Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/INP_9tuSgRc2dS4JpJ76bzz2ktM.roa
File: INP_9tuSgRc2dS4JpJ76bzz2ktM.roa (raw, json)
Hash identifier: uZG7ZqalnI3vIizZohuzIff//TAZVzOXPxzitky7jx0=
Subject key identifier: 20:D3:FF:F6:DB:92:81:17:36:75:2E:09:A4:9E:FA:6F:3C:F6:92:D3
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 0185EE0AE06FD788026BAA86909FDEEF4A60
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/INP_9tuSgRc2dS4JpJ76bzz2ktM.roa
Signing time: Thu 26 Jan 2023 12:26:08 +0000
ROA not before: Thu 26 Jan 2023 12:26:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198382
IP address blocks: 185.123.81.0/24 maxlen: 24
212.84.64.0/21 maxlen: 24
212.84.72.0/21 maxlen: 24
212.84.80.0/21 maxlen: 24
212.84.88.0/21 maxlen: 24
2a00:14a0:6::/48 maxlen: 48
2a00:14a0:1::/48 maxlen: 48
2a00:14a0::/29 maxlen: 48
2a00:14a0:5::/48 maxlen: 48
2a00:14a0::/48 maxlen: 48
2a00:14a0:3::/48 maxlen: 48
2a00:14a0:9::/48 maxlen: 48
2a00:14a0:4::/48 maxlen: 48
2a00:14a0:7::/48 maxlen: 48
2a00:14a0:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:0a:e0:6f:d7:88:02:6b:aa:86:90:9f:de:ef:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 26 12:26:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d3fff6db92811736752e09a49efa6f3cf692d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:75:6d:73:54:57:84:95:88:0e:0b:fb:8d:
5f:53:af:03:e9:21:2a:59:9b:b5:3b:09:46:2e:2f:
01:47:da:51:ef:a0:24:ca:84:d0:ed:93:7b:ac:3e:
42:c0:63:59:fa:27:01:ff:ab:9d:67:7e:e7:36:14:
49:87:f3:e9:75:b1:d7:83:2b:f6:67:25:17:9c:de:
16:53:a1:10:48:9d:43:c6:d2:1e:a3:c5:52:b5:03:
89:49:e6:69:c9:a8:14:9d:13:0f:45:a3:96:98:1c:
f1:27:78:22:b4:62:d7:a0:30:2c:2b:ef:b2:f1:c9:
d4:9d:fd:a5:ba:11:51:4e:b8:98:53:fc:ae:71:2a:
24:5e:2f:10:ef:4d:85:fe:88:dd:2d:43:85:63:90:
40:e5:9d:29:53:f4:50:0d:4a:da:9c:f5:79:40:a8:
74:a3:29:65:62:7c:df:ab:01:30:66:35:9e:17:3d:
07:b3:19:39:fd:bc:06:66:67:13:1a:7e:a6:46:33:
7c:69:d2:0a:cc:cf:38:5c:b2:8e:a4:f6:0f:cb:46:
49:02:11:14:72:f5:73:28:f8:cb:b7:18:0b:fd:64:
9f:77:64:60:b0:c2:f5:32:8b:1f:ab:38:d6:fc:22:
1e:3d:83:df:6c:83:91:fe:24:ca:de:bb:b4:fc:01:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:FF:F6:DB:92:81:17:36:75:2E:09:A4:9E:FA:6F:3C:F6:92:D3
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/INP_9tuSgRc2dS4JpJ76bzz2ktM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.81.0/24
212.84.64.0/19
IPv6:
