Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/6OBe5sFpBFkmp402TbaYH7r_-II.roa
File: 6OBe5sFpBFkmp402TbaYH7r_-II.roa (raw, json)
Hash identifier: b0rTr9hEC7F0lekO1WAdvNwX5a0cJDZNTfhxdNfGyRs=
Subject key identifier: E8:E0:5E:E6:C1:69:04:59:26:A7:8D:36:4D:B6:98:1F:BA:FF:F8:82
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 01857039788B4E14D234681EF8528F13E6C7
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/6OBe5sFpBFkmp402TbaYH7r_-II.roa
Signing time: Mon 02 Jan 2023 02:04:52 +0000
ROA not before: Mon 02 Jan 2023 02:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205805
IP address blocks: 185.246.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:78:8b:4e:14:d2:34:68:1e:f8:52:8f:13:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Jan 2 02:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e05ee6c169045926a78d364db6981fbafff882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:50:38:b9:44:0f:63:e7:ee:c7:be:9e:f7:
cf:67:7b:b8:e3:d4:83:ef:75:76:af:44:b3:37:52:
12:11:e5:ff:90:96:99:1b:0f:8c:a6:90:c5:a8:20:
17:7e:6c:cb:1e:05:09:9c:99:37:f3:e8:de:bb:ef:
8e:54:b3:10:c0:9c:9e:59:4a:dd:9f:b0:9c:50:91:
83:ae:c0:08:96:74:08:ef:1d:c7:2d:9a:15:88:f7:
b9:6d:93:1f:67:fa:92:42:89:1d:94:d8:16:8b:2f:
90:0c:cc:35:10:29:cb:0d:e9:f3:31:26:8d:44:95:
2e:4e:95:75:96:fa:25:1f:d7:4b:54:74:68:91:b7:
71:1e:20:d3:1f:5b:c4:f2:7e:6a:ae:78:b8:64:96:
2a:45:7d:f2:a4:b2:ea:82:0d:83:4d:27:b0:99:63:
4f:d4:fd:b7:fa:eb:8c:28:2b:dc:4c:97:f9:e6:d5:
fc:b6:e6:75:ed:b4:db:b5:1d:46:1a:d4:1b:86:88:
b0:c4:aa:8f:44:dc:8d:27:e6:9f:67:43:29:70:bf:
98:dd:97:49:dd:b0:f2:c2:7d:7e:62:2d:2b:c8:29:
15:75:86:08:97:be:7d:aