Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/gFjBlHN8xFjJEvgWkKzt1eaaqPU.roa
File: gFjBlHN8xFjJEvgWkKzt1eaaqPU.roa (raw, json)
Hash identifier: MFyOx//IiqtmDrd0cXSSu246kteEFHYzcaQc6pwya8w=
Subject key identifier: 80:58:C1:94:73:7C:C4:58:C9:12:F8:16:90:AC:ED:D5:E6:9A:A8:F5
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 01856C6EDFC7DA6DBC51CFFB32C48F57AD01
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/gFjBlHN8xFjJEvgWkKzt1eaaqPU.roa
Signing time: Sun 01 Jan 2023 08:24:43 +0000
ROA not before: Sun 01 Jan 2023 08:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8816
IP address blocks: 185.84.228.0/22 maxlen: 22
212.121.64.0/19 maxlen: 19
212.45.128.0/19 maxlen: 19
217.174.112.0/20 maxlen: 20
2a02:4d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:df:c7:da:6d:bc:51:cf:fb:32:c4:8f:57:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Jan 1 08:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8058c194737cc458c912f81690acedd5e69aa8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:7b:d6:9b:e9:3d:e2:4e:dc:82:89:57:15:
34:03:d4:0d:bd:fa:1f:94:c2:46:f7:65:19:76:ea:
ea:20:75:aa:99:f1:06:0e:f8:a6:a0:a1:b1:49:16:
4e:5d:4b:2e:52:0c:51:ce:07:5b:4a:59:a5:60:88:
f5:ce:b4:68:ee:b2:99:75:c9:eb:51:a9:60:15:99:
39:42:32:6a:e5:24:b5:68:a4:26:d1:e4:65:90:1c:
6f:fb:cd:3b:4e:16:3c:ea:4b:e1:e0:a9:c7:c5:a3:
fd:91:37:2b:59:e3:0d:ed:2a:a9:80:84:85:14:8f:
56:74:71:c3:c5:fc:94:06:72:d7:1b:8e:e7:b3:85:
c5:4d:7e:9a:8a:de:be:b3:e7:40:0d:18:1b:bc:c3:
e1:a7:62:e1:20:47:3a:bb:6a:70:d9:49:2b:31:ae:
7a:87:5c:34:94:32:bc:2c:3e:40:4d:fb:25:26:da:
c2:32:e9:75:bb:c9:6e:d5:e7:b7:39:99:07:8f:34:
1d:4c:21:1e:6e:fb:a9:0c:47:0d:37:be:5d:0d:a7:
c5:07:f6:cd:3e:f2:cb:b8:9d:4b:47:2c:af:46:3d:
61:9a:6e:68:43:ce:ea:f2:84:a7:93:21:d1:45:37:
50:de:bc:ee:3a:ad:03:e1:17:23:68:a8:36:a7:ab:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:C1:94:73:7C:C4:58:C9:12:F8:16:90:AC:ED:D5:E6:9A:A8:F5
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/gFjBlHN8xFjJEvgWkKzt1eaaqPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.228.0/22
212.45.128.0/19
212.121.64.0/19
217.174.112.0/20
IPv6:
2a02:4d0::/32
Signature Algorithm: sha256WithRSAEncryption
41:69:9e:26:f3:60:c0:7c:ad:01:26:96:9d:46:22:dc:b1:bc:
63:35:63:b6:d1:13:73:8b:ea:8d:e0:31:68:60:ad:f3:86:57:
4a:96:2f:59:07:01:64:7c:95:75:0e:10:d6:22:c8:8b:35:59:
00:ab:f0:2e:08:52:1c:54:ac:7a:4d:89:fe:dd:e0:31:2b:96:
80:9e:c5:68:eb:f6:96:90:99:7a:20:a2:d3:44:b6:1d:5f:e6:
b4:a0:80:36:0c:db:61:12:e8:0d:93:43:28:8d:a1:4d:2a:c0:
52:c1:7a:96:82:80:4f:90:13:5c:9d:38:36:21:fb:91:df:7e:
0b:aa:df:73:fc:53:e2:fb:45:a5:2c:11:84:e0:1a:7a:05:ed:
38:56:28:6f:bd:df:f0:7d:92:a6:b1:5b:f0:bb:0e:dc:d9:bf:
94:d3:41:41:ab:99:44:75:b3:f0:56:77:30:ef:d4:4a:9d:e4:
1e:d0:0b:fa:8f:cd:71:a8:a0:7b:ec:ff:de:01:77:9b:d8:fa:
95:e1:05:01:a9:9b:ad:c1:86:5c:bd:5c:99:b4:66:5e:55:e3:
bf:c6:48:d8:a5:71:34:3d:1b:e6:e6:1a:0b:c3:06:df:df:c1:
24:76:02:80:6c:4f:0c:23:36:e5:98:66:89:c5:a7:1a:89:cb:
9d:a9:c2:8f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVsbt/H2m28Uc/7MsSPV60BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2NmZjQzMGY3ZjE3NTFlNjk3YmIzMGY4N2ZlZjM5N2Nj
MTdmYTYwHhcNMjMwMTAxMDgyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDU4YzE5NDczN2NjNDU4YzkxMmY4MTY5MGFjZWRkNWU2OWFhOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleN71pvpPeJO3IKJVxU0A9QNvfof
lMJG92UZdurqIHWqmfEGDvimoKGxSRZOXUsuUgxRzgdbSlmlYIj1zrRo7rKZdcnr
UalgFZk5QjJq5SS1aKQm0eRlkBxv+807ThY86kvh4KnHxaP9kTcrWeMN7SqpgISF
FI9WdHHDxfyUBnLXG47ns4XFTX6ait6+s+dADRgbvMPhp2LhIEc6u2pw2UkrMa56
h1w0lDK8LD5ATfslJtrCMul1u8lu1ee3OZkHjzQdTCEebvupDEcNN75dDafFB/bN
PvLLuJ1LRyyvRj1hmm5oQ87q8oSnkyHRRTdQ3rzuOq0D4RcjaKg2p6v6XwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIBYwZRzfMRYyRL4FpCs7dXmmqj1MB8GA1UdIwQY
MBaAFHU8/0MPfxdR5pe7MPh/7zl8wX+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzkt
MzdhNWQ5Y2E2NTU4LzEvZ0ZqQmxITjh4RmpKRXZnV2tLenQxZWFhcVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzktMzdhNWQ5Y2E2NTU4
LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuVTkAwQF
1C2AAwQF1HlAAwQE2a5wMA0EAgACMAcDBQAqAgTQMA0GCSqGSIb3DQEBCwUAA4IB
AQBBaZ4m82DAfK0BJpadRiLcsbxjNWO20RNzi+qN4DFoYK3zhldKli9ZBwFkfJV1
DhDWIsiLNVkAq/AuCFIcVKx6TYn+3eAxK5aAnsVo6/aWkJl6IKLTRLYdX+a0oIA2
DNthEugNk0MojaFNKsBSwXqWgoBPkBNcnTg2IfuR334Lqt9z/FPi+0WlLBGE4Bp6
Be04Vihvvd/wfZKmsVvwuw7c2b+U00FBq5lEdbPwVncw79RKneQe0Av6j81xqKB7
7P/eAXeb2PqV4QUBqZutwYZcvVyZtGZeVeO/xkjYpXE0PRvm5hoLwwbf38EkdgKA
bE8MIzblmGaJxacaicudqcKP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org