Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/_9Kl4FpXtUrq-rTj3ChXr-lLGGE.roa
File: _9Kl4FpXtUrq-rTj3ChXr-lLGGE.roa (raw, json)
Hash identifier: 1qKXwf3lp6ch33Hir7XDvLF9AAEGioC2AgKYVLrVtmQ=
Subject key identifier: FF:D2:A5:E0:5A:57:B5:4A:EA:FA:B4:E3:DC:28:57:AF:E9:4B:18:61
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 0185728C6E9EF325FE29DB15CC0315F926C2
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/_9Kl4FpXtUrq-rTj3ChXr-lLGGE.roa
Signing time: Mon 02 Jan 2023 12:54:44 +0000
ROA not before: Mon 02 Jan 2023 12:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198335
IP address blocks: 185.194.187.0/24 maxlen: 24
176.241.248.0/21 maxlen: 24
185.194.184.0/22 maxlen: 22
185.194.186.0/24 maxlen: 24
2a00:5a40::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:6e:9e:f3:25:fe:29:db:15:cc:03:15:f9:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 2 12:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd2a5e05a57b54aeafab4e3dc2857afe94b1861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:23:c4:55:e0:87:e6:b5:83:73:da:47:d9:
16:84:5a:2a:80:a2:ff:7d:03:03:b6:e7:e6:f1:ef:
f8:14:a9:5d:14:40:26:84:e3:b2:ee:34:d1:8d:1e:
f4:07:68:25:de:0c:ae:9f:85:6e:7d:05:de:ef:d7:
9c:5f:ff:59:7f:14:aa:0a:4f:30:29:a7:18:31:17:
fb:6d:30:ec:8a:c6:15:a5:af:b2:0b:7a:b3:74:74:
e1:14:ef:30:16:13:b2:e4:ee:a9:5c:16:4b:79:df:
76:71:94:73:cd:68:7e:30:04:5b:1c:38:cb:50:b0:
86:f5:59:4a:77:43:9f:51:95:cf:55:d0:99:43:a1:
66:90:9b:28:6f:b7:5c:98:f6:70:f2:46:3e:26:10:
ae:03:a6:2c:ee:7a:fc:19:40:c6:cf:80:05:71:3e:
a3:60:ed:b0:97:24:83:d3:20:14:d3:57:19:b0:07:
23:3c:3a:71:2b:bb:13:d8:58:db:68:83:1a:6a:5e:
7f:3b:d6:52:8a:e7:de:d0:fc:ed:b7:65:cb:56:65:
99:10:4f:20:0a:81:bf:d0:0d:eb:df:12:35:cf:9a:
c0:6a:72:0b:af:af:91:a3:50:70:4e:09:69:ca:e2:
5d:cc:e8:31:34:5c:d0:b3:35:f0:d9:2b:8b:12:2d:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:A5:E0:5A:57:B5:4A:EA:FA:B4:E3:DC:28:57:AF:E9:4B:18:61
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/_9Kl4FpXtUrq-rTj3ChXr-lLGGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.248.0/21
185.194.184.0/22
IPv6:
2a00:5a40::/32
Signature Algorithm: sha256WithRSAEncryption
c0:78:48:c4:4a:79:cc:16:ce:86:43:da:e7:c9:36:4b:68:d6:
e5:88:fa:98:01:84:2f:a6:b6:af:2b:6d:e3:c2:ca:cc:98:28:
03:9c:e4:26:14:97:71:94:f2:a7:59:4c:90:d3:8e:21:eb:c2:
2c:e4:25:01:11:fd:f7:7a:f9:8c:09:76:5b:b2:f6:62:72:11:
ba:75:02:de:1d:bf:75:64:03:ad:ec:67:7f:3d:9f:d6:05:b2:
ad:cc:5c:af:76:ba:a4:c0:02:08:87:f3:a3:d9:09:83:8f:99:
26:3e:ef:cc:76:c8:4d:f2:35:71:e3:f3:e4:2b:30:bd:7a:49:
91:80:c3:64:87:e4:2f:bc:30:da:5f:f9:a1:93:f0:b8:50:0a:
45:ba:51:57:59:eb:c9:bc:29:82:26:ac:7d:96:8c:1f:60:a4:
29:9d:cd:54:c4:ba:da:40:58:4b:22:1f:a3:ea:57:9c:b0:76:
8e:1f:2a:f0:06:0d:03:64:0f:b4:95:06:66:56:a3:40:4d:95:
66:10:ac:e8:6d:a9:96:45:9c:24:17:8c:25:77:40:c9:8c:58:
c0:e9:87:1d:ef:14:c6:73:01:e2:68:9e:bc:07:77:98:a7:99:
f6:cf:62:34:88:94:93:75:98:42:4a:fa:34:07:5a:16:2a:50:
37:fb:88:9e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVyjG6e8yX+KdsVzAMV+SbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjMwMTAyMTI1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmQyYTVlMDVhNTdiNTRhZWFmYWI0ZTNkYzI4NTdhZmU5NGIxODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5UjxFXgh+a1g3PaR9kWhFoqgKL/
fQMDtufm8e/4FKldFEAmhOOy7jTRjR70B2gl3gyun4VufQXe79ecX/9ZfxSqCk8w
KacYMRf7bTDsisYVpa+yC3qzdHThFO8wFhOy5O6pXBZLed92cZRzzWh+MARbHDjL
ULCG9VlKd0OfUZXPVdCZQ6FmkJsob7dcmPZw8kY+JhCuA6Ys7nr8GUDGz4AFcT6j
YO2wlySD0yAU01cZsAcjPDpxK7sT2FjbaIMaal5/O9ZSiufe0Pztt2XLVmWZEE8g
CoG/0A3r3xI1z5rAanILr6+Ro1BwTglpyuJdzOgxNFzQszXw2SuLEi2yXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFP/SpeBaV7VK6vq049woV6/pSxhhMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvXzlLbDRGcFh0VXJxLXJUajNDaFhyLWxMR0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsPH4AwQC
ucK4MA0EAgACMAcDBQAqAFpAMA0GCSqGSIb3DQEBCwUAA4IBAQDAeEjESnnMFs6G
Q9rnyTZLaNbliPqYAYQvpravK23jwsrMmCgDnOQmFJdxlPKnWUyQ044h68Is5CUB
Ef33evmMCXZbsvZichG6dQLeHb91ZAOt7Gd/PZ/WBbKtzFyvdrqkwAIIh/Oj2QmD
j5kmPu/MdshN8jVx4/PkKzC9ekmRgMNkh+QvvDDaX/mhk/C4UApFulFXWevJvCmC
Jqx9lowfYKQpnc1UxLraQFhLIh+j6lecsHaOHyrwBg0DZA+0lQZmVqNATZVmEKzo
bamWRZwkF4wld0DJjFjA6Ycd7xTGcwHiaJ68B3eYp5n2z2I0iJSTdZhCSvo0B1oW
KlA3+4ie
-----END CERTIFICATE-----
Generated at Tue Dec 12 09:09:56 2023 by rpki-client on console-fra.rpki-client.org