Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r22HT_Ll9duShswE-WiC4RMB5eE.roa
File: r22HT_Ll9duShswE-WiC4RMB5eE.roa (raw, json)
Hash identifier: o5RS8oLgsob9R3oQZ2puXWvnim4YGF4niJdb5g6rxLo=
Subject key identifier: AF:6D:87:4F:F2:E5:F5:DB:92:86:CC:04:F9:68:82:E1:13:01:E5:E1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018BB309ABDF8081A1206DFB5EE10628ACD5
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r22HT_Ll9duShswE-WiC4RMB5eE.roa
Signing time: Thu 09 Nov 2023 07:43:57 +0000
ROA not before: Thu 09 Nov 2023 07:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 92.61.109.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:09:ab:df:80:81:a1:20:6d:fb:5e:e1:06:28:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 9 07:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6d874ff2e5f5db9286cc04f96882e11301e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:5c:d7:dd:3f:92:95:23:fb:04:87:ae:ec:
de:66:85:9e:a6:c4:72:2a:ad:16:e4:81:55:64:8b:
76:c7:5b:d1:80:34:a5:f5:d7:59:4a:74:31:6c:d2:
37:80:07:2c:df:a4:36:23:d1:3b:01:8a:31:8c:c0:
b3:3a:86:d0:31:df:07:69:7c:7c:1c:9e:14:4f:c1:
3e:1d:42:8b:b8:7b:b3:ba:ab:b8:31:e5:3b:ee:63:
2c:81:63:71:88:ca:50:24:68:a0:c3:d6:0b:b6:83:
63:1d:53:91:89:92:80:ba:28:03:8d:51:d3:39:39:
f2:7e:a0:9c:18:06:ff:a9:26:61:70:bf:1b:58:7e:
48:3a:08:d7:ca:f4:18:11:9c:57:93:a7:0b:b0:0e:
2a:76:d6:97:2e:68:fd:b8:c0:3b:7b:56:23:ee:a5:
23:ef:ab:c6:cf:6f:31:9b:eb:3c:7d:b6:0b:8b:86:
61:cd:6b:7d:b8:0a:cc:21:3e:64:47:08:fd:08:2d:
f2:f4:7e:a2:ff:73:37:09:bf:22:f8:61:66:6e:ca:
64:70:3e:3f:f5:ee:c4:7f:d0:2b:d8:6d:cb:43:f2:
da:09:54:71:35:46:f3:2c:b8:77:ee:74:e7:5d:8b:
4a:63:ae:a1:b4:0f:2e:95:7c:0a:9e:92:f1:61:ef:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:87:4F:F2:E5:F5:DB:92:86:CC:04:F9:68:82:E1:13:01:E5:E1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r22HT_Ll9duShswE-WiC4RMB5eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.187.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
13:aa:52:95:20:dd:c1:3b:6a:53:4f:17:d9:fb:62:f2:f4:75:
17:be:86:8f:13:8b:24:58:93:06:e8:e7:b0:ce:23:3f:ea:d7:
65:82:b1:10:f5:9f:7d:5c:ee:56:b4:c9:5e:d5:df:6c:59:7c:
58:c6:67:85:40:dc:a5:cd:d0:1d:23:fb:1d:7e:e3:6c:d9:de:
b1:1e:eb:53:da:96:24:98:e2:04:c8:f8:75:c1:2c:c1:b0:04:
3f:77:9d:1d:38:d2:77:d1:5b:02:8a:4e:f9:75:80:2f:9a:83:
18:51:d4:68:86:07:95:11:5f:b9:e2:e4:4b:13:ef:2a:f9:be:
a3:16:c8:cf:10:2c:fb:5e:f0:da:64:a2:53:a9:f9:c9:cf:fe:
78:64:13:74:ec:f4:a6:6a:cf:8c:f2:c0:33:f5:b2:a2:03:26:
e8:c3:dc:66:24:79:5b:5a:ca:fd:f3:7c:d7:e1:80:6b:2c:c4:
c8:c6:fc:fb:c7:f8:fc:71:f4:cf:ec:1e:67:9d:76:ea:c3:e8:
6d:7e:04:ec:27:b6:bb:28:4e:03:c8:33:b0:2f:50:9f:c6:e3:
8a:a1:7f:84:55:0a:a9:a0:4a:82:07:a5:9c:3c:08:a7:59:f6:
89:c4:66:d6:85:38:2f:2d:19:89:60:f9:be:5c:bf:10:ea:d6:
31:ca:68:e4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYuzCavfgIGhIG37XuEGKKzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjMxMTA5MDc0MzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjZkODc0ZmYyZTVmNWRiOTI4NmNjMDRmOTY4ODJlMTEzMDFlNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdpc190/kpUj+wSHruzeZoWepsRy
Kq0W5IFVZIt2x1vRgDSl9ddZSnQxbNI3gAcs36Q2I9E7AYoxjMCzOobQMd8HaXx8
HJ4UT8E+HUKLuHuzuqu4MeU77mMsgWNxiMpQJGigw9YLtoNjHVORiZKAuigDjVHT
OTnyfqCcGAb/qSZhcL8bWH5IOgjXyvQYEZxXk6cLsA4qdtaXLmj9uMA7e1Yj7qUj
76vGz28xm+s8fbYLi4ZhzWt9uArMIT5kRwj9CC3y9H6i/3M3Cb8i+GFmbspkcD4/
9e7Ef9Ar2G3LQ/LaCVRxNUbzLLh37nTnXYtKY66htA8ulXwKnpLxYe8svQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK9th0/y5fXbkobMBPloguETAeXhMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvcjIySFRfTGw5ZHVTaHN3RS1XaUM0Uk1CNWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW767AwQA
XD1qAwQAXD1tAwQCuXDwMA0GCSqGSIb3DQEBCwUAA4IBAQATqlKVIN3BO2pTTxfZ
+2Ly9HUXvoaPE4skWJMG6OewziM/6tdlgrEQ9Z99XO5WtMle1d9sWXxYxmeFQNyl
zdAdI/sdfuNs2d6xHutT2pYkmOIEyPh1wSzBsAQ/d50dONJ30VsCik75dYAvmoMY
UdRohgeVEV+54uRLE+8q+b6jFsjPECz7XvDaZKJTqfnJz/54ZBN07PSmas+M8sAz
9bKiAybow9xmJHlbWsr983zX4YBrLMTIxvz7x/j8cfTP7B5nnXbqw+htfgTsJ7a7
KE4DyDOwL1CfxuOKoX+EVQqpoEqCB6WcPAinWfaJxGbWhTgvLRmJYPm+XL8Q6tYx
ymjk
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:25 2024 by rpki-client on console-ams.rpki-client.org