Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RcGmUuN2CC6c2F3CLZ3Dag18Id4.roa
File: RcGmUuN2CC6c2F3CLZ3Dag18Id4.roa (raw, json)
Hash identifier: mfzT/hO8wgqSFiKumDO7avtDj1tbaBjwgV+caQx5l+k=
Subject key identifier: 45:C1:A6:52:E3:76:08:2E:9C:D8:5D:C2:2D:9D:C3:6A:0D:7C:21:DE
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018E0E68ECF2D510C29FB65DA85C328B26F9
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RcGmUuN2CC6c2F3CLZ3Dag18Id4.roa
Signing time: Tue 05 Mar 2024 11:39:01 +0000
ROA not before: Tue 05 Mar 2024 11:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58349
IP address blocks: 185.42.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:68:ec:f2:d5:10:c2:9f:b6:5d:a8:5c:32:8b:26:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 5 11:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45c1a652e376082e9cd85dc22d9dc36a0d7c21de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:f5:a7:e7:91:1e:37:4b:e4:8c:db:c8:97:
a3:b9:fd:44:ca:12:37:9f:9b:10:9d:b9:b2:db:f9:
ec:d5:dd:3e:b7:69:f6:4f:43:fc:e8:8f:b7:c8:7c:
bf:85:4a:42:e4:a9:71:e9:87:a5:7e:87:2c:40:0d:
8a:59:cd:28:b2:07:7f:83:e2:85:ea:25:bc:04:66:
0a:6e:a7:a7:0d:63:a9:a9:c0:a3:dd:08:1c:b0:06:
15:88:9b:44:0d:b9:bb:f7:a7:4b:be:74:75:0d:50:
4e:39:ba:4e:f0:15:05:37:92:d9:e6:f5:96:38:24:
21:2d:3f:c9:f9:c2:8e:57:9d:da:1e:13:f0:1e:f8:
e9:1c:20:be:5d:97:ff:db:8a:eb:4d:dd:2d:17:3c:
6e:9e:2d:dd:a3:bf:26:1b:60:9e:43:64:81:06:2e:
f0:cb:d2:8b:c7:0b:36:f3:79:5a:45:aa:87:72:e3:
d0:26:37:af:77:49:ef:2f:4a:23:ec:6d:4a:72:46:
6c:90:c4:76:e6:c5:8a:6c:ec:4c:8c:99:d3:2d:fd:
14:2e:70:21:af:e3:f9:f6:6c:01:ac:82:a6:64:d3:
6d:5c:82:89:1a:88:ce:b4:e3:5e:79:c3:e9:3a:a3:
cb:99:17:10:a2:87:b2:e9:93:46:3a:8c:95:fb:62:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:A6:52:E3:76:08:2E:9C:D8:5D:C2:2D:9D:C3:6A:0D:7C:21:DE
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RcGmUuN2CC6c2F3CLZ3Dag18Id4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.14.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fd:d4:b4:7a:04:7d:21:5d:c9:5e:77:d2:4d:71:66:21:32:
76:c3:7b:ef:49:6b:2b:74:9f:a2:76:e2:d3:e7:0b:12:40:b3:
3c:93:6c:96:3e:88:97:2d:82:be:5e:89:a5:cc:8a:5e:01:4a:
ed:78:c0:86:4c:27:eb:ba:5b:a1:1c:5f:6b:7f:ea:95:90:6b:
bf:1b:78:1a:44:86:98:fa:8e:e6:f6:42:41:47:d4:2c:f1:1d:
58:0a:e3:82:17:3a:c4:20:24:07:c8:2d:d1:2c:ae:83:67:46:
94:63:91:10:ea:99:72:cc:1b:c2:bd:df:1f:1c:12:6f:28:f0:
4c:c9:8f:84:c7:b4:42:73:3b:7c:a4:0d:ea:a5:f5:eb:2a:48:
3c:f5:6b:96:50:21:75:5c:d0:56:19:87:e7:6c:f4:c9:b8:f4:
94:cc:7e:fd:5d:06:5c:fa:05:77:5a:05:3b:1a:cb:34:16:1b:
c6:2c:0c:10:d8:73:96:bc:d0:a1:1f:87:77:eb:d6:a8:6a:f6:
c6:3b:6d:1e:2f:5d:98:df:62:ce:a8:fe:5c:8d:e7:22:e4:fc:
9b:df:eb:7c:c2:04:8f:ea:8e:46:05:07:6a:7f:ee:c5:95:3c:
ec:a9:7a:c4:c1:47:c4:c2:fe:36:f1:27:48:4f:14:4f:c9:ca:
fb:e1:98:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4OaOzy1RDCn7ZdqFwyiyb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMzA1MTEzOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWMxYTY1MmUzNzYwODJlOWNkODVkYzIyZDlkYzM2YTBkN2MyMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDb1p+eRHjdL5IzbyJejuf1EyhI3
n5sQnbmy2/ns1d0+t2n2T0P86I+3yHy/hUpC5Klx6YelfocsQA2KWc0osgd/g+KF
6iW8BGYKbqenDWOpqcCj3QgcsAYViJtEDbm796dLvnR1DVBOObpO8BUFN5LZ5vWW
OCQhLT/J+cKOV53aHhPwHvjpHCC+XZf/24rrTd0tFzxuni3do78mG2CeQ2SBBi7w
y9KLxws283laRaqHcuPQJjevd0nvL0oj7G1KckZskMR25sWKbOxMjJnTLf0ULnAh
r+P59mwBrIKmZNNtXIKJGojOtONeecPpOqPLmRcQooey6ZNGOoyV+2JISwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXBplLjdggunNhdwi2dw2oNfCHeMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvUmNHbVV1TjJDQzZjMkYzQ0xaM0RhZzE4SWQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoOMA0G
CSqGSIb3DQEBCwUAA4IBAQCX/dS0egR9IV3JXnfSTXFmITJ2w3vvSWsrdJ+iduLT
5wsSQLM8k2yWPoiXLYK+XomlzIpeAUrteMCGTCfruluhHF9rf+qVkGu/G3gaRIaY
+o7m9kJBR9Qs8R1YCuOCFzrEICQHyC3RLK6DZ0aUY5EQ6plyzBvCvd8fHBJvKPBM
yY+Ex7RCczt8pA3qpfXrKkg89WuWUCF1XNBWGYfnbPTJuPSUzH79XQZc+gV3WgU7
Gss0FhvGLAwQ2HOWvNChH4d369aoavbGO20eL12Y32LOqP5cjeci5Pyb3+t8wgSP
6o5GBQdqf+7FlTzsqXrEwUfEwv428SdITxRPycr74Zj0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org