Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4z6MSS2k_mEQ8WjxJcjNDG7YA6k.roa
File: 4z6MSS2k_mEQ8WjxJcjNDG7YA6k.roa (raw, json)
Hash identifier: NBuXFRc5iP0r4I6tBoTIijxR481nHCGV3zrALdo2u20=
Subject key identifier: E3:3E:8C:49:2D:A4:FE:61:10:F1:68:F1:25:C8:CD:0C:6E:D8:03:A9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186FD98179A7905C861270B5EB10ABB7B4B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4z6MSS2k_mEQ8WjxJcjNDG7YA6k.roa
Signing time: Mon 20 Mar 2023 05:57:28 +0000
ROA not before: Mon 20 Mar 2023 05:57:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 194.242.2.0/24 maxlen: 24
45.85.106.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
185.217.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:98:17:9a:79:05:c8:61:27:0b:5e:b1:0a:bb:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 20 05:57:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e33e8c492da4fe6110f168f125c8cd0c6ed803a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:06:41:1e:81:92:ce:d2:b0:27:47:ae:3a:
f9:94:d9:c9:48:36:7c:b0:9b:a1:98:55:33:79:78:
0b:f3:6b:a3:42:87:20:1a:a1:7f:83:47:d3:10:6a:
07:ab:23:b7:89:93:1b:cc:7d:61:ca:80:48:f8:23:
46:b2:d0:03:5e:4f:82:5f:c0:b4:6c:fa:f1:fa:a7:
4c:27:72:ac:b5:1d:1b:47:b9:9e:58:68:e0:ed:28:
3f:05:b7:5e:06:b9:23:40:fd:af:31:8b:e3:ae:86:
4f:34:8a:2d:3c:8d:45:ba:6b:59:5a:27:18:73:d1:
73:dd:c2:20:fb:db:9e:fb:0b:4b:43:bd:d6:45:a5:
6f:3e:65:f9:36:79:fb:64:be:2b:1d:38:61:4f:cc:
07:50:de:3c:fc:30:85:1c:db:da:c5:18:87:8d:8c:
f9:47:06:28:d8:21:9e:b7:9c:e2:f2:6d:3b:5c:79:
8b:12:c1:2b:04:c2:d6:cf:48:37:06:97:80:f1:01:
db:70:ea:5a:7d:dd:b8:58:97:a0:3d:3d:8f:e9:e5:
6a:ec:13:5f:15:f1:ef:cd:32:37:ac:93:e3:0f:5a:
dd:1a:57:7a:26:04:8a:eb:c9:28:09:5f:49:27:53:
e6:eb:15:c0:95:e4:e7:16:60:91:71:96:38:bb:ab:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3E:8C:49:2D:A4:FE:61:10:F1:68:F1:25:C8:CD:0C:6E:D8:03:A9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4z6MSS2k_mEQ8WjxJcjNDG7YA6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.106.0/24
185.217.116.0/24
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
65:04:5b:a5:f7:13:56:3c:d8:32:57:9e:fa:db:b4:30:57:46:
41:d9:b6:13:34:7d:a1:2c:f1:19:0f:11:06:19:0f:ff:51:66:
85:4c:6d:18:e1:a5:5d:55:18:52:99:28:5c:f9:4f:e1:f9:e0:
3a:af:a1:c8:82:61:9d:16:af:28:ba:ab:1b:34:bb:8a:03:5d:
6b:00:b1:41:b5:25:7a:69:8e:54:25:61:60:d9:aa:e8:82:2d:
17:54:1a:c2:da:f4:05:b4:cb:d1:2b:01:8b:5b:f5:75:b4:d2:
48:43:01:57:d2:dc:1b:5d:43:f0:f5:5a:31:73:36:5c:ec:92:
ce:f0:ad:bf:ce:e7:11:2e:f3:73:cd:50:96:e7:65:97:e4:16:
d3:c3:f1:c9:d0:db:50:37:06:26:ae:c5:d0:1d:05:ea:24:05:
f9:12:ca:b0:d4:2f:91:40:20:56:a2:fe:20:28:4d:7b:6d:a9:
2a:e0:e5:a6:dc:1c:43:18:6b:ed:ac:b9:13:41:1e:03:ee:58:
b2:c1:85:ae:f1:5d:c2:cb:c6:9f:1d:4d:f3:01:d1:1e:02:8e:
b3:fa:ea:be:6f:5c:39:ef:d8:c3:e2:bb:66:f9:31:46:e5:d8:
7a:f4:00:60:e6:83:15:ea:df:b2:1a:6c:40:25:86:ea:c4:56:
ad:ed:d2:93
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYb9mBeaeQXIYScLXrEKu3tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMzIwMDU1NzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzNlOGM0OTJkYTRmZTYxMTBmMTY4ZjEyNWM4Y2QwYzZlZDgwM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspkGQR6Bks7SsCdHrjr5lNnJSDZ8
sJuhmFUzeXgL82ujQocgGqF/g0fTEGoHqyO3iZMbzH1hyoBI+CNGstADXk+CX8C0
bPrx+qdMJ3KstR0bR7meWGjg7Sg/BbdeBrkjQP2vMYvjroZPNIotPI1FumtZWicY
c9Fz3cIg+9ue+wtLQ73WRaVvPmX5Nnn7ZL4rHThhT8wHUN48/DCFHNvaxRiHjYz5
RwYo2CGet5zi8m07XHmLEsErBMLWz0g3BpeA8QHbcOpafd24WJegPT2P6eVq7BNf
FfHvzTI3rJPjD1rdGld6JgSK68koCV9JJ1Pm6xXAleTnFmCRcZY4u6upDQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOM+jEktpP5hEPFo8SXIzQxu2AOpMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNHo2TVNTMmtfbUVROFdqeEpjak5ERzdZQTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVVqAwQA
udl0AwQAwRNsAwQAwvICMA0GCSqGSIb3DQEBCwUAA4IBAQBlBFul9xNWPNgyV576
27QwV0ZB2bYTNH2hLPEZDxEGGQ//UWaFTG0Y4aVdVRhSmShc+U/h+eA6r6HIgmGd
Fq8ouqsbNLuKA11rALFBtSV6aY5UJWFg2arogi0XVBrC2vQFtMvRKwGLW/V1tNJI
QwFX0twbXUPw9VoxczZc7JLO8K2/zucRLvNzzVCW52WX5BbTw/HJ0NtQNwYmrsXQ
HQXqJAX5Esqw1C+RQCBWov4gKE17bakq4OWm3BxDGGvtrLkTQR4D7liywYWu8V3C
y8afHU3zAdEeAo6z+uq+b1w579jD4rtm+TFG5dh69ABg5oMV6t+yGmxAJYbqxFat
7dKT
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org