Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/1s4pAtADi_ZsdMGww-wJK45A3nk.roa
File: 1s4pAtADi_ZsdMGww-wJK45A3nk.roa (raw, json)
Hash identifier: NQfOjkY9KEwUJJGzSxZ0+wYOuHj8YrSFHfavvtwYkoI=
Subject key identifier: D6:CE:29:02:D0:03:8B:F6:6C:74:C1:B0:C3:EC:09:2B:8E:40:DE:79
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 01856F5DE3F04D98516B7DF7D154FF27828E
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/1s4pAtADi_ZsdMGww-wJK45A3nk.roa
Signing time: Sun 01 Jan 2023 22:05:02 +0000
ROA not before: Sun 01 Jan 2023 22:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59909
IP address blocks: 185.67.111.0/24 maxlen: 24
185.67.110.0/24 maxlen: 24
185.67.109.0/24 maxlen: 24
185.67.108.0/24 maxlen: 24
185.67.108.0/22 maxlen: 24
2a05:e40:1000::/38 maxlen: 38
2a05:e40:2000::/38 maxlen: 38
2a05:e40::/29 maxlen: 38
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e3:f0:4d:98:51:6b:7d:f7:d1:54:ff:27:82:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jan 1 22:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ce2902d0038bf66c74c1b0c3ec092b8e40de79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:a7:e1:da:c3:79:10:48:9a:fb:ca:7f:dc:
44:63:32:e6:7f:35:43:20:09:c7:c5:88:a7:fe:5e:
08:b3:78:46:23:81:30:5b:01:aa:59:18:25:6b:e1:
d8:a0:34:3f:f6:9a:22:59:79:95:f8:1d:a9:3e:c1:
91:f2:c5:04:dd:2d:99:e7:d8:22:31:6c:0b:4c:07:
12:1b:d7:5e:b0:3a:6b:08:57:9c:c5:99:4d:8c:73:
25:36:59:9d:12:68:a8:8a:19:78:24:c5:73:50:2d:
07:48:23:00:8c:f0:dd:19:98:bd:30:3d:48:b6:a1:
e9:79:73:a7:84:8c:aa:99:25:e0:5f:7e:82:e0:81:
22:6b:9c:4e:2b:e1:da:f7:96:12:19:7b:a5:a5:72:
d6:9b:73:ee:fe:f7:61:b1:f9:db:e7:49:f7:93:7e:
ee:3a:cb:e0:e9:15:9e:52:e3:79:d8:0c:36:61:aa:
ff:97:ff:33:da:14:db:60:ad:81:5d:79:4c:ca:b5:
bc:b2:e4:98:2c:6f:6a:e5:46:ff:b2:eb:38:8f:31:
38:2f:45:8b:34:2b:30:3f:ca:28:8e:0b:b0:ea:48:
c0:70:a7:c6:72:a0:01:58:4d:bd:11:51:20:1a:3d:
9e:7e:d8:da:b6:f4:d4:10:1c:df:71:53:ac:f0:b2:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:29:02:D0:03:8B:F6:6C:74:C1:B0:C3:EC:09:2B:8E:40:DE:79
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/1s4pAtADi_ZsdMGww-wJK45A3nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.108.0/22
IPv6:
2a05:e40::/29
Signature Algorithm: sha256WithRSAEncryption
63:16:11:a0:02:80:e9:09:5e:e9:d1:f3:f3:d3:61:e8:bf:a4:
28:33:af:2f:80:ca:30:28:42:f4:ee:6c:a0:04:2b:9e:2b:43:
c8:34:a2:db:dc:5c:5c:5f:af:e7:21:d7:36:6a:69:91:00:f8:
b6:be:ab:1e:f0:e8:de:f0:cf:1e:d4:22:6d:cf:fe:b3:93:92:
a8:91:3a:eb:23:bf:31:7b:2b:51:fd:7a:40:b9:19:c6:ae:af:
be:50:d1:61:a1:4d:b6:4d:15:98:24:8d:a5:5d:d3:a8:69:2a:
3d:a9:76:02:39:33:41:d7:e5:98:b4:b1:f4:91:fb:b6:fd:4c:
d6:37:da:0b:4e:29:d1:4a:15:ae:47:95:c2:ac:87:47:5b:da:
3b:bd:eb:09:c7:0c:1f:87:7c:fa:5a:6c:73:5e:8e:74:92:44:
7f:44:18:b6:5f:46:fd:98:03:98:d1:31:5d:f1:92:28:e2:a6:
c8:23:88:ba:29:70:fe:25:87:9a:cc:03:af:fb:e9:66:7b:81:
de:15:a2:ad:7b:c9:88:8a:7d:8c:33:1a:eb:33:be:38:4c:92:
c9:0b:78:35:91:bf:15:0b:99:6c:23:7d:f9:46:d7:17:64:bf:
1e:79:19:93:66:ab:b0:64:0b:62:de:dc:a5:6c:58:14:e7:37:
02:7c:bc:1c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvXePwTZhRa3330VT/J4KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2
ODYzYjcwHhcNMjMwMTAxMjIwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmNlMjkwMmQwMDM4YmY2NmM3NGMxYjBjM2VjMDkyYjhlNDBkZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqyn4drDeRBImvvKf9xEYzLmfzVD
IAnHxYin/l4Is3hGI4EwWwGqWRgla+HYoDQ/9poiWXmV+B2pPsGR8sUE3S2Z59gi
MWwLTAcSG9desDprCFecxZlNjHMlNlmdEmioihl4JMVzUC0HSCMAjPDdGZi9MD1I
tqHpeXOnhIyqmSXgX36C4IEia5xOK+Ha95YSGXulpXLWm3Pu/vdhsfnb50n3k37u
Osvg6RWeUuN52Aw2Yar/l/8z2hTbYK2BXXlMyrW8suSYLG9q5Ub/sus4jzE4L0WL
NCswP8oojguw6kjAcKfGcqABWE29EVEgGj2eftjatvTUEBzfcVOs8LJAowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNbOKQLQA4v2bHTBsMPsCSuOQN55MB8GA1UdIwQY
MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt
OWVhOWNhMTc0MmRiLzEvMXM0cEF0QURpX1pzZE1Hd3ctd0pLNDVBM25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi
LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUNsMA0E
AgACMAcDBQMqBQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQBjFhGgAoDpCV7p0fPz02Ho
v6QoM68vgMowKEL07mygBCueK0PINKLb3FxcX6/nIdc2ammRAPi2vqse8Oje8M8e
1CJtz/6zk5KokTrrI78xeytR/XpAuRnGrq++UNFhoU22TRWYJI2lXdOoaSo9qXYC
OTNB1+WYtLH0kfu2/UzWN9oLTinRShWuR5XCrIdHW9o7vesJxwwfh3z6WmxzXo50
kkR/RBi2X0b9mAOY0TFd8ZIo4qbII4i6KXD+JYeazAOv++lme4HeFaKte8mIin2M
MxrrM744TJLJC3g1kb8VC5lsI335RtcXZL8eeRmTZquwZAti3tylbFgU5zcCfLwc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:14 2024 by rpki-client on console-fra.rpki-client.org