Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIFfYdZ1JSMZ7_e746VbfCRlSro.roa
File: bIFfYdZ1JSMZ7_e746VbfCRlSro.roa (raw, json)
Hash identifier: 9eLgeq+aWs+9KVl0dhxByg3natXMKy/NO5F7IVglUtM=
Subject key identifier: 6C:81:5F:61:D6:75:25:23:19:EF:F7:BB:E3:A5:5B:7C:24:65:4A:BA
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0186A6D4804CC508556F2B14B4DB8574A910
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIFfYdZ1JSMZ7_e746VbfCRlSro.roa
Signing time: Fri 03 Mar 2023 09:36:29 +0000
ROA not before: Fri 03 Mar 2023 09:36:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39486
IP address blocks: 193.161.128.0/22 maxlen: 24
194.104.104.0/22 maxlen: 24
45.134.79.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Mar 2023 10:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:d4:80:4c:c5:08:55:6f:2b:14:b4:db:85:74:a9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 3 09:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c815f61d675252319eff7bbe3a55b7c24654aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:b2:3e:92:63:b0:53:d6:e5:83:f3:ed:3e:
ae:c0:e9:a3:91:98:1a:bb:c5:5c:ca:5d:95:bf:1c:
c1:05:26:4c:47:ed:dc:1b:90:63:1c:69:39:dd:14:
d7:4d:61:f2:b4:b1:1d:68:a9:66:33:04:4e:32:29:
d2:43:6d:b6:75:80:c2:7d:87:59:54:cc:cc:3c:b8:
e4:c7:1f:40:1a:d9:53:08:f7:cd:20:1f:2d:fd:48:
a5:92:8a:35:8c:f8:cf:90:3c:29:ac:66:24:14:ec:
e3:78:7f:40:3f:85:68:b3:2a:b6:9e:09:82:e4:f4:
c1:ad:f0:74:05:58:fb:17:90:86:be:b6:af:fd:74:
2a:05:52:0d:22:b3:22:86:b0:1a:f2:d9:9f:69:38:
ce:1b:6c:66:2b:db:6b:c1:09:ef:c6:89:21:db:bf:
f4:0a:df:ca:6c:ec:13:47:bb:2a:97:25:33:96:41:
14:e3:90:03:cd:2e:cf:54:a4:42:4c:a2:21:c6:d8:
fe:0b:9c:9f:a1:9b:85:c4:df:f2:be:6f:8b:bd:d6:
33:c1:fd:16:47:63:f3:ae:94:6e:99:ca:59:71:0c:
9e:06:b8:0b:e2:48:85:31:3c:26:f7:81:bc:c0:3e:
58:0e:24:1c:fb:b1:a1:6a:a7:d0:8f:f9:6a:7a:4c:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:5F:61:D6:75:25:23:19:EF:F7:BB:E3:A5:5B:7C:24:65:4A:BA
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIFfYdZ1JSMZ7_e746VbfCRlSro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.79.0/24
185.184.228.0/24
193.161.128.0/22
194.104.104.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b8:16:cb:7c:6d:0e:af:68:ef:f6:eb:a2:ff:a0:c7:99:76:
ca:7a:f8:88:2e:e2:80:98:49:0e:3b:b0:c0:7c:f4:d0:ae:ce:
8d:6d:f7:da:af:10:02:3e:45:80:1d:cc:40:d8:d2:d7:0d:f3:
db:88:7f:0d:25:88:22:68:36:bc:f9:ce:fa:37:12:89:a0:80:
8c:9b:ec:18:70:2e:a4:9d:04:6f:b6:9a:89:68:14:c9:0b:0e:
47:6c:7c:a3:ce:0b:9e:dd:86:ce:ad:fa:e9:e6:1a:28:7b:5c:
b5:cf:dc:20:98:d4:ba:86:31:65:f3:b2:86:f6:73:38:36:9f:
6e:f9:cf:e3:3d:e4:8e:e6:9d:e8:6c:2b:87:27:7c:fe:e3:65:
88:5c:96:34:46:4d:34:9e:6b:03:d0:f9:c8:e5:54:0d:32:9c:
c3:1b:03:4a:b5:d4:28:db:cd:12:33:71:ef:05:64:cf:f5:84:
d5:21:e1:da:14:19:6e:88:0d:32:94:2f:25:4e:38:88:3a:91:
ac:b9:e9:24:c9:03:e1:ba:df:cf:14:cb:6b:b8:31:4b:17:0d:
26:ca:42:f9:e7:68:e8:75:55:b9:1e:ae:b8:07:03:95:88:98:
67:20:f2:7e:13:91:9a:94:ce:2f:80:f5:2c:61:a6:49:23:ab:
fc:1c:e3:1b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYam1IBMxQhVbysUtNuFdKkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwMzAzMDkzNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzgxNWY2MWQ2NzUyNTIzMTllZmY3YmJlM2E1NWI3YzI0NjU0YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc2yPpJjsFPW5YPz7T6uwOmjkZga
u8Vcyl2VvxzBBSZMR+3cG5BjHGk53RTXTWHytLEdaKlmMwROMinSQ222dYDCfYdZ
VMzMPLjkxx9AGtlTCPfNIB8t/Uilkoo1jPjPkDwprGYkFOzjeH9AP4Vosyq2ngmC
5PTBrfB0BVj7F5CGvrav/XQqBVINIrMihrAa8tmfaTjOG2xmK9trwQnvxokh27/0
Ct/KbOwTR7sqlyUzlkEU45ADzS7PVKRCTKIhxtj+C5yfoZuFxN/yvm+LvdYzwf0W
R2PzrpRumcpZcQyeBrgL4kiFMTwm94G8wD5YDiQc+7GhaqfQj/lqekxy+QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGyBX2HWdSUjGe/3u+OlW3wkZUq6MB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvYklGZllkWjFKU01aN19lNzQ2VmJmQ1JsU3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYZPAwQA
ubjkAwQCwaGAAwQCwmhoMA0GCSqGSIb3DQEBCwUAA4IBAQCQuBbLfG0Or2jv9uui
/6DHmXbKeviILuKAmEkOO7DAfPTQrs6NbffarxACPkWAHcxA2NLXDfPbiH8NJYgi
aDa8+c76NxKJoICMm+wYcC6knQRvtpqJaBTJCw5HbHyjzgue3YbOrfrp5hooe1y1
z9wgmNS6hjFl87KG9nM4Np9u+c/jPeSO5p3obCuHJ3z+42WIXJY0Rk00nmsD0PnI
5VQNMpzDGwNKtdQo280SM3HvBWTP9YTVIeHaFBluiA0ylC8lTjiIOpGsuekkyQPh
ut/PFMtruDFLFw0mykL552jodVW5Hq64BwOViJhnIPJ+E5GalM4vgPUsYaZJI6v8
HOMb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org