Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Gm6t7MkFMXPrvZKc5deyrhW-Jq0.roa
File: Gm6t7MkFMXPrvZKc5deyrhW-Jq0.roa (raw, json)
Hash identifier: 5yF+vQpVLzq8WVBd7R03Kx9BfA+Q2/UNncnxBH7IMp0=
Subject key identifier: 1A:6E:AD:EC:C9:05:31:73:EB:BD:92:9C:E5:D7:B2:AE:15:BE:26:AD
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B57B7B1A513F55EBD210A008AFB4E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Gm6t7MkFMXPrvZKc5deyrhW-Jq0.roa
Signing time: Tue 02 Jan 2024 12:34:47 +0000
ROA not before: Tue 02 Jan 2024 12:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52423
IP address blocks: 185.185.248.0/24 maxlen: 24
185.185.249.0/24 maxlen: 24
185.190.80.0/24 maxlen: 32
185.184.141.0/24 maxlen: 32
185.184.143.0/24 maxlen: 24
185.184.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 09:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:57:b7:b1:a5:13:f5:5e:bd:21:0a:00:8a:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a6eadecc9053173ebbd929ce5d7b2ae15be26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:ea:ad:75:f4:e1:ba:1e:29:df:b7:4b:06:
e1:7c:d5:bd:b9:4e:30:91:97:40:6d:3d:92:79:4c:
9b:b6:25:5c:95:ae:06:72:5f:ee:df:7c:23:7e:e7:
d0:47:0f:a1:90:93:2c:dd:95:69:ee:d8:95:c1:2c:
0b:74:11:3e:b6:64:59:27:b4:cf:39:63:ff:a1:33:
f6:d0:67:a7:e9:8d:eb:ba:29:18:65:b9:e9:27:50:
08:cf:e8:9a:37:71:63:74:07:6e:bc:11:b2:f4:89:
90:38:db:9f:52:60:cb:70:d2:93:4a:18:13:c3:42:
07:18:d3:21:0e:fb:7f:f6:68:46:7d:11:b2:97:93:
ea:dd:d7:62:e3:85:4c:b3:39:90:42:a1:98:9e:5e:
42:c4:f0:3f:83:08:cb:0b:49:8c:83:22:d0:cf:d9:
c7:39:a3:c4:c9:de:76:7f:88:a9:e6:9f:bf:84:94:
cf:cc:d5:6b:9f:9b:ed:b0:01:ab:ca:3a:58:d5:42:
b9:32:10:bd:f8:25:40:90:a4:6f:61:a8:82:87:b7:
31:61:04:4b:54:66:68:f4:a3:cf:bb:ce:79:8d:e8:
55:3b:f8:f5:94:34:a2:a4:0d:92:69:73:1e:c3:86:
ff:f7:23:9b:96:b9:0a:91:f8:11:13:ec:02:00:9d:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:AD:EC:C9:05:31:73:EB:BD:92:9C:E5:D7:B2:AE:15:BE:26:AD
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Gm6t7MkFMXPrvZKc5deyrhW-Jq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.141.0-185.184.143.255
185.185.248.0/23
185.190.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7e:f5:73:76:7b:2c:6d:c1:c6:f6:07:91:01:08:56:d4:a1:
9e:a3:b0:af:c5:f8:0b:a6:34:c4:b3:6d:d4:f5:be:eb:e3:8e:
d5:ad:71:ec:99:66:41:28:7d:9d:bd:47:48:26:54:57:f7:a2:
93:6a:23:1a:ee:2d:52:93:6d:1c:2e:92:ce:58:28:cf:f8:09:
e1:91:1e:1b:f7:a7:1a:af:f6:8e:25:65:59:c0:48:2e:02:75:
17:19:6a:ff:d3:72:5d:02:d7:cc:32:45:af:bd:8e:4b:ef:1c:
47:41:e5:02:ec:43:60:f8:e6:0b:46:5e:7d:29:cb:38:f7:ed:
b8:e3:cd:bd:c1:01:fd:5a:bf:29:e2:56:88:c9:18:f3:4a:1b:
72:ca:fb:84:a5:06:c7:27:63:3d:e0:8f:13:5f:80:14:29:4a:
58:75:4e:f4:8d:77:45:4b:1d:02:4a:17:53:5d:24:8b:d3:a7:
e9:ee:39:75:3c:b8:80:de:b2:d5:fb:45:10:39:dd:14:fc:55:
57:45:74:9f:91:f7:b0:de:5e:91:62:a7:07:ac:0a:44:04:09:
92:ef:e9:a5:54:f6:47:5d:24:c8:39:a2:5b:f9:ea:a7:06:38:
c8:ff:49:3c:db:a1:c6:17:4b:f5:70:c1:98:3e:9f:cf:5d:d4:
30:3b:2e:76
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzKK1e3saUT9V69IQoAivtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQwMTAyMTIzNDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZlYWRlY2M5MDUzMTczZWJiZDkyOWNlNWQ3YjJhZTE1YmUyNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6TqrXX04boeKd+3SwbhfNW9uU4w
kZdAbT2SeUybtiVcla4Gcl/u33wjfufQRw+hkJMs3ZVp7tiVwSwLdBE+tmRZJ7TP
OWP/oTP20Gen6Y3ruikYZbnpJ1AIz+iaN3FjdAduvBGy9ImQONufUmDLcNKTShgT
w0IHGNMhDvt/9mhGfRGyl5Pq3ddi44VMszmQQqGYnl5CxPA/gwjLC0mMgyLQz9nH
OaPEyd52f4ip5p+/hJTPzNVrn5vtsAGryjpY1UK5MhC9+CVAkKRvYaiCh7cxYQRL
VGZo9KPPu855jehVO/j1lDSipA2SaXMew4b/9yOblrkKkfgRE+wCAJ1yDwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFBpurezJBTFz672SnOXXsq4VviatMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvR202dDdNa0ZNWFBydlpLYzVkZXlyaFctSnEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAC5uI0D
BAS5uIADBAG5ufgDBAC5vlAwDQYJKoZIhvcNAQELBQADggEBAHp+9XN2eyxtwcb2
B5EBCFbUoZ6jsK/F+AumNMSzbdT1vuvjjtWtceyZZkEofZ29R0gmVFf3opNqIxru
LVKTbRwuks5YKM/4CeGRHhv3pxqv9o4lZVnASC4CdRcZav/Tcl0C18wyRa+9jkvv
HEdB5QLsQ2D45gtGXn0pyzj37bjjzb3BAf1avyniVojJGPNKG3LK+4SlBscnYz3g
jxNfgBQpSlh1TvSNd0VLHQJKF1NdJIvTp+nuOXU8uIDestX7RRA53RT8VVdFdJ+R
97DeXpFipwesCkQECZLv6aVU9kddJMg5olv56qcGOMj/STzbocYXS/VwwZg+n89d
1DA7LnY=
-----END CERTIFICATE-----
Generated at Sat Apr 6 09:53:18 2024 by rpki-client on console-ams.rpki-client.org