Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/10vr0TNpipQiY1fbVvrI7IuRW54.roa
File: 10vr0TNpipQiY1fbVvrI7IuRW54.roa (raw, json)
Hash identifier: N1QksbU01pSrdSvsz/g2STIGTFtZBGyWWo2+Grj1Zns=
Subject key identifier: D7:4B:EB:D1:33:69:8A:94:22:63:57:DB:56:FA:C8:EC:8B:91:5B:9E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012F129B7AAE5BCCEEECB74D28F601
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/10vr0TNpipQiY1fbVvrI7IuRW54.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213035
IP address blocks: 185.121.122.0/23 maxlen: 24
185.121.121.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
220.158.198.0/24 maxlen: 24
45.144.226.0/24 maxlen: 24
220.158.196.0/23 maxlen: 24
193.239.164.0/23 maxlen: 24
62.197.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:12:9b:7a:ae:5b:cc:ee:ec:b7:4d:28:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d74bebd133698a94226357db56fac8ec8b915b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:90:e6:97:77:15:29:6b:2f:bd:ce:70:a0:
23:01:e0:46:f4:84:5e:a3:38:b8:2e:be:4c:a7:cf:
f1:c2:90:08:9d:f3:dc:ae:63:3f:06:29:7a:67:71:
03:bf:43:8c:48:e6:56:72:94:95:b5:47:40:84:a7:
84:09:fc:0d:34:2a:4d:5a:f4:85:ce:4a:83:e6:db:
6a:9e:15:7b:1a:65:49:51:75:f4:9a:5e:8a:14:fb:
11:65:15:9d:59:c4:5e:56:e1:bd:bb:9d:25:6e:bf:
f4:2a:6d:15:00:a9:ea:ac:b0:c7:10:73:15:7c:ab:
c0:94:bc:00:48:db:64:3b:44:51:81:50:1a:cf:43:
30:50:f3:99:f1:b3:f1:f6:54:2e:78:74:63:2a:91:
98:9a:59:4a:da:25:47:25:30:f3:17:df:dc:ad:6f:
bb:76:4d:d6:83:89:c2:9d:1e:93:8e:f5:8a:10:76:
b3:9a:30:3e:00:54:5d:c9:32:bc:14:e2:5c:c0:fa:
3b:bd:1a:0f:27:52:c6:20:32:9b:bf:96:e0:e4:56:
fb:ec:7a:1a:c0:08:91:05:e5:1e:e1:e0:9b:e3:c4:
f4:44:d4:00:f4:cd:74:59:84:19:88:4d:87:d6:26:
e5:04:8b:a3:03:33:fe:23:d0:7d:a1:56:2f:0b:f8:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:EB:D1:33:69:8A:94:22:63:57:DB:56:FA:C8:EC:8B:91:5B:9E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/10vr0TNpipQiY1fbVvrI7IuRW54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.226.0/24
62.197.140.0/22
185.121.121.0-185.121.123.255
185.239.243.0/24
193.239.164.0/23
220.158.196.0-220.158.198.255
Signature Algorithm: sha256WithRSAEncryption
7e:12:12:04:0b:3c:89:aa:85:f4:7b:8f:05:f5:d2:fc:03:c3:
10:7d:c8:02:a3:10:e8:5d:07:16:75:d1:22:51:c1:cc:d9:5e:
db:78:df:d4:13:b3:66:dd:c7:ae:df:80:26:2e:37:7c:cb:b7:
05:3e:c0:6c:ea:77:e0:c6:18:62:75:cb:a7:54:17:97:d3:4f:
3d:4b:6a:58:e8:f8:cd:92:0a:ba:f6:a2:12:b6:e7:07:70:02:
b6:81:23:bf:21:ed:f1:bd:2e:e4:2f:a7:d8:ce:1e:84:bf:11:
62:ae:a7:1c:5a:3e:f6:63:e2:32:bc:99:98:1d:ca:df:83:ce:
d3:ff:e3:78:3b:a8:79:21:d5:89:29:f9:e5:a7:c2:78:b0:84:
38:83:f0:c4:de:8a:93:61:7a:b3:59:9d:ea:33:2d:40:2c:8f:
35:71:36:ba:64:e7:6d:53:d2:15:df:40:a9:ce:48:8c:c2:32:
4c:3f:a3:7f:45:c0:b2:98:7e:b2:af:31:06:37:81:2d:c4:b5:
43:75:26:29:9d:d2:d0:17:90:37:bb:d5:d9:68:8f:70:d9:e3:
fb:8e:39:f4:b6:91:72:dd:87:3c:e9:b0:0d:f5:5e:a6:1f:ae:
82:fd:b6:c6:8f:0e:26:5a:2e:76:a7:46:be:82:33:1e:ba:6b:
ca:fb:52:8c
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzFAS8Sm3quW8zu7LdNKPYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzRiZWJkMTMzNjk4YTk0MjI2MzU3ZGI1NmZhYzhlYzhiOTE1YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBqQ5pd3FSlrL73OcKAjAeBG9IRe
ozi4Lr5Mp8/xwpAInfPcrmM/Bil6Z3EDv0OMSOZWcpSVtUdAhKeECfwNNCpNWvSF
zkqD5ttqnhV7GmVJUXX0ml6KFPsRZRWdWcReVuG9u50lbr/0Km0VAKnqrLDHEHMV
fKvAlLwASNtkO0RRgVAaz0MwUPOZ8bPx9lQueHRjKpGYmllK2iVHJTDzF9/crW+7
dk3Wg4nCnR6TjvWKEHazmjA+AFRdyTK8FOJcwPo7vRoPJ1LGIDKbv5bg5Fb77Hoa
wAiRBeUe4eCb48T0RNQA9M10WYQZiE2H1iblBIujAzP+I9B9oVYvC/hlqQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFNdL69EzaYqUImNX21b6yOyLkVueMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMTB2cjBUTnBpcFFpWTFmYlZ2ckk3SXVSVzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQALZDiAwQC
PsWMMAwDBAC5eXkDBAK5eXgDBAC57/MDBAHB76QwDAMEAtyexAMEANyexjANBgkq
hkiG9w0BAQsFAAOCAQEAfhISBAs8iaqF9HuPBfXS/APDEH3IAqMQ6F0HFnXRIlHB
zNle23jf1BOzZt3Hrt+AJi43fMu3BT7AbOp34MYYYnXLp1QXl9NPPUtqWOj4zZIK
uvaiErbnB3ACtoEjvyHt8b0u5C+n2M4ehL8RYq6nHFo+9mPiMryZmB3K34PO0//j
eDuoeSHViSn55afCeLCEOIPwxN6Kk2F6s1md6jMtQCyPNXE2umTnbVPSFd9Aqc5I
jMIyTD+jf0XAsph+sq8xBjeBLcS1Q3UmKZ3S0BeQN7vV2WiPcNnj+4459LaRct2H
POmwDfVeph+ugv22xo8OJloudqdGvoIzHrpryvtSjA==
-----END CERTIFICATE-----
Generated at Tue Feb 13 00:10:41 2024 by rpki-client on console-ams.rpki-client.org