Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/m5OdmIbXS3Tp5oeqZSAQOPucK7g.roa
File: m5OdmIbXS3Tp5oeqZSAQOPucK7g.roa (raw, json)
Hash identifier: NsF2exuGHVMNn+sPQYpSwTZPWBW8DT+VH684i8gkTvk=
Subject key identifier: 9B:93:9D:98:86:D7:4B:74:E9:E6:87:AA:65:20:10:38:FB:9C:2B:B8
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 0189AD18493B4F8EEC31B0B4A11A11229C79
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/m5OdmIbXS3Tp5oeqZSAQOPucK7g.roa
Signing time: Mon 31 Jul 2023 17:56:37 +0000
ROA not before: Mon 31 Jul 2023 17:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 185.247.12.0/23 maxlen: 24
185.247.12.0/22 maxlen: 22
2a0d:b680::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:18:49:3b:4f:8e:ec:31:b0:b4:a1:1a:11:22:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jul 31 17:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b939d9886d74b74e9e687aa65201038fb9c2bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:09:91:e2:ec:11:82:7d:00:48:e4:96:45:
a2:08:6a:66:af:10:60:b3:15:79:d7:3c:b1:f6:2a:
a3:0e:8c:fe:da:ac:9b:05:51:e5:31:b7:dd:83:06:
1a:70:64:2a:70:c4:3e:4d:ae:a8:fa:4a:08:f0:eb:
db:45:cd:23:09:81:49:a9:81:ed:51:1f:87:38:9c:
b4:4c:d9:b6:e9:89:73:0d:40:14:8c:b6:e4:91:c8:
7c:7f:67:e5:f2:19:e8:3f:c9:33:c9:47:28:24:b7:
3c:4a:5b:8b:e4:70:8c:4f:dd:eb:9b:f7:09:d6:8b:
9d:bf:ee:f9:df:36:66:b5:51:d1:5d:d3:38:b3:0a:
d0:5d:bd:00:4d:6d:71:38:f9:e3:9e:82:ba:f7:4c:
d9:33:6b:3d:75:d4:11:45:8f:e2:6e:12:8c:c2:0d:
66:59:90:06:96:e7:96:8a:02:4b:b5:25:e4:5a:ef:
84:ad:36:bb:2f:c5:1a:b5:6f:e8:00:71:09:26:59:
e3:8e:ef:2e:a2:38:5e:73:7e:4d:32:bd:96:0e:24:
97:39:a7:47:5f:6e:1a:4c:92:b2:bc:7f:96:30:d8:
74:cf:48:5c:64:62:92:c6:67:6b:85:a3:ae:82:b5:
9e:0c:70:1f:e2:3a:87:18:43:45:db:5d:92:4d:2b:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:93:9D:98:86:D7:4B:74:E9:E6:87:AA:65:20:10:38:FB:9C:2B:B8
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/m5OdmIbXS3Tp5oeqZSAQOPucK7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.12.0/22
IPv6:
2a0d:b680::/29
Signature Algorithm: sha256WithRSAEncryption
05:62:44:6d:d6:79:46:76:16:c7:b2:fe:f3:c0:18:8f:74:ed:
0a:26:b4:6c:eb:6e:fd:f8:5a:29:2f:d8:fd:fd:b5:34:1a:fa:
5a:dc:ed:f9:21:aa:4f:73:6d:ce:f5:66:a5:8f:e5:fd:e8:47:
ec:db:5a:4b:dd:d1:24:1c:20:e9:92:8f:9d:05:77:f6:36:9d:
20:f2:c2:75:c8:9d:7b:a0:89:91:de:93:5d:24:04:d4:27:a3:
a2:ed:f0:98:61:ad:c7:34:54:c3:e2:8f:be:f5:00:e1:95:e6:
7e:42:67:ff:bc:1c:03:b6:e1:7f:aa:bf:46:e1:09:a7:ce:e1:
ac:b9:f9:8f:d9:80:14:0e:57:0d:c9:cd:2a:e5:80:a0:93:ff:
39:78:b8:6f:33:10:a1:79:ea:06:82:49:38:9c:01:02:44:97:
10:0e:47:ef:11:fc:41:08:b9:1e:cc:69:84:2a:92:e2:46:76:
1e:b1:c6:4c:f2:83:b9:ac:18:0a:ec:c8:65:65:b4:90:46:72:
ae:34:2a:f4:77:c0:3f:23:65:35:0b:6d:5e:f2:ae:1c:e3:27:
79:99:71:f9:62:a2:7b:6a:af:2f:3e:8f:e7:a4:34:02:a7:d1:
33:ac:9c:86:6c:57:27:db:dd:69:dd:d1:10:b3:ae:96:88:06:
7e:39:14:a6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYmtGEk7T47sMbC0oRoRIpx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz
OWFlZTEwHhcNMjMwNzMxMTc1NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjkzOWQ5ODg2ZDc0Yjc0ZTllNjg3YWE2NTIwMTAzOGZiOWMyYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmIJkeLsEYJ9AEjklkWiCGpmrxBg
sxV51zyx9iqjDoz+2qybBVHlMbfdgwYacGQqcMQ+Ta6o+koI8OvbRc0jCYFJqYHt
UR+HOJy0TNm26YlzDUAUjLbkkch8f2fl8hnoP8kzyUcoJLc8SluL5HCMT93rm/cJ
1oudv+753zZmtVHRXdM4swrQXb0ATW1xOPnjnoK690zZM2s9ddQRRY/ibhKMwg1m
WZAGlueWigJLtSXkWu+ErTa7L8UatW/oAHEJJlnjju8uojhec35NMr2WDiSXOadH
X24aTJKyvH+WMNh0z0hcZGKSxmdrhaOugrWeDHAf4jqHGENF212STSsS3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJuTnZiG10t06eaHqmUgEDj7nCu4MB8GA1UdIwQY
MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt
YTZmNGYwZjRmNzJkLzEvbTVPZG1JYlhTM1RwNW9lcVpTQVFPUHVjSzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk
LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufcMMA0E
AgACMAcDBQMqDbaAMA0GCSqGSIb3DQEBCwUAA4IBAQAFYkRt1nlGdhbHsv7zwBiP
dO0KJrRs6279+FopL9j9/bU0Gvpa3O35IapPc23O9Walj+X96Efs21pL3dEkHCDp
ko+dBXf2Np0g8sJ1yJ17oImR3pNdJATUJ6Oi7fCYYa3HNFTD4o++9QDhleZ+Qmf/
vBwDtuF/qr9G4QmnzuGsufmP2YAUDlcNyc0q5YCgk/85eLhvMxCheeoGgkk4nAEC
RJcQDkfvEfxBCLkezGmEKpLiRnYescZM8oO5rBgK7MhlZbSQRnKuNCr0d8A/I2U1
C21e8q4c4yd5mXH5YqJ7aq8vPo/npDQCp9EzrJyGbFcn291p3dEQs66WiAZ+ORSm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:49 2024 by rpki-client on console-ams.rpki-client.org