Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/PNt_jvL34Xns9QjJ9rpVbt_sKxE.roa
File: PNt_jvL34Xns9QjJ9rpVbt_sKxE.roa (raw, json)
Hash identifier: k+lfuvB4e2GvD+fPF1TuxnW5ojV9KRXHF+fI2wA0bW0=
Subject key identifier: 3C:DB:7F:8E:F2:F7:E1:79:EC:F5:08:C9:F6:BA:55:6E:DF:EC:2B:11
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 01856D2F3D23E982E66F18C63CD0992C4D3A
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/PNt_jvL34Xns9QjJ9rpVbt_sKxE.roa
Signing time: Sun 01 Jan 2023 11:54:50 +0000
ROA not before: Sun 01 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44108
IP address blocks: 185.179.148.0/24 maxlen: 24
185.179.149.0/24 maxlen: 24
185.231.164.0/24 maxlen: 24
185.231.164.0/23 maxlen: 23
185.231.164.0/22 maxlen: 22
185.231.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3d:23:e9:82:e6:6f:18:c6:3c:d0:99:2c:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cdb7f8ef2f7e179ecf508c9f6ba556edfec2b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:9e:db:d0:3d:26:32:72:e2:63:3c:91:e5:
b6:33:52:70:34:80:d5:be:25:c0:20:02:d1:37:b3:
a0:67:3a:17:bd:88:05:d0:7e:11:7d:3d:2e:8e:83:
e0:2d:a8:7d:3b:a6:e9:f1:e9:cc:53:cf:a1:9d:0f:
c0:71:c9:63:9b:7a:a4:9f:74:0f:60:1a:cf:71:68:
76:d8:17:2c:03:bd:0c:1f:95:0c:e4:b1:4b:5e:11:
53:2f:11:21:3c:70:eb:15:ef:84:95:d0:79:66:59:
05:d4:e7:13:5b:24:dc:b9:10:3d:d9:5d:49:46:d6:
25:aa:28:d1:bb:9d:5d:ac:35:71:d4:e1:96:71:c7:
5a:b8:fe:e7:eb:5b:75:8e:d6:19:13:d3:06:d4:f5:
5b:ca:e9:11:dd:cc:87:d8:91:84:ed:f9:6e:a3:8b:
fc:c8:ad:1a:dd:4a:5d:a1:9f:63:55:2e:29:2c:f7:
9b:c5:b6:e0:0e:f8:e9:99:be:1d:9b:56:16:b3:70:
3f:20:28:4b:0e:ed:fe:88:db:23:5f:51:16:22:fe:
20:28:f4:44:8d:c1:8a:56:cf:f8:55:57:d9:eb:88:
88:3a:19:ad:ce:e8:fd:b3:22:bb:3f:31:93:d8:f7:
16:03:11:8f:ec:9e:9a:b7:d4:9e:fa:88:f6:e5:2a:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:7F:8E:F2:F7:E1:79:EC:F5:08:C9:F6:BA:55:6E:DF:EC:2B:11
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/PNt_jvL34Xns9QjJ9rpVbt_sKxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.148.0/23
185.231.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:95:d6:f8:79:bb:0f:33:35:1c:31:9a:a3:2f:69:ca:5a:99:
27:a5:97:84:49:51:d3:59:13:81:1e:18:18:84:cd:d9:d3:93:
86:61:3c:9e:56:4f:43:ac:67:b1:cf:f9:1b:35:cb:ad:2f:59:
7d:44:fb:3a:56:e1:cd:f1:df:b6:f2:af:ce:5e:5e:05:9f:a7:
29:22:2a:49:0d:6e:bb:ea:a5:b3:4a:4e:40:2a:71:4d:64:09:
ef:27:0d:8b:1b:71:f5:fd:63:78:6a:9a:a8:bf:ce:10:d0:86:
6b:04:6f:b0:e9:fe:61:77:06:be:86:06:f0:93:c8:72:fd:b8:
34:91:e1:7b:47:ef:3a:bc:91:d0:4b:92:ff:88:36:f2:a7:72:
c1:59:5c:de:36:43:54:0e:70:c1:ae:1c:ce:6b:ca:de:08:dd:
04:2a:49:19:15:4a:f0:2f:19:2b:1d:41:40:87:05:d5:c4:c3:
a0:9a:18:7e:57:34:24:cd:67:0c:0e:b1:62:0f:12:2c:45:09:
46:e6:37:0a:b0:34:9d:d1:b1:24:f6:15:c2:7a:a9:d8:6a:86:
59:cd:9d:c9:c7:e9:95:b1:f2:2c:b8:89:7b:65:bf:42:7b:a8:
9c:67:f7:c4:b9:45:ec:5f:3a:dc:5a:fe:78:aa:43:1f:74:dd:
53:80:05:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtLz0j6YLmbxjGPNCZLE06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy
YmJhYWMwHhcNMjMwMTAxMTE1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2RiN2Y4ZWYyZjdlMTc5ZWNmNTA4YzlmNmJhNTU2ZWRmZWMyYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPye29A9JjJy4mM8keW2M1JwNIDV
viXAIALRN7OgZzoXvYgF0H4RfT0ujoPgLah9O6bp8enMU8+hnQ/Accljm3qkn3QP
YBrPcWh22BcsA70MH5UM5LFLXhFTLxEhPHDrFe+EldB5ZlkF1OcTWyTcuRA92V1J
RtYlqijRu51drDVx1OGWccdauP7n61t1jtYZE9MG1PVbyukR3cyH2JGE7fluo4v8
yK0a3UpdoZ9jVS4pLPebxbbgDvjpmb4dm1YWs3A/IChLDu3+iNsjX1EWIv4gKPRE
jcGKVs/4VVfZ64iIOhmtzuj9syK7PzGT2PcWAxGP7J6at9Se+oj25SoYsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDzbf47y9+F57PUIyfa6VW7f7CsRMB8GA1UdIwQY
MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt
NzQxOGI5MmFhMjA5LzEvUE50X2p2TDM0WG5zOVFqSjlycFZidF9zS3hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5
LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBubOUAwQC
ueekMA0GCSqGSIb3DQEBCwUAA4IBAQBqldb4ebsPMzUcMZqjL2nKWpknpZeESVHT
WROBHhgYhM3Z05OGYTyeVk9DrGexz/kbNcutL1l9RPs6VuHN8d+28q/OXl4Fn6cp
IipJDW676qWzSk5AKnFNZAnvJw2LG3H1/WN4apqov84Q0IZrBG+w6f5hdwa+hgbw
k8hy/bg0keF7R+86vJHQS5L/iDbyp3LBWVzeNkNUDnDBrhzOa8reCN0EKkkZFUrw
LxkrHUFAhwXVxMOgmhh+VzQkzWcMDrFiDxIsRQlG5jcKsDSd0bEk9hXCeqnYaoZZ
zZ3Jx+mVsfIsuIl7Zb9Ce6icZ/fEuUXsXzrcWv54qkMfdN1TgAUi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:05 2024 by rpki-client on console-ams.rpki-client.org