Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/kI9Q3aRj-JPBQjXYE8bl20rAgl8.roa
File: kI9Q3aRj-JPBQjXYE8bl20rAgl8.roa (raw, json)
Hash identifier: ecjXmGsbVecCLD/XDhQFZqIQ02YGF4jM3N7dPpKgp7w=
Subject key identifier: 90:8F:50:DD:A4:63:F8:93:C1:42:35:D8:13:C6:E5:DB:4A:C0:82:5F
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01859AD21C9E0BF620B5C47AA8C3786191D6
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/kI9Q3aRj-JPBQjXYE8bl20rAgl8.roa
Signing time: Tue 10 Jan 2023 08:35:39 +0000
ROA not before: Tue 10 Jan 2023 08:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50309
IP address blocks: 185.221.184.0/22 maxlen: 32
46.182.192.0/21 maxlen: 32
185.160.128.0/22 maxlen: 32
94.142.132.0/23 maxlen: 32
2a0b:5e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:d2:1c:9e:0b:f6:20:b5:c4:7a:a8:c3:78:61:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 10 08:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=908f50dda463f893c14235d813c6e5db4ac0825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:8c:9c:a5:d2:2a:51:e7:d1:be:48:70:70:
a8:51:d7:4f:e4:5b:12:c8:90:4f:f0:8b:d1:92:83:
fd:9b:b2:ee:cb:23:0b:23:a5:c4:5f:33:89:86:55:
b2:a4:47:42:71:6c:d1:9c:fe:a2:18:93:d2:ee:09:
48:ee:9b:46:65:2f:2e:2c:3f:28:2f:c6:f4:77:c9:
f3:1a:b5:12:35:69:16:a3:6a:3d:77:c9:45:4a:9f:
e1:93:46:61:17:27:49:4e:9b:fc:4f:cb:3b:ba:15:
8d:95:18:0f:50:2a:b4:35:ff:e6:ee:93:22:65:93:
1d:b5:ea:90:4f:c0:b7:cb:28:9b:da:f8:47:78:33:
f8:4c:0c:2e:e6:44:29:5d:c2:d1:6e:72:ef:68:aa:
e9:72:ac:9a:73:76:fa:e7:8b:b7:02:fe:f3:79:c0:
c2:bb:d2:78:fd:e7:69:9b:89:4b:4e:18:7d:6c:9d:
f4:53:7f:f4:8a:0a:ec:42:7d:c7:56:e1:61:d9:76:
c1:c9:b2:50:c7:da:76:4a:3b:a8:62:20:a7:86:5f:
5f:51:3f:2e:c6:1d:aa:00:0b:51:7e:4e:79:bb:4f:
c3:a8:12:ff:bf:f2:68:10:f0:c7:8e:b5:c5:61:0e:
90:22:b4:55:14:02:b0:35:15:3a:3d:b6:b2:cb:1a:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:50:DD:A4:63:F8:93:C1:42:35:D8:13:C6:E5:DB:4A:C0:82:5F
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/kI9Q3aRj-JPBQjXYE8bl20rAgl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.192.0/21
94.142.132.0/23
185.160.128.0/22
185.221.184.0/22
IPv6:
2a0b:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
45:90:4a:40:23:08:7f:7d:b3:43:eb:1d:e8:0c:bd:1c:95:27:
aa:62:68:ce:2d:2b:24:92:36:ce:e2:36:b1:74:ed:38:dc:2c:
32:ad:43:1d:7b:09:7a:22:fb:84:4d:20:10:37:95:a6:54:c2:
51:42:a3:47:95:f4:fd:79:03:f0:69:79:54:af:44:d1:df:87:
dd:a2:75:06:ec:f3:d1:de:17:23:42:62:73:e5:75:e1:9a:5e:
76:26:b7:d1:68:87:3d:76:15:0f:fe:20:2b:c3:ca:ee:ae:e2:
09:63:d4:88:63:27:ec:72:8d:fd:c9:5f:65:7e:0e:12:28:9e:
d9:f2:61:94:ba:65:81:97:20:97:48:57:06:d2:b0:88:05:71:
58:90:3e:86:1d:bf:7b:89:78:f7:ad:af:f5:00:99:2d:b8:b1:
f2:fb:9f:3d:1a:8c:bb:65:35:a3:30:85:d6:51:81:b4:c0:6f:
2b:81:1d:32:87:e6:fd:ef:ea:74:c6:fa:d7:19:40:15:e8:95:
24:0c:92:ab:93:a2:ee:0e:01:57:3b:27:0a:00:80:10:2c:9c:
b9:a0:d2:39:88:88:69:5b:64:51:3e:e5:48:a5:c4:a0:88:79:
25:26:00:cc:dc:90:45:aa:4b:9c:70:ad:d7:bc:ab:61:2c:1d:
6c:1b:7d:8a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYWa0hyeC/YgtcR6qMN4YZHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjMwMTEwMDgzNTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDhmNTBkZGE0NjNmODkzYzE0MjM1ZDgxM2M2ZTVkYjRhYzA4MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu6MnKXSKlHn0b5IcHCoUddP5FsS
yJBP8IvRkoP9m7LuyyMLI6XEXzOJhlWypEdCcWzRnP6iGJPS7glI7ptGZS8uLD8o
L8b0d8nzGrUSNWkWo2o9d8lFSp/hk0ZhFydJTpv8T8s7uhWNlRgPUCq0Nf/m7pMi
ZZMdteqQT8C3yyib2vhHeDP4TAwu5kQpXcLRbnLvaKrpcqyac3b654u3Av7zecDC
u9J4/edpm4lLThh9bJ30U3/0igrsQn3HVuFh2XbBybJQx9p2SjuoYiCnhl9fUT8u
xh2qAAtRfk55u0/DqBL/v/JoEPDHjrXFYQ6QIrRVFAKwNRU6Pbayyxp8BQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJCPUN2kY/iTwUI12BPG5dtKwIJfMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEva0k5UTNhUmotSlBCUWpYWUU4YmwyMHJBZ2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLrbAAwQB
Xo6EAwQCuaCAAwQCud24MA0EAgACMAcDBQMqC14AMA0GCSqGSIb3DQEBCwUAA4IB
AQBFkEpAIwh/fbND6x3oDL0clSeqYmjOLSskkjbO4jaxdO043CwyrUMdewl6IvuE
TSAQN5WmVMJRQqNHlfT9eQPwaXlUr0TR34fdonUG7PPR3hcjQmJz5XXhml52JrfR
aIc9dhUP/iArw8ruruIJY9SIYyfsco39yV9lfg4SKJ7Z8mGUumWBlyCXSFcG0rCI
BXFYkD6GHb97iXj3ra/1AJktuLHy+589Goy7ZTWjMIXWUYG0wG8rgR0yh+b97+p0
xvrXGUAV6JUkDJKrk6LuDgFXOycKAIAQLJy5oNI5iIhpW2RRPuVIpcSgiHklJgDM
3JBFqkuccK3XvKthLB1sG32K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org