Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/XFKY5x9KkxgPeJssHGmUYrrS8aI.roa
File: XFKY5x9KkxgPeJssHGmUYrrS8aI.roa (raw, json)
Hash identifier: L0teqTbl59bZyuE+0lVlxWz2P7tb196Ov49eEUvmyTs=
Subject key identifier: 5C:52:98:E7:1F:4A:93:18:0F:78:9B:2C:1C:69:94:62:BA:D2:F1:A2
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 01897783B232CFE8BC8EF7DAB4FA3A816C72
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/XFKY5x9KkxgPeJssHGmUYrrS8aI.roa
Signing time: Fri 21 Jul 2023 08:14:26 +0000
ROA not before: Fri 21 Jul 2023 08:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212988
IP address blocks: 185.230.144.0/24 maxlen: 24
185.230.146.0/23 maxlen: 23
185.232.133.0/24 maxlen: 24
185.232.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 11:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:83:b2:32:cf:e8:bc:8e:f7:da:b4:fa:3a:81:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jul 21 08:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c5298e71f4a93180f789b2c1c699462bad2f1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:35:b2:ec:0a:5f:8f:1a:db:bc:cf:a1:d2:
9d:09:1a:26:90:9c:e4:28:09:13:e2:80:25:14:53:
4c:6c:40:56:15:9c:6f:12:ff:e4:00:ea:89:8b:07:
93:32:c0:15:67:5b:9a:5b:a0:ea:0f:9c:65:aa:22:
d5:8e:92:d4:84:c2:c8:7c:12:5a:68:a4:0f:6d:91:
7b:82:83:dd:70:94:2c:f2:b8:3f:23:b4:ae:19:9c:
c6:b1:9e:94:e6:8c:13:b1:6f:4a:6b:96:d7:43:9d:
0f:b5:9a:e4:0b:c1:1c:05:f5:84:16:c7:d5:e3:57:
bf:b9:2b:3d:39:f1:f6:0a:67:ab:d0:e0:59:bf:08:
7c:3d:eb:3c:49:df:34:59:c5:87:c6:a9:d9:25:38:
d8:e1:ee:99:6a:af:6e:fa:4f:3d:84:a8:28:46:41:
68:3d:52:ff:f5:83:32:d3:5a:77:db:3f:b5:01:ad:
be:f6:3c:89:03:87:67:f9:d4:75:ac:7d:b3:a0:f6:
d5:b4:86:44:5a:13:d3:cc:b7:79:76:6a:1c:87:16:
2e:09:6c:4a:30:08:b7:53:16:62:34:65:f0:9d:87:
2b:09:b2:3b:33:a5:39:3f:0f:f9:5a:74:af:f5:4f:
4c:ec:29:89:52:e7:55:73:f9:3a:82:07:21:64:bf:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:98:E7:1F:4A:93:18:0F:78:9B:2C:1C:69:94:62:BA:D2:F1:A2
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/XFKY5x9KkxgPeJssHGmUYrrS8aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.144.0/24
185.230.146.0/23
185.232.133.0-185.232.134.255
Signature Algorithm: sha256WithRSAEncryption
6b:67:35:55:1c:56:45:97:3f:d3:d9:bd:84:dd:09:89:78:08:
9d:ba:9c:f1:11:9d:51:0d:50:32:eb:02:d5:7c:f5:ab:4f:25:
a0:cd:a7:b6:5b:ea:b7:d5:5e:ce:5e:1a:83:ea:3f:cc:13:6b:
cb:bb:a3:ea:bf:36:b8:bb:cc:06:4b:9e:d5:54:b9:2e:d2:de:
21:a7:09:11:36:32:a4:56:88:46:22:31:55:ad:a4:60:62:5a:
f2:16:8d:9d:62:7b:3a:77:b6:72:6f:e9:93:cc:99:84:0f:57:
5d:82:fa:90:62:64:7e:8a:6a:52:e6:e3:93:b1:eb:e7:8a:a2:
9f:4b:83:81:c3:db:b3:5b:4e:c9:bb:98:d4:7e:bc:76:b4:a0:
2b:19:9c:8d:a5:7b:2b:d8:78:02:c7:b9:bb:e0:a0:68:e2:df:
6a:4d:d4:d2:fb:24:7f:49:3d:38:6e:c5:4e:98:a9:bc:0c:51:
82:94:83:74:2d:fe:7e:16:eb:98:77:eb:6b:2e:1d:a1:c5:35:
2a:66:af:2b:19:5c:21:45:e0:4e:43:d6:05:25:5c:98:fd:aa:
12:89:d9:30:10:0a:5a:b6:d2:9a:6e:f1:ad:ec:1c:ff:c9:2f:
51:4f:be:a9:d3:a6:fa:fa:7f:15:81:1e:e6:ef:39:44:e1:87:
61:98:0b:23
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYl3g7Iyz+i8jvfatPo6gWxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjMwNzIxMDgxNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzUyOThlNzFmNGE5MzE4MGY3ODliMmMxYzY5OTQ2MmJhZDJmMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFc1suwKX48a27zPodKdCRomkJzk
KAkT4oAlFFNMbEBWFZxvEv/kAOqJiweTMsAVZ1uaW6DqD5xlqiLVjpLUhMLIfBJa
aKQPbZF7goPdcJQs8rg/I7SuGZzGsZ6U5owTsW9Ka5bXQ50PtZrkC8EcBfWEFsfV
41e/uSs9OfH2Cmer0OBZvwh8Pes8Sd80WcWHxqnZJTjY4e6Zaq9u+k89hKgoRkFo
PVL/9YMy01p32z+1Aa2+9jyJA4dn+dR1rH2zoPbVtIZEWhPTzLd5dmochxYuCWxK
MAi3UxZiNGXwnYcrCbI7M6U5Pw/5WnSv9U9M7CmJUudVc/k6ggchZL9ZiQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFxSmOcfSpMYD3ibLBxplGK60vGiMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvWEZLWTV4OUtreGdQZUpzc0hHbVVZcnJTOGFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAueaQAwQB
ueaSMAwDBAC56IUDBAC56IYwDQYJKoZIhvcNAQELBQADggEBAGtnNVUcVkWXP9PZ
vYTdCYl4CJ26nPERnVENUDLrAtV89atPJaDNp7Zb6rfVXs5eGoPqP8wTa8u7o+q/
Nri7zAZLntVUuS7S3iGnCRE2MqRWiEYiMVWtpGBiWvIWjZ1iezp3tnJv6ZPMmYQP
V12C+pBiZH6KalLm45Ox6+eKop9Lg4HD27NbTsm7mNR+vHa0oCsZnI2leyvYeALH
ubvgoGji32pN1NL7JH9JPThuxU6YqbwMUYKUg3Qt/n4W65h362suHaHFNSpmrysZ
XCFF4E5D1gUlXJj9qhKJ2TAQClq20ppu8a3sHP/JL1FPvqnTpvr6fxWBHubvOUTh
h2GYCyM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org