Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B0MzHQhuBatuy5WRXtTHHAtaL94.roa
File: B0MzHQhuBatuy5WRXtTHHAtaL94.roa (raw, json)
Hash identifier: /6Vy0Q2DpwmFmlucMkPTEHmnvIf29X6cNqYH4zi/M98=
Subject key identifier: 07:43:33:1D:08:6E:05:AB:6E:CB:95:91:5E:D4:C7:1C:0B:5A:2F:DE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D2F42D76AD3DB705CF1C2E3CE136
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B0MzHQhuBatuy5WRXtTHHAtaL94.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41280
IP address blocks: 151.237.24.0/24 maxlen: 24
151.237.26.0/24 maxlen: 24
85.187.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d2:f4:2d:76:ad:3d:b7:05:cf:1c:2e:3c:e1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0743331d086e05ab6ecb95915ed4c71c0b5a2fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:57:eb:3e:ec:52:a3:72:48:25:c1:86:9b:
11:34:fa:16:27:21:2b:03:80:ae:a2:5b:0f:58:08:
df:a1:53:4b:4d:10:3a:9f:d6:56:26:b5:9e:61:b1:
76:51:ec:0a:30:16:c6:d0:ea:b1:b7:a8:c2:bd:9d:
41:82:cb:21:95:be:68:be:17:fc:bf:43:e1:1a:55:
5c:d4:e3:86:84:5a:48:12:77:08:8c:d0:4d:fa:2d:
25:1e:a8:ff:26:38:bb:06:5c:da:1a:98:85:3b:0b:
8d:80:d6:63:10:01:55:60:fc:55:88:fd:23:9a:1c:
ac:c1:66:92:d5:92:8f:84:0d:46:aa:37:cd:7c:2f:
48:27:d8:6c:0f:b1:22:4c:88:0d:52:70:c8:9e:54:
ed:ec:34:78:7c:35:13:a4:b7:3b:69:ce:5a:65:96:
d8:1c:07:82:96:40:37:39:e9:c8:8a:dd:eb:4b:f7:
11:35:6e:e9:44:ae:40:53:66:d6:ce:39:a0:46:02:
7c:ac:5d:79:79:de:f9:80:ad:8a:00:54:c5:28:36:
13:56:1a:de:9d:13:b8:21:05:a6:2b:a8:01:40:77:
a7:a6:73:aa:94:11:1d:9f:02:94:30:b4:38:c2:7b:
72:29:29:62:bc:0e:5c:91:bc:af:75:e5:34:51:63:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:33:1D:08:6E:05:AB:6E:CB:95:91:5E:D4:C7:1C:0B:5A:2F:DE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B0MzHQhuBatuy5WRXtTHHAtaL94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.244.0/22
151.237.24.0/24
151.237.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b3:7f:29:cb:d4:0d:b8:4a:f4:95:21:f0:d0:ec:ba:4f:c7:
bd:1a:17:40:53:b9:ed:01:78:53:2f:41:56:a2:06:c3:c4:35:
08:e2:76:42:90:87:17:58:28:a0:70:2c:d4:a4:08:04:08:5c:
0b:a7:63:1a:6d:41:fd:cb:14:af:53:01:e7:54:b7:4c:f6:a4:
6a:ed:69:fb:47:d5:e3:b6:ca:11:77:49:5e:2e:fa:a9:61:11:
c6:a0:18:0f:fc:e6:16:b3:d8:aa:72:67:d6:c8:e8:41:f2:0a:
62:4d:ee:e1:15:05:bb:0c:2e:88:9a:06:ad:0b:6c:bf:8e:90:
78:03:f5:e5:30:f9:de:44:56:26:10:b4:e7:b5:b3:2f:fd:0a:
eb:3d:59:1b:70:7d:aa:f9:13:59:44:61:1e:91:5d:9d:eb:a7:
5b:7b:d5:52:16:5f:d6:86:01:9e:9b:24:15:1f:11:5c:5e:04:
05:8a:e1:c5:8b:0b:cd:84:22:1d:40:e3:e0:51:c3:56:b6:7c:
90:6c:69:9d:be:df:a5:bd:3e:df:13:25:73:ff:00:5b:1a:6b:
4d:68:9e:d3:6a:26:33:0a:f6:40:38:eb:65:ed:0e:84:e3:64:
ea:0d:1f:c2:3e:2f:d3:d1:c7:54:17:23:ac:93:00:2b:d4:39:
1f:1b:b7:11
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyRtL0LXatPbcFzxwuPOE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQzMzMxZDA4NmUwNWFiNmVjYjk1OTE1ZWQ0YzcxYzBiNWEyZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4RX6z7sUqNySCXBhpsRNPoWJyEr
A4CuolsPWAjfoVNLTRA6n9ZWJrWeYbF2UewKMBbG0Oqxt6jCvZ1Bgsshlb5ovhf8
v0PhGlVc1OOGhFpIEncIjNBN+i0lHqj/Jji7BlzaGpiFOwuNgNZjEAFVYPxViP0j
mhyswWaS1ZKPhA1GqjfNfC9IJ9hsD7EiTIgNUnDInlTt7DR4fDUTpLc7ac5aZZbY
HAeClkA3OenIit3rS/cRNW7pRK5AU2bWzjmgRgJ8rF15ed75gK2KAFTFKDYTVhre
nRO4IQWmK6gBQHenpnOqlBEdnwKUMLQ4wntyKSlivA5ckbyvdeU0UWMYSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAdDMx0IbgWrbsuVkV7UxxwLWi/eMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvQjBNekhRaHVCYXR1eTVXUlh0VEhIQXRhTDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVbv0AwQA
l+0YAwQAl+0aMA0GCSqGSIb3DQEBCwUAA4IBAQAbs38py9QNuEr0lSHw0Oy6T8e9
GhdAU7ntAXhTL0FWogbDxDUI4nZCkIcXWCigcCzUpAgECFwLp2MabUH9yxSvUwHn
VLdM9qRq7Wn7R9XjtsoRd0leLvqpYRHGoBgP/OYWs9iqcmfWyOhB8gpiTe7hFQW7
DC6ImgatC2y/jpB4A/XlMPneRFYmELTntbMv/QrrPVkbcH2q+RNZRGEekV2d66db
e9VSFl/WhgGemyQVHxFcXgQFiuHFiwvNhCIdQOPgUcNWtnyQbGmdvt+lvT7fEyVz
/wBbGmtNaJ7TaiYzCvZAOOtl7Q6E42TqDR/CPi/T0cdUFyOskwAr1DkfG7cR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org