Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/sjU-mDu9WSsPgbJ9e1kLZ4A2EVI.roa
File: sjU-mDu9WSsPgbJ9e1kLZ4A2EVI.roa (raw, json)
Hash identifier: H1rjQXUHXnoGSkwD7gMNTgXxggMGmAAOGYUvv9kwAn4=
Subject key identifier: B2:35:3E:98:3B:BD:59:2B:0F:81:B2:7D:7B:59:0B:67:80:36:11:52
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 01856C4A3C3D364F8025111A3A88C85684E0
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/sjU-mDu9WSsPgbJ9e1kLZ4A2EVI.roa
Signing time: Sun 01 Jan 2023 07:44:42 +0000
ROA not before: Sun 01 Jan 2023 07:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205059
IP address blocks: 185.129.17.0/24 maxlen: 24
185.129.16.0/24 maxlen: 24
185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
185.231.110.0/24 maxlen: 24
185.231.111.0/24 maxlen: 24
2a0f:aac0::/48 maxlen: 48
2a0f:aac0:3::/48 maxlen: 48
2a0f:aac0:1::/48 maxlen: 48
2a0f:aac0:4::/48 maxlen: 48
2a0f:aac0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:3c:3d:36:4f:80:25:11:1a:3a:88:c8:56:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 07:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2353e983bbd592b0f81b27d7b590b6780361152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:ca:51:d0:b4:45:95:43:ab:92:ed:40:95:
5a:9a:5e:35:19:e7:42:ab:dc:c5:8b:4e:1f:05:f4:
10:e6:80:e4:34:d2:c5:b1:4b:eb:e6:99:90:b4:fe:
c3:77:26:51:09:ca:68:2f:4a:09:f2:45:82:ed:67:
89:a7:68:f5:0f:e1:98:5c:f8:db:d0:08:41:17:d8:
e9:4b:76:d2:5d:d3:df:33:25:89:68:af:a9:9b:0e:
d9:a2:a6:fa:00:6a:50:17:99:0e:5f:5a:b2:d2:8d:
01:a9:fe:57:40:be:8c:0e:0c:de:ed:27:6c:e3:76:
33:2e:62:a1:f3:1b:a3:0b:08:bd:c6:e8:1b:ab:1a:
f3:d3:2f:f7:6a:6e:2f:5b:f5:b2:1e:40:9b:dc:29:
cb:87:96:f4:27:21:a5:63:7c:e3:10:23:06:8b:1f:
2e:31:5d:64:b2:88:59:b4:93:5d:61:1d:79:d4:67:
fc:7c:3c:f8:57:19:cb:98:be:6e:0c:1c:07:61:92:
f9:a1:29:3c:7a:2f:8f:b4:99:84:53:4d:68:a5:d7:
bf:fd:98:a7:57:c5:9d:5d:df:d4:84:a2:70:95:84:
dc:d9:78:b0:62:78:c7:07:5d:c7:c2:9a:5c:69:2e:
51:9b:f5:4a:5e:f9:38:2b:66:a8:5c:56:65:73:62:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:3E:98:3B:BD:59:2B:0F:81:B2:7D:7B:59:0B:67:80:36:11:52
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/sjU-mDu9WSsPgbJ9e1kLZ4A2EVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
185.231.108.0/22
IPv6:
2a0f:aac0::-2a0f:aac0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:bc:d5:2c:3f:5b:91:11:3d:e1:bd:8c:b4:e0:f1:6a:dd:c6:
5a:bb:a1:a2:05:96:29:99:c3:2f:eb:6d:34:9c:9a:69:e6:5d:
a5:25:04:9d:b2:38:45:84:6c:ec:39:8a:9c:ab:9d:02:0e:d5:
1c:32:33:ff:d0:5d:8d:2b:9d:07:b3:84:86:25:aa:b8:f7:fe:
ea:28:6c:e1:57:83:7e:f0:9f:3b:11:49:72:08:19:43:9d:32:
c4:84:b2:3c:42:f8:44:dd:ab:6d:3b:1a:a8:97:7f:1d:54:4c:
69:fd:d9:7b:7e:6f:1b:85:75:3c:ea:af:ad:40:2b:d8:92:00:
d2:a6:34:1b:cd:00:36:1e:1c:d8:c1:7f:17:69:e0:f1:c2:48:
65:c6:18:c7:cf:b6:48:04:b2:4f:4f:02:fe:85:b6:ef:91:60:
87:90:c2:e2:ba:4c:a0:44:30:39:5f:7a:4c:07:ad:48:b7:d7:
df:d5:1c:fe:07:5e:4f:1d:ac:fd:ab:81:85:72:03:2c:10:dd:
dc:21:3b:5c:16:e6:6e:1b:57:fd:b6:ca:b3:f2:f8:0e:93:c4:
8a:19:0e:3a:32:02:d1:6e:64:2b:66:6d:ed:06:f5:a0:a2:dc:
8b:ce:25:5e:95:d2:d5:de:d6:e2:8f:5a:a6:43:d9:e9:f2:00:
9e:71:f0:0c
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVsSjw9Nk+AJREaOojIVoTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjMwMTAxMDc0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjM1M2U5ODNiYmQ1OTJiMGY4MWIyN2Q3YjU5MGI2NzgwMzYxMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ3KUdC0RZVDq5LtQJVaml41GedC
q9zFi04fBfQQ5oDkNNLFsUvr5pmQtP7DdyZRCcpoL0oJ8kWC7WeJp2j1D+GYXPjb
0AhBF9jpS3bSXdPfMyWJaK+pmw7Zoqb6AGpQF5kOX1qy0o0Bqf5XQL6MDgze7Sds
43YzLmKh8xujCwi9xugbqxrz0y/3am4vW/WyHkCb3CnLh5b0JyGlY3zjECMGix8u
MV1ksohZtJNdYR151Gf8fDz4VxnLmL5uDBwHYZL5oSk8ei+PtJmEU01opde//Zin
V8WdXd/UhKJwlYTc2XiwYnjHB13HwppcaS5Rm/VKXvk4K2aoXFZlc2INTwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLI1Ppg7vVkrD4GyfXtZC2eANhFSMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEvc2pVLW1EdTlXU3NQZ2JKOWUxa0xaNEEyRVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBuYEQAwQC
uedsMBgEAgACMBIwEAMFBioPqsADBwAqD6rAAAQwDQYJKoZIhvcNAQELBQADggEB
AA681Sw/W5ERPeG9jLTg8Wrdxlq7oaIFlimZwy/rbTScmmnmXaUlBJ2yOEWEbOw5
ipyrnQIO1RwyM//QXY0rnQezhIYlqrj3/uoobOFXg37wnzsRSXIIGUOdMsSEsjxC
+ETdq207GqiXfx1UTGn92Xt+bxuFdTzqr61AK9iSANKmNBvNADYeHNjBfxdp4PHC
SGXGGMfPtkgEsk9PAv6Ftu+RYIeQwuK6TKBEMDlfekwHrUi319/VHP4HXk8drP2r
gYVyAywQ3dwhO1wW5m4bV/22yrPy+A6TxIoZDjoyAtFuZCtmbe0G9aCi3IvOJV6V
0tXe1uKPWqZD2enyAJ5x8Aw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:53 2024 by rpki-client on console-ams.rpki-client.org