Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/E6z5s6IdwE9_Rosu6pi9lKzOC2E.roa
File: E6z5s6IdwE9_Rosu6pi9lKzOC2E.roa (raw, json)
Hash identifier: r4RXz79cI9mdGyO4S4sVk1aQWxBuNGbGLuHEsl9IaEo=
Subject key identifier: 13:AC:F9:B3:A2:1D:C0:4F:7F:46:8B:2E:EA:98:BD:94:AC:CE:0B:61
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 018C1F98E01F160F7221E284B285FD9CF997
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/E6z5s6IdwE9_Rosu6pi9lKzOC2E.roa
Signing time: Thu 30 Nov 2023 09:39:21 +0000
ROA not before: Thu 30 Nov 2023 09:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204393
IP address blocks: 185.86.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:98:e0:1f:16:0f:72:21:e2:84:b2:85:fd:9c:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Nov 30 09:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13acf9b3a21dc04f7f468b2eea98bd94acce0b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:f2:4c:07:85:8e:ac:7f:16:29:a4:1d:61:
7e:15:04:96:30:fb:e4:38:d5:b5:e4:ea:ca:6e:08:
ef:c0:39:a6:cf:f4:76:36:16:84:86:d2:6a:ac:f1:
97:7e:2c:11:82:67:21:e4:fd:cf:79:71:42:78:3a:
aa:06:01:51:ed:25:01:de:5c:f8:9c:30:73:cd:d7:
bc:72:3f:0b:1d:3c:6d:8c:4d:84:31:18:6e:b0:c8:
8d:00:13:86:b1:94:e3:e5:88:43:bd:5e:44:48:f3:
7f:a8:e7:c4:36:06:44:21:01:60:df:31:1d:bf:cd:
a2:b7:4e:db:91:75:aa:c9:6d:5e:5b:91:92:e3:8d:
a7:d0:82:12:6d:bd:ef:41:e9:c2:b9:e1:1b:d0:3f:
87:aa:42:b9:c5:da:16:50:42:53:62:b1:66:16:a1:
4c:bf:1a:7f:d1:89:79:b5:85:8d:af:ec:70:1c:be:
8f:9b:d7:d1:5c:e9:ae:d1:4f:c8:cd:e6:c0:06:44:
e7:4c:05:b3:ff:66:3a:67:78:40:80:ca:d0:28:ee:
84:48:e7:b2:11:40:40:39:b0:7e:96:d9:b9:0c:c3:
4d:0c:5e:a1:d5:d7:37:66:d4:52:b2:5a:eb:1e:b1:
d5:44:f4:9e:62:9f:b8:97:31:56:de:d4:ba:32:11:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:F9:B3:A2:1D:C0:4F:7F:46:8B:2E:EA:98:BD:94:AC:CE:0B:61
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/E6z5s6IdwE9_Rosu6pi9lKzOC2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f0:cf:eb:65:3d:65:53:04:28:58:87:72:70:ef:9b:92:64:
56:0d:bc:19:d8:9c:66:5e:74:9b:0f:00:a4:64:e0:aa:70:73:
d6:02:32:36:0c:c7:17:d4:5a:43:62:09:20:9a:6f:56:c0:cb:
55:65:f3:4c:89:12:90:e6:15:77:90:78:7b:76:9d:d5:9f:03:
6e:8c:f3:dd:21:b3:13:da:be:45:b1:d1:b6:94:c6:bc:30:67:
06:6d:c7:12:f5:a1:9a:c3:02:ad:3d:44:a0:16:54:2b:f1:e7:
47:e4:ae:a0:dc:9d:d6:a1:37:4c:79:10:de:39:cb:7f:b3:aa:
e1:30:53:19:a9:64:9c:73:3a:28:42:ea:f7:c0:95:3e:21:e9:
d3:66:88:87:e5:18:39:49:61:13:5e:f1:6e:df:9f:49:32:85:
41:f5:54:77:d8:e4:34:f8:f3:39:a9:82:2b:b5:67:df:c1:c6:
28:0b:be:31:2e:8e:44:e8:bc:88:f4:38:8d:8d:8e:6b:1d:f7:
a3:1b:d5:93:91:9a:73:08:56:7a:46:5e:cf:48:81:0b:b1:ee:
7b:50:81:2a:32:26:cc:de:80:42:a9:30:73:f3:1b:9b:22:cc:
f6:f8:04:1a:03:68:d6:d4:12:0a:6d:23:a7:e7:ea:88:33:43:
82:97:d6:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwfmOAfFg9yIeKEsoX9nPmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4
NGU1NWQwHhcNMjMxMTMwMDkzOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FjZjliM2EyMWRjMDRmN2Y0NjhiMmVlYTk4YmQ5NGFjY2UwYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XyTAeFjqx/FimkHWF+FQSWMPvk
ONW15OrKbgjvwDmmz/R2NhaEhtJqrPGXfiwRgmch5P3PeXFCeDqqBgFR7SUB3lz4
nDBzzde8cj8LHTxtjE2EMRhusMiNABOGsZTj5YhDvV5ESPN/qOfENgZEIQFg3zEd
v82it07bkXWqyW1eW5GS442n0IISbb3vQenCueEb0D+HqkK5xdoWUEJTYrFmFqFM
vxp/0Yl5tYWNr+xwHL6Pm9fRXOmu0U/IzebABkTnTAWz/2Y6Z3hAgMrQKO6ESOey
EUBAObB+ltm5DMNNDF6h1dc3ZtRSslrrHrHVRPSeYp+4lzFW3tS6MhFSXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOs+bOiHcBPf0aLLuqYvZSszgthMB8GA1UdIwQY
MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt
NTAwMTUzOWQ3MTg1LzEvRTZ6NXM2SWR3RTlfUm9zdTZwaTlsS3pPQzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1
LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVa2MA0G
CSqGSIb3DQEBCwUAA4IBAQCc8M/rZT1lUwQoWIdycO+bkmRWDbwZ2JxmXnSbDwCk
ZOCqcHPWAjI2DMcX1FpDYgkgmm9WwMtVZfNMiRKQ5hV3kHh7dp3VnwNujPPdIbMT
2r5FsdG2lMa8MGcGbccS9aGawwKtPUSgFlQr8edH5K6g3J3WoTdMeRDeOct/s6rh
MFMZqWScczooQur3wJU+IenTZoiH5Rg5SWETXvFu359JMoVB9VR32OQ0+PM5qYIr
tWffwcYoC74xLo5E6LyI9DiNjY5rHfejG9WTkZpzCFZ6Rl7PSIELse57UIEqMibM
3oBCqTBz8xubIsz2+AQaA2jW1BIKbSOn5+qIM0OCl9Z/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org