Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/iWOAIyoAc_aKhNHklOWAS0E9tU8.roa
File: iWOAIyoAc_aKhNHklOWAS0E9tU8.roa (raw, json)
Hash identifier: lpb4SR6oV1vdMaXsqP7KPcWxPBEr2xPNuN9yTzhFyEk=
Subject key identifier: 89:63:80:23:2A:00:73:F6:8A:84:D1:E4:94:E5:80:4B:41:3D:B5:4F
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 01892088E86A60D8630F4BCBF83B91FD9FDF
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/iWOAIyoAc_aKhNHklOWAS0E9tU8.roa
Signing time: Tue 04 Jul 2023 10:53:10 +0000
ROA not before: Tue 04 Jul 2023 10:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199553
IP address blocks: 148.222.248.0/22 maxlen: 24
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:88:e8:6a:60:d8:63:0f:4b:cb:f8:3b:91:fd:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jul 4 10:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896380232a0073f68a84d1e494e5804b413db54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:4a:d1:f3:aa:e7:18:f5:2d:d5:a3:1d:c9:
f9:d0:10:ab:13:5a:7a:7c:f3:43:d3:70:1d:6d:44:
02:36:5f:49:84:7a:28:1e:42:a6:24:c3:fa:ac:4c:
5a:64:2c:7b:f3:46:2f:71:7e:0e:3a:15:54:40:4d:
69:f7:7f:1c:f4:fd:ac:2c:e6:07:e3:af:6f:be:25:
9c:38:c7:37:9d:b9:61:e3:fe:0b:05:6a:77:b3:16:
80:d4:b1:1f:ef:80:48:23:a4:13:82:b6:52:ab:93:
21:96:86:ec:96:18:c5:3a:52:63:49:bf:00:b3:5e:
75:a0:7d:f0:46:66:a4:da:56:6d:93:74:ad:21:6e:
c5:ce:75:c3:52:b9:bb:48:0a:69:63:0c:e8:26:9a:
11:b6:ce:56:1a:28:52:58:f9:6e:de:05:fc:71:86:
15:f9:83:9b:e0:52:fc:4e:25:04:19:99:f8:b7:36:
d4:3e:a3:60:40:d1:6b:02:9d:2d:b2:0d:0a:d0:ab:
d4:e4:9b:e1:2d:57:30:73:d9:e0:32:fb:4d:23:f0:
37:9d:09:c5:5d:4a:da:5e:01:ec:1e:61:cc:6b:45:
15:a8:93:86:89:56:ba:9d:c0:ad:e9:e4:60:71:71:
7c:f6:77:bb:fd:b5:14:fe:61:ba:85:60:9f:d9:c4:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:80:23:2A:00:73:F6:8A:84:D1:E4:94:E5:80:4B:41:3D:B5:4F
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/iWOAIyoAc_aKhNHklOWAS0E9tU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.248.0/22
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:9d:89:b0:09:ab:1c:2f:73:2f:15:70:dd:d2:96:91:f7:cd:
98:e1:44:4c:8d:e4:85:09:e1:ae:11:96:6d:fe:57:d9:cd:a9:
2d:5b:a6:86:4e:7f:2e:3f:9d:6f:a6:97:89:a7:47:35:73:eb:
be:3f:79:3b:73:4e:42:62:5a:ba:f8:ac:d1:83:56:e2:14:81:
96:6d:82:b8:0b:08:d7:59:c6:35:12:42:ff:50:f3:38:8c:48:
56:ca:14:2f:6c:c8:47:27:25:21:de:b7:24:55:25:43:d7:09:
f7:60:9b:31:97:bd:c1:52:f1:7b:c7:02:35:f1:4f:14:d0:08:
1a:d0:0a:f9:34:72:6c:84:3d:38:2a:4f:00:6b:67:78:78:6d:
21:16:55:bc:31:bf:58:ab:9b:8d:9d:ff:64:34:84:19:be:5c:
f0:8d:5c:a2:93:48:52:38:25:be:55:ef:bb:29:7f:35:99:24:
14:fd:e6:f8:0e:9f:03:06:2f:9e:2e:b5:e7:e6:dd:44:dc:ef:
79:ee:83:80:ac:5c:be:ae:05:c2:87:44:e7:5e:57:e8:da:51:
dd:57:d2:04:f4:5e:82:4b:d2:a7:28:ad:38:6e:ef:7c:44:51:
d1:9e:59:3f:bb:e2:4d:6b:6f:f9:67:8a:9b:8c:3b:ba:cb:0c:
4f:29:db:ea
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYkgiOhqYNhjD0vL+DuR/Z/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjMwNzA0MTA1MzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTYzODAyMzJhMDA3M2Y2OGE4NGQxZTQ5NGU1ODA0YjQxM2RiNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxdK0fOq5xj1LdWjHcn50BCrE1p6
fPND03AdbUQCNl9JhHooHkKmJMP6rExaZCx780YvcX4OOhVUQE1p938c9P2sLOYH
469vviWcOMc3nblh4/4LBWp3sxaA1LEf74BII6QTgrZSq5MhlobslhjFOlJjSb8A
s151oH3wRmak2lZtk3StIW7FznXDUrm7SAppYwzoJpoRts5WGihSWPlu3gX8cYYV
+YOb4FL8TiUEGZn4tzbUPqNgQNFrAp0tsg0K0KvU5JvhLVcwc9ngMvtNI/A3nQnF
XUraXgHsHmHMa0UVqJOGiVa6ncCt6eRgcXF89ne7/bUU/mG6hWCf2cQcgwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIljgCMqAHP2ioTR5JTlgEtBPbVPMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvaVdPQUl5b0FjX2FLaE5Ia2xPV0FTMEU5dFU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQClN74MBQE
AgACMA4DBQMqCSlAAwUDKgrlwDANBgkqhkiG9w0BAQsFAAOCAQEAcJ2JsAmrHC9z
LxVw3dKWkffNmOFETI3khQnhrhGWbf5X2c2pLVumhk5/Lj+db6aXiadHNXPrvj95
O3NOQmJauvis0YNW4hSBlm2CuAsI11nGNRJC/1DzOIxIVsoUL2zIRyclId63JFUl
Q9cJ92CbMZe9wVLxe8cCNfFPFNAIGtAK+TRybIQ9OCpPAGtneHhtIRZVvDG/WKub
jZ3/ZDSEGb5c8I1copNIUjglvlXvuyl/NZkkFP3m+A6fAwYvni615+bdRNzvee6D
gKxcvq4FwodE515X6NpR3VfSBPRegkvSpyitOG7vfERR0Z5ZP7viTWtv+WeKm4w7
ussMTynb6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org