Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_bbiXoYjIvMEmhzM_Plzv1mXTE.roa
File: 4_bbiXoYjIvMEmhzM_Plzv1mXTE.roa (raw, json)
Hash identifier: i9cyOrpV2sqthLIQKoTpwXRrz2PweedSdK8UyNzhefA=
Subject key identifier: E3:F6:DB:89:7A:18:8C:8B:CC:12:68:73:33:F3:E5:CE:FD:66:5D:31
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AE0B78CED3A338F2B8F7012D9E9CE143C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_bbiXoYjIvMEmhzM_Plzv1mXTE.roa
Signing time: Fri 29 Sep 2023 11:33:59 +0000
ROA not before: Fri 29 Sep 2023 11:33:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 185.247.4.0/22 maxlen: 24
194.113.28.0/22 maxlen: 24
185.247.5.0/24 maxlen: 24
185.247.6.0/23 maxlen: 24
194.146.220.0/22 maxlen: 22
185.221.16.0/23 maxlen: 23
185.227.206.0/24 maxlen: 24
45.134.84.0/22 maxlen: 24
185.227.207.0/24 maxlen: 24
185.224.220.0/22 maxlen: 22
185.249.204.0/22 maxlen: 22
185.250.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:b7:8c:ed:3a:33:8f:2b:8f:70:12:d9:e9:ce:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 29 11:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f6db897a188c8bcc12687333f3e5cefd665d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:4f:a3:96:bd:17:d6:08:93:9b:91:83:7b:
5e:81:17:8f:84:e7:ae:13:1f:cb:ca:0c:d2:71:2c:
3e:0d:e3:7b:21:0d:46:47:7d:51:d0:20:28:38:89:
f5:16:e8:c0:e0:1d:b0:88:ea:14:78:51:c6:43:d1:
97:d5:59:a9:a6:b2:b0:6d:d1:e2:80:eb:a2:5a:07:
ac:83:4e:fb:f6:4b:31:dd:14:5d:16:a9:e1:90:ac:
95:22:ae:bf:1b:43:ca:d4:a8:11:f3:79:f2:81:47:
ee:78:fd:7e:60:97:15:0a:e8:b6:22:73:83:bf:f9:
f4:13:36:9e:2a:6e:31:a2:83:b3:70:0e:0f:c0:0a:
2a:8e:45:06:ea:61:35:21:b8:53:98:2f:27:52:bf:
e3:90:e0:58:c1:d6:79:c2:d5:65:67:3c:e4:da:c1:
20:9a:7a:53:9c:18:cb:1b:32:fa:04:27:ef:16:bf:
94:ff:00:82:34:08:fe:1e:c1:01:8e:ce:7d:c5:f9:
7b:49:05:84:4c:20:82:38:fc:dc:77:b6:0e:1a:c0:
bc:75:22:88:9d:6b:20:3f:4a:fc:38:4c:a0:1e:26:
9e:3a:9e:f4:c2:4d:c0:33:96:50:ef:55:7b:c8:07:
a2:36:a0:ca:3e:5b:3d:27:69:0c:2d:8f:ce:1b:3c:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:DB:89:7A:18:8C:8B:CC:12:68:73:33:F3:E5:CE:FD:66:5D:31
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_bbiXoYjIvMEmhzM_Plzv1mXTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
185.221.16.0/23
185.224.220.0/22
185.227.206.0/23
185.247.4.0/22
185.249.204.0/22
185.250.182.0/23
194.113.28.0/22
194.146.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a6:8d:b7:fd:5a:00:1c:dd:0f:ff:34:54:fb:d7:f8:3f:24:
0b:9f:11:bd:5a:60:d7:54:d9:f2:23:eb:84:c0:01:98:a7:a4:
e7:07:92:92:e6:d7:8a:8c:56:b7:aa:8f:1c:b9:24:0e:7f:fc:
bc:b1:5e:7c:9d:11:72:bb:05:82:c2:7c:68:40:ca:6c:19:52:
7f:bd:ef:12:95:d5:7a:b0:b0:2d:0f:8c:73:26:51:eb:38:99:
c0:05:74:46:9d:66:e0:1d:a6:3b:27:c7:70:ba:8a:12:bd:32:
2f:23:0d:a9:6b:4e:9b:63:e0:8c:03:cb:93:78:22:ef:b3:6b:
98:7b:9b:22:28:cc:7b:fe:1b:40:2a:58:88:ce:d6:57:1a:3f:
31:2d:c7:58:6c:2e:17:cf:5a:41:75:e1:0c:7f:02:6c:eb:0e:
c1:2f:6d:af:01:6c:a2:8e:ec:34:d6:d1:bf:47:23:78:f5:a7:
76:b7:1b:b1:1c:40:59:91:98:75:83:c4:a0:99:59:29:37:8b:
f0:9e:ed:38:30:22:e1:18:6f:5b:64:51:27:0b:f1:09:f3:0a:
64:22:7d:bd:1f:7a:d7:f0:4d:cf:db:b2:57:d4:6d:ec:ae:cc:
74:60:78:26:a0:9c:70:cb:f3:4e:36:8e:52:98:17:c5:ec:e6:
20:50:6d:e7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYrgt4ztOjOPK49wEtnpzhQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTI5MTEzMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Y2ZGI4OTdhMTg4YzhiY2MxMjY4NzMzM2YzZTVjZWZkNjY1ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jBPo5a9F9YIk5uRg3tegRePhOeu
Ex/LygzScSw+DeN7IQ1GR31R0CAoOIn1FujA4B2wiOoUeFHGQ9GX1VmpprKwbdHi
gOuiWgesg0779ksx3RRdFqnhkKyVIq6/G0PK1KgR83nygUfueP1+YJcVCui2InOD
v/n0EzaeKm4xooOzcA4PwAoqjkUG6mE1IbhTmC8nUr/jkOBYwdZ5wtVlZzzk2sEg
mnpTnBjLGzL6BCfvFr+U/wCCNAj+HsEBjs59xfl7SQWETCCCOPzcd7YOGsC8dSKI
nWsgP0r8OEygHiaeOp70wk3AM5ZQ71V7yAeiNqDKPls9J2kMLY/OGzyy+QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFOP224l6GIyLzBJoczPz5c79Zl0xMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNF9iYmlYb1lqSXZNRW1oek1fUGx6djFtWFRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCLYZUAwQB
ud0QAwQCueDcAwQBuePOAwQCufcEAwQCufnMAwQBufq2AwQCwnEcAwQCwpLcMA0G
CSqGSIb3DQEBCwUAA4IBAQBqpo23/VoAHN0P/zRU+9f4PyQLnxG9WmDXVNnyI+uE
wAGYp6TnB5KS5teKjFa3qo8cuSQOf/y8sV58nRFyuwWCwnxoQMpsGVJ/ve8SldV6
sLAtD4xzJlHrOJnABXRGnWbgHaY7J8dwuooSvTIvIw2pa06bY+CMA8uTeCLvs2uY
e5siKMx7/htAKliIztZXGj8xLcdYbC4Xz1pBdeEMfwJs6w7BL22vAWyijuw01tG/
RyN49ad2txuxHEBZkZh1g8SgmVkpN4vwnu04MCLhGG9bZFEnC/EJ8wpkIn29H3rX
8E3P27JX1G3srsx0YHgmoJxwy/NONo5SmBfF7OYgUG3n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org