Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/b-O12ghB-xg6xZZ5AQoSU9ji7hE.roa
File: b-O12ghB-xg6xZZ5AQoSU9ji7hE.roa (raw, json)
Hash identifier: VGU/qOLQySSnGK0ly0uAlVQBCMLMcPMYRkjTnF/+uMU=
Subject key identifier: 6F:E3:B5:DA:08:41:FB:18:3A:C5:96:79:01:0A:12:53:D8:E2:EE:11
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 018572BA89EDBD624A0C1421F9EADA1EA3B3
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/b-O12ghB-xg6xZZ5AQoSU9ji7hE.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57376
IP address blocks: 185.232.0.0/22 maxlen: 24
149.232.252.0/22 maxlen: 24
2a0c:9700::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:89:ed:bd:62:4a:0c:14:21:f9:ea:da:1e:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe3b5da0841fb183ac59679010a1253d8e2ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:7b:37:16:ee:80:2d:42:26:2a:34:88:69:
1c:bd:c8:ba:b5:9f:d0:a8:19:d4:9e:4d:7e:9d:6b:
11:c3:17:95:0f:38:2d:9c:65:f0:8e:e6:2b:4b:e8:
45:12:bf:ee:55:f2:aa:83:3d:dd:38:ef:73:64:9e:
84:43:67:a9:cf:94:15:71:10:67:e1:9f:f6:b7:f8:
25:7d:29:96:72:8e:d7:6b:0a:18:45:84:9c:64:06:
a5:eb:a8:71:c8:5e:07:35:71:0b:85:cc:96:b1:47:
7d:a0:0c:2f:aa:37:60:4f:68:a0:ff:4e:c2:e6:90:
e4:b2:cc:5a:06:ca:06:75:73:2a:97:96:c6:eb:28:
f3:7c:e1:21:38:65:60:82:3a:16:28:a3:3b:5d:9d:
8e:0f:0e:3c:e3:75:c7:28:26:6b:1e:dc:dd:30:88:
d2:06:11:39:96:f5:f6:a0:9a:3e:0e:1d:2e:93:b5:
49:82:d9:88:57:1f:64:d2:1f:bb:60:ae:bb:cc:f0:
20:dc:a3:14:97:f3:35:8c:79:a2:65:12:dc:69:57:
96:a3:06:fd:b9:f8:8d:c6:b0:2c:f5:27:7a:71:70:
3e:82:3c:05:b1:b9:72:12:d4:5c:08:0c:32:76:1a:
ca:74:aa:1f:5a:df:15:3f:7a:d2:be:07:70:b0:18:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:B5:DA:08:41:FB:18:3A:C5:96:79:01:0A:12:53:D8:E2:EE:11
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/b-O12ghB-xg6xZZ5AQoSU9ji7hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.252.0/22
185.232.0.0/22
IPv6:
2a0c:9700::/29
Signature Algorithm: sha256WithRSAEncryption
b7:46:9b:29:ef:f4:9c:7d:34:12:99:62:0c:02:61:90:ab:9a:
f4:21:66:66:c4:2f:9a:3d:0d:8b:4d:44:45:31:1a:b2:fc:7f:
45:fa:28:7f:a1:71:41:1c:3b:81:be:48:17:b2:97:7c:b8:60:
3e:1b:df:56:41:dc:1a:72:c7:be:72:7e:96:ca:60:0c:a9:8a:
83:60:86:87:be:51:21:03:46:48:95:bb:96:ac:a3:67:d4:15:
7b:fd:6b:f9:da:8f:2b:6e:8a:36:9e:b7:f6:6e:b0:27:d2:cb:
49:63:3e:b5:04:2c:78:58:6e:87:ef:f6:94:fa:33:19:26:13:
b9:af:0a:84:a6:08:6e:ea:dd:a4:8b:51:ca:60:41:e0:24:6e:
cd:32:1c:73:b0:6e:93:85:d1:6d:e4:1d:ef:af:a7:ca:69:21:
59:e5:21:c2:53:d6:e2:16:55:8b:d2:bc:97:94:23:9d:19:bc:
26:5a:bb:5d:89:a1:12:67:d8:64:41:ea:7a:0e:61:0f:fb:c4:
9d:11:9e:d1:46:72:61:2e:e2:a8:49:59:c0:9f:3c:7f:53:c6:
71:c5:14:78:50:34:79:dd:3b:ad:b9:36:ba:1c:a4:9c:69:33:
4b:80:d7:c6:74:e0:33:53:46:a0:01:8c:b7:a6:87:e0:c1:46:
40:57:b0:4e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVyuontvWJKDBQh+eraHqOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM0ODdiNmI2YmRkYTIyMTc5MDcyZDkyYThmMDFlOGU3
MzY2MzQwHhcNMjMwMTAyMTM0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmUzYjVkYTA4NDFmYjE4M2FjNTk2NzkwMTBhMTI1M2Q4ZTJlZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZV7NxbugC1CJio0iGkcvci6tZ/Q
qBnUnk1+nWsRwxeVDzgtnGXwjuYrS+hFEr/uVfKqgz3dOO9zZJ6EQ2epz5QVcRBn
4Z/2t/glfSmWco7XawoYRYScZAal66hxyF4HNXELhcyWsUd9oAwvqjdgT2ig/07C
5pDkssxaBsoGdXMql5bG6yjzfOEhOGVggjoWKKM7XZ2ODw4843XHKCZrHtzdMIjS
BhE5lvX2oJo+Dh0uk7VJgtmIVx9k0h+7YK67zPAg3KMUl/M1jHmiZRLcaVeWowb9
ufiNxrAs9Sd6cXA+gjwFsblyEtRcCAwydhrKdKofWt8VP3rSvgdwsBh6mwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFG/jtdoIQfsYOsWWeQEKElPY4u4RMB8GA1UdIwQY
MBaAFO4sSHtra92iIXkHLZKo8B6Oc2Y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmIt
NGI5ODNmMWI4NGEyLzEvYi1PMTJnaEIteGc2eFpaNUFRb1NVOWppN2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmItNGI5ODNmMWI4NGEy
LzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQClej8AwQC
uegAMA0EAgACMAcDBQMqDJcAMA0GCSqGSIb3DQEBCwUAA4IBAQC3Rpsp7/ScfTQS
mWIMAmGQq5r0IWZmxC+aPQ2LTURFMRqy/H9F+ih/oXFBHDuBvkgXspd8uGA+G99W
Qdwacse+cn6WymAMqYqDYIaHvlEhA0ZIlbuWrKNn1BV7/Wv52o8rboo2nrf2brAn
0stJYz61BCx4WG6H7/aU+jMZJhO5rwqEpghu6t2ki1HKYEHgJG7NMhxzsG6ThdFt
5B3vr6fKaSFZ5SHCU9biFlWL0ryXlCOdGbwmWrtdiaESZ9hkQep6DmEP+8SdEZ7R
RnJhLuKoSVnAnzx/U8ZxxRR4UDR53TutuTa6HKScaTNLgNfGdOAzU0agAYy3pofg
wUZAV7BO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:45 2024 by rpki-client on console-ams.rpki-client.org