Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_AwiPZ-AyaQrTl3Da60p9pxo8xc.roa
File: _AwiPZ-AyaQrTl3Da60p9pxo8xc.roa (raw, json)
Hash identifier: w0Ox+qSBrANFTinl4a2k0EsHWCrlXhnxnQ84EHWKSr4=
Subject key identifier: FC:0C:22:3D:9F:80:C9:A4:2B:4E:5D:C3:6B:AD:29:F6:9C:68:F3:17
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01917B6EC53D9A490D6D577248D76352F350
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_AwiPZ-AyaQrTl3Da60p9pxo8xc.roa
Signing time: Thu 22 Aug 2024 18:52:22 +0000
ROA not before: Thu 22 Aug 2024 18:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201086
IP address blocks: 185.86.80.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
185.254.95.0/24 maxlen: 24
193.36.63.0/24 maxlen: 24
2a0a:fa40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 22 Nov 2024 14:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:6e:c5:3d:9a:49:0d:6d:57:72:48:d7:63:52:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Aug 22 18:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc0c223d9f80c9a42b4e5dc36bad29f69c68f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:82:9e:ec:7c:55:9d:94:bb:95:58:9f:8a:
0a:92:c8:dc:ae:97:d5:bc:30:3b:03:d0:85:ea:dc:
61:60:d8:f0:f9:0d:13:bb:a1:ee:9c:17:52:ae:6b:
b6:e0:c8:91:cd:c3:4a:c8:24:5b:2a:f1:79:3b:ec:
9b:2a:ac:ca:09:ea:7a:37:42:a0:d5:1e:d0:5c:eb:
78:2a:d3:86:96:f0:0f:ed:2c:95:4c:3a:9a:5b:8a:
44:a9:50:e0:12:bf:c6:91:30:7d:9b:de:9a:7d:3e:
9b:11:67:ed:1b:70:f5:6c:3a:6e:6a:2e:3d:46:37:
ce:7d:13:1a:e0:d6:f3:26:82:24:da:59:5f:b7:12:
a3:4e:3c:26:c2:0a:4a:4e:d3:37:41:4e:88:72:6c:
eb:5d:5c:92:89:91:b8:08:bd:29:54:d6:ae:43:ab:
cc:bf:b9:d2:44:0f:aa:94:97:bd:7e:ca:2e:56:d4:
05:9d:bd:98:4b:87:69:74:65:4f:7c:5e:74:75:1c:
c0:14:bd:0d:df:70:1a:94:15:1d:0f:40:71:3a:b7:
51:c3:01:b8:6e:91:15:02:98:e9:31:52:23:51:0a:
15:ae:34:49:b7:8c:9b:a0:9c:d2:2a:80:58:f5:8e:
c7:ec:82:78:2c:3f:24:c6:58:e7:f2:28:3b:05:e4:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:22:3D:9F:80:C9:A4:2B:4E:5D:C3:6B:AD:29:F6:9C:68:F3:17
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_AwiPZ-AyaQrTl3Da60p9pxo8xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/24
185.205.19.0/24
185.254.95.0/24
193.36.63.0/24
IPv6:
2a0a:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
10:95:75:a8:ed:25:3a:79:6c:56:94:f5:01:3c:2b:e5:db:6a:
0f:3e:93:d8:80:1d:65:37:56:74:ec:6b:97:80:0e:c7:92:bf:
0a:f5:81:ee:56:cc:83:f4:3a:f0:74:26:bb:6e:2e:ea:59:9d:
cc:bc:84:58:ea:40:1d:8d:e2:82:18:43:cf:00:d6:e8:42:e3:
62:e6:d4:f7:41:ba:02:78:80:19:f8:4b:98:49:03:15:86:ec:
8b:c1:f0:57:0f:8a:81:2a:c2:83:79:e6:d6:11:85:03:f8:7b:
93:b1:78:b5:51:25:52:51:68:51:3c:32:01:01:2a:4f:51:4c:
43:74:ce:f9:bb:93:7d:3c:7c:a6:1d:94:a5:af:e5:4a:25:48:
f4:c3:d3:50:5b:0e:9c:b9:a5:1f:20:2d:b4:aa:28:3a:9d:51:
de:11:f4:91:a5:05:55:d5:a8:fb:c8:44:e3:e1:6a:00:be:1e:
85:05:3c:8c:ac:55:ce:62:6b:55:86:09:ba:41:e4:c4:dc:a7:
58:08:d0:59:db:c0:7c:29:b1:0c:33:90:72:5d:f2:a8:20:8c:
61:ac:74:2d:63:28:a8:e0:e2:92:e1:13:c3:59:79:de:ec:86:
72:23:51:d8:6a:58:33:a0:2e:68:0f:15:b7:4e:4f:93:fa:ed:
97:fe:ac:f2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZF7bsU9mkkNbVdySNdjUvNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjQwODIyMTg1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzBjMjIzZDlmODBjOWE0MmI0ZTVkYzM2YmFkMjlmNjljNjhmMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTSCnux8VZ2Uu5VYn4oKksjcrpfV
vDA7A9CF6txhYNjw+Q0Tu6HunBdSrmu24MiRzcNKyCRbKvF5O+ybKqzKCep6N0Kg
1R7QXOt4KtOGlvAP7SyVTDqaW4pEqVDgEr/GkTB9m96afT6bEWftG3D1bDpuai49
RjfOfRMa4NbzJoIk2llftxKjTjwmwgpKTtM3QU6IcmzrXVySiZG4CL0pVNauQ6vM
v7nSRA+qlJe9fsouVtQFnb2YS4dpdGVPfF50dRzAFL0N33AalBUdD0BxOrdRwwG4
bpEVApjpMVIjUQoVrjRJt4yboJzSKoBY9Y7H7IJ4LD8kxljn8ig7BeQTbQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPwMIj2fgMmkK05dw2utKfacaPMXMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvX0F3aVBaLUF5YVFyVGwzRGE2MHA5cHhvOHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAuVZQAwQA
uc0TAwQAuf5fAwQAwSQ/MA0EAgACMAcDBQAqCvpAMA0GCSqGSIb3DQEBCwUAA4IB
AQAQlXWo7SU6eWxWlPUBPCvl22oPPpPYgB1lN1Z07GuXgA7Hkr8K9YHuVsyD9Drw
dCa7bi7qWZ3MvIRY6kAdjeKCGEPPANboQuNi5tT3QboCeIAZ+EuYSQMVhuyLwfBX
D4qBKsKDeebWEYUD+HuTsXi1USVSUWhRPDIBASpPUUxDdM75u5N9PHymHZSlr+VK
JUj0w9NQWw6cuaUfIC20qig6nVHeEfSRpQVV1aj7yETj4WoAvh6FBTyMrFXOYmtV
hgm6QeTE3KdYCNBZ28B8KbEMM5ByXfKoIIxhrHQtYyio4OKS4RPDWXne7IZyI1HY
algzoC5oDxW3Tk+T+u2X/qzy
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:52 2024 by rpki-client on console-ams.rpki-client.org