Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JIyVnIKa2c7XrBvhs_1ugLgFfes.roa
File: JIyVnIKa2c7XrBvhs_1ugLgFfes.roa (raw, json)
Hash identifier: iB5LLrAMs4vkB2slkuFp27TFxJdIli6FGXGkGSfM1UU=
Subject key identifier: 24:8C:95:9C:82:9A:D9:CE:D7:AC:1B:E1:B3:FD:6E:80:B8:05:7D:EB
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ACBD864EDA72CE7F8FC430EA67E64
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JIyVnIKa2c7XrBvhs_1ugLgFfes.roa
Signing time: Mon 02 Jan 2023 17:15:05 +0000
ROA not before: Mon 02 Jan 2023 17:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199770
IP address blocks: 188.240.236.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
185.46.124.0/22 maxlen: 24
2a01:8460::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:cb:d8:64:ed:a7:2c:e7:f8:fc:43:0e:a6:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248c959c829ad9ced7ac1be1b3fd6e80b8057deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:d0:5e:ea:8c:29:32:18:45:9f:47:71:69:
93:62:29:67:9c:36:2c:6b:96:4f:c5:ba:44:5c:89:
69:5f:ce:70:06:35:20:1d:22:bd:74:92:63:3c:db:
fa:6f:18:b6:2d:7e:aa:91:0b:04:90:d1:80:bc:48:
1b:d1:bc:8a:b5:c6:70:02:04:50:3a:16:9a:0c:9e:
4f:3e:38:39:76:5f:da:fe:47:5c:c7:0d:00:ff:bd:
3b:c4:b0:95:b3:59:cd:90:16:7f:02:31:bb:92:19:
f7:cb:a7:2f:25:7c:e2:eb:4e:75:b4:45:3f:2b:e3:
4a:4b:0a:f6:41:22:13:4c:ca:e1:8d:42:ca:38:05:
59:24:c5:cb:09:e6:87:4d:bc:0f:22:a9:9b:33:c5:
e6:d4:e3:f4:25:fe:54:78:2b:6b:1b:21:d1:5b:c2:
61:3f:fc:2b:db:be:ed:b1:23:99:e4:b5:11:85:16:
0e:d6:6c:10:d6:d9:51:f2:41:96:eb:a3:bf:1d:d3:
06:30:d9:fd:67:e4:8a:a1:4d:f9:de:47:c6:d7:4a:
54:ec:04:68:dc:d5:7b:8f:b0:43:72:3c:4a:2d:3a:
f1:75:9f:d8:9c:52:f2:28:0e:62:39:1b:bc:e5:a6:
37:c8:d3:65:f3:04:c7:c3:1e:a7:e2:4e:b0:b5:31:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:95:9C:82:9A:D9:CE:D7:AC:1B:E1:B3:FD:6E:80:B8:05:7D:EB
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JIyVnIKa2c7XrBvhs_1ugLgFfes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.32.0/22
185.46.124.0/22
185.198.108.0/22
188.240.236.0/22
IPv6:
2a01:8460::/32
Signature Algorithm: sha256WithRSAEncryption
b8:a2:9d:73:1e:02:2a:c9:a9:55:fa:fa:3d:e5:ef:ba:14:76:
08:3f:10:2b:3a:07:37:ff:4b:58:c4:61:42:59:1c:1b:5e:00:
f5:1c:d7:aa:fc:bf:99:c1:b1:9d:fa:b0:f8:83:5a:14:cf:df:
72:14:22:5e:5c:ae:28:76:f4:60:bf:b1:9c:ce:94:2b:c0:06:
ff:34:dd:80:3f:b6:d6:56:9b:61:ea:38:0a:e6:1b:09:c6:22:
cc:ca:14:d3:07:f3:66:8a:b4:9d:13:ad:60:a2:82:13:eb:98:
90:78:4e:26:3b:34:de:21:b2:27:02:43:9d:b4:1a:98:44:be:
e9:6a:ba:6d:ff:b9:88:47:cc:d7:52:44:56:cb:8e:a1:f6:0a:
49:cf:88:45:82:a9:47:b2:80:56:65:67:a4:cd:94:50:35:f0:
1d:a2:db:fb:fd:21:89:41:8a:e0:58:3a:c3:59:42:d9:21:e5:
e1:a5:8d:88:2f:ba:cf:f0:1a:17:05:75:3b:1c:2d:20:f4:72:
6a:f0:4f:c6:39:87:bc:78:b4:5b:06:15:36:ae:5f:18:48:a5:
02:2e:74:30:09:8b:37:49:fb:b1:b4:07:52:95:c9:f2:2b:84:
27:f8:f3:1b:a9:e5:9a:58:c0:e9:4b:a9:cd:2b:24:44:b1:c4:
71:e9:42:11
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVzesvYZO2nLOf4/EMOpn5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTAyMTcxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDhjOTU5YzgyOWFkOWNlZDdhYzFiZTFiM2ZkNmU4MGI4MDU3ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTfQXuqMKTIYRZ9HcWmTYilnnDYs
a5ZPxbpEXIlpX85wBjUgHSK9dJJjPNv6bxi2LX6qkQsEkNGAvEgb0byKtcZwAgRQ
OhaaDJ5PPjg5dl/a/kdcxw0A/707xLCVs1nNkBZ/AjG7khn3y6cvJXzi6051tEU/
K+NKSwr2QSITTMrhjULKOAVZJMXLCeaHTbwPIqmbM8Xm1OP0Jf5UeCtrGyHRW8Jh
P/wr277tsSOZ5LURhRYO1mwQ1tlR8kGW66O/HdMGMNn9Z+SKoU353kfG10pU7ARo
3NV7j7BDcjxKLTrxdZ/YnFLyKA5iORu85aY3yNNl8wTHwx6n4k6wtTEeDQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCSMlZyCmtnO16wb4bP9boC4BX3rMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvSkl5Vm5JS2EyYzdYckJ2aHNfMXVnTGdGZmVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYggAwQC
uS58AwQCucZsAwQCvPDsMA0EAgACMAcDBQAqAYRgMA0GCSqGSIb3DQEBCwUAA4IB
AQC4op1zHgIqyalV+vo95e+6FHYIPxArOgc3/0tYxGFCWRwbXgD1HNeq/L+ZwbGd
+rD4g1oUz99yFCJeXK4odvRgv7GczpQrwAb/NN2AP7bWVpth6jgK5hsJxiLMyhTT
B/NmirSdE61gooIT65iQeE4mOzTeIbInAkOdtBqYRL7parpt/7mIR8zXUkRWy46h
9gpJz4hFgqlHsoBWZWekzZRQNfAdotv7/SGJQYrgWDrDWULZIeXhpY2IL7rP8BoX
BXU7HC0g9HJq8E/GOYe8eLRbBhU2rl8YSKUCLnQwCYs3SfuxtAdSlcnyK4Qn+PMb
qeWaWMDpS6nNKyREscRx6UIR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org