Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/oY98pQUgvFC_9uQ8sRktT8Mm6V8.roa
File: oY98pQUgvFC_9uQ8sRktT8Mm6V8.roa (raw, json)
Hash identifier: vEq+KyWpwe/AwTGh5f1EG3tLZH5PH5p3eH2nbuY19LY=
Subject key identifier: A1:8F:7C:A5:05:20:BC:50:BF:F6:E4:3C:B1:19:2D:4F:C3:26:E9:5F
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0185712787FE5D2ABCA8932B7ECF03523D82
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/oY98pQUgvFC_9uQ8sRktT8Mm6V8.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1820
IP address blocks: 185.170.192.0/22 maxlen: 32
195.66.93.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
193.16.47.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Jan 2023 08:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:87:fe:5d:2a:bc:a8:93:2b:7e:cf:03:52:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a18f7ca50520bc50bff6e43cb1192d4fc326e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:34:23:dc:4c:08:00:8a:f3:0a:b8:61:cf:
fc:38:db:00:c0:d2:89:f7:29:55:9f:61:19:c3:27:
64:28:0d:9e:3c:d9:8a:0c:fe:81:8d:3e:87:d1:ce:
d5:77:a0:db:77:54:66:fe:16:12:3c:ee:87:16:05:
33:1f:c5:05:73:e0:03:ff:5f:f9:a8:9d:1b:db:1c:
26:40:c8:bf:2d:d3:a5:8a:f1:47:fe:b2:a6:fe:e0:
1c:71:9c:da:b9:84:90:80:6d:43:e5:5e:df:cc:4f:
0b:e3:73:63:c1:53:3c:4e:e3:8c:af:2e:f2:35:58:
ed:e5:ea:30:bd:56:2c:bf:63:19:9f:de:01:ab:bb:
5a:88:c8:8b:67:d2:dc:d2:b5:75:92:fd:20:ab:0e:
e3:92:fc:bb:5a:af:02:97:da:89:b5:e2:2e:08:3d:
be:20:ad:59:a4:35:fa:d9:80:33:ad:bf:7e:ab:98:
c7:fb:f6:91:f7:32:75:de:07:d8:a3:36:a2:cb:9c:
0d:cb:fa:32:08:68:27:05:3a:f8:4c:e0:87:2d:6a:
fc:84:0b:f5:65:9f:70:60:d2:d5:eb:fb:52:73:71:
47:94:0d:aa:5a:83:dd:3c:8e:19:7d:5a:81:b7:74:
50:48:09:32:92:ed:70:f7:e8:7e:3d:a6:7a:36:6a:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8F:7C:A5:05:20:BC:50:BF:F6:E4:3C:B1:19:2D:4F:C3:26:E9:5F
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/oY98pQUgvFC_9uQ8sRktT8Mm6V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.1.0/24
185.45.244.0/22
185.170.192.0/22
193.16.47.0/24
195.66.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ea:10:6a:b4:f2:f5:65:6b:e0:4a:9e:0d:7a:28:1a:eb:b4:
a5:cf:d7:f9:51:f9:66:2c:9d:27:a0:49:dc:bc:1d:f0:e2:5e:
b8:d8:82:ce:8a:ae:7d:f4:ae:bc:8d:6c:44:3c:41:57:df:cf:
86:b8:a0:7f:39:ba:38:f7:08:bb:3e:ee:1b:84:64:cc:e5:00:
30:44:0c:22:f6:12:3b:d4:ce:27:f6:6a:7b:f4:b7:c0:c2:46:
b9:99:11:38:13:7f:63:0d:23:57:ee:49:27:c4:81:d6:ae:db:
3c:f5:27:c1:18:9b:f0:0a:80:42:a8:af:ab:35:ec:cb:42:4a:
f6:b0:a0:9c:76:39:97:38:53:66:9a:ba:bc:bb:d1:2b:b6:c5:
42:1f:6f:6e:40:5d:c1:ca:fd:04:30:f0:d2:f5:0f:48:14:9f:
27:17:2c:f1:82:fd:67:a9:aa:f6:39:c4:a0:d4:12:e3:85:7d:
de:dd:bb:ab:14:11:36:8f:aa:9d:94:35:2d:db:3e:17:54:b3:
b2:be:4c:a3:9b:c5:02:2c:42:c1:29:10:23:be:68:f3:8b:a2:
b8:f7:22:f5:b5:3b:3c:d5:eb:e2:9d:e7:e4:85:b3:40:cb:8d:
8d:a8:4c:bb:91:d2:b7:f7:f0:1c:72:46:ea:a9:c5:90:04:01:
01:db:51:3b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVxJ4f+XSq8qJMrfs8DUj2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjMwMTAyMDYyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMThmN2NhNTA1MjBiYzUwYmZmNmU0M2NiMTE5MmQ0ZmMzMjZlOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHI0I9xMCACK8wq4Yc/8ONsAwNKJ
9ylVn2EZwydkKA2ePNmKDP6BjT6H0c7Vd6Dbd1Rm/hYSPO6HFgUzH8UFc+AD/1/5
qJ0b2xwmQMi/LdOlivFH/rKm/uAccZzauYSQgG1D5V7fzE8L43NjwVM8TuOMry7y
NVjt5eowvVYsv2MZn94Bq7taiMiLZ9Lc0rV1kv0gqw7jkvy7Wq8Cl9qJteIuCD2+
IK1ZpDX62YAzrb9+q5jH+/aR9zJ13gfYozaiy5wNy/oyCGgnBTr4TOCHLWr8hAv1
ZZ9wYNLV6/tSc3FHlA2qWoPdPI4ZfVqBt3RQSAkyku1w9+h+PaZ6NmraowIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKGPfKUFILxQv/bkPLEZLU/DJulfMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvb1k5OHBRVWd2RkNfOXVROHNSa3RUOE1tNlY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW+IBAwQC
uS30AwQCuarAAwQAwRAvAwQAw0JdMA0GCSqGSIb3DQEBCwUAA4IBAQAu6hBqtPL1
ZWvgSp4Neiga67Slz9f5UflmLJ0noEncvB3w4l642ILOiq599K68jWxEPEFX38+G
uKB/Obo49wi7Pu4bhGTM5QAwRAwi9hI71M4n9mp79LfAwka5mRE4E39jDSNX7kkn
xIHWrts89SfBGJvwCoBCqK+rNezLQkr2sKCcdjmXOFNmmrq8u9ErtsVCH29uQF3B
yv0EMPDS9Q9IFJ8nFyzxgv1nqar2OcSg1BLjhX3e3burFBE2j6qdlDUt2z4XVLOy
vkyjm8UCLELBKRAjvmjzi6K49yL1tTs81evinefkhbNAy42NqEy7kdK39/Acckbq
qcWQBAEB21E7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org