2a00:14a0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:d5:66:27:a0:2e:45:e0:ad:7c:d1:26:47:7e:b6:46:a0:b5:
a2:f0:47:48:56:a0:7c:48:7c:6c:7e:4d:48:3d:c0:ea:28:45:
36:b7:1b:36:2f:82:e9:55:79:2c:a3:a6:a8:b8:05:3d:ef:1e:
8d:51:fa:9a:d1:bd:8c:f6:e8:fd:d5:b8:a0:f1:01:0a:9d:48:
64:65:f6:1f:87:4f:ef:76:58:7b:d1:47:1d:64:cc:5c:b3:f7:
72:7a:23:e5:5d:52:47:2d:75:cc:86:a8:e7:c9:14:22:e5:29:
45:75:68:59:a0:ec:51:72:2f:66:e7:4c:ed:6e:40:92:b6:e8:
5c:ae:5a:0f:a2:ff:a9:7f:5d:59:10:4a:1c:12:21:28:c8:72:
f0:94:19:09:3d:46:72:ab:e8:6e:0b:84:ff:a1:1a:c4:84:f1:
ac:d2:33:aa:29:8b:71:2b:fb:6d:a4:dc:54:cc:94:96:18:63:
14:62:8f:b0:30:22:d8:62:92:eb:ee:25:02:63:6d:38:84:b5:
20:cd:52:37:63:1b:ac:d6:e7:cb:c5:4b:91:1e:24:19:74:22:
0d:ee:13:ce:42:7e:eb:c4:b1:99:a1:a3:31:39:e7:97:de:4c:
97:68:71:b1:c4:dc:f5:da:11:6d:60:51:1e:62:03:13:7e:44:
ad:f5:e7:46
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYXuCuBv14gCa6qGkJ/e70pgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTgyNWNlOGJmNTQ0MTcwMjgyZjcyMGEyNDg0MTQxNTY4
YjBlN2QwHhcNMjMwMTI2MTIyNjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGQzZmZmNmRiOTI4MTE3MzY3NTJlMDlhNDllZmE2ZjNjZjY5MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZ1bXNUV4SViA4L+41fU68D6SEq
WZu1OwlGLi8BR9pR76AkyoTQ7ZN7rD5CwGNZ+icB/6udZ37nNhRJh/PpdbHXgyv2
ZyUXnN4WU6EQSJ1DxtIeo8VStQOJSeZpyagUnRMPRaOWmBzxJ3gitGLXoDAsK++y
8cnUnf2luhFRTriYU/yucSokXi8Q702F/ojdLUOFY5BA5Z0pU/RQDUranPV5QKh0
oyllYnzfqwEwZjWeFz0Hsxk5/bwGZmcTGn6mRjN8adIKzM84XLKOpPYPy0ZJAhEU
cvVzKPjLtxgL/WSfd2RgsML1MosfqzjW/CIePYPfbIOR/iTK3ru0/AEx+QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCDT//bbkoEXNnUuCaSe+m889pLTMB8GA1UdIwQY
MBaAFFNYJc6L9UQXAoL3IKJIQUFWiw59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUt
NTE0NmFiN2VhMDE1LzEvSU5QXzl0dVNnUmMyZFM0SnBKNzZienoya3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUtNTE0NmFiN2VhMDE1
LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuXtRAwQF
1FRAMA0EAgACMAcDBQMqABSgMA0GCSqGSIb3DQEBCwUAA4IBAQCt1WYnoC5F4K18
0SZHfrZGoLWi8EdIVqB8SHxsfk1IPcDqKEU2txs2L4LpVXkso6aouAU97x6NUfqa
0b2M9uj91big8QEKnUhkZfYfh0/vdlh70UcdZMxcs/dyeiPlXVJHLXXMhqjnyRQi
5SlFdWhZoOxRci9m50ztbkCStuhcrloPov+pf11ZEEocEiEoyHLwlBkJPUZyq+hu
C4T/oRrEhPGs0jOqKYtxK/ttpNxUzJSWGGMUYo+wMCLYYpLr7iUCY204hLUgzVI3
Yxus1ufLxUuRHiQZdCIN7hPOQn7rxLGZoaMxOeeX3kyXaHGxxNz12hFtYFEeYgMT
fkSt9edG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:01 2024 by rpki-client on console-ams.rpki-client.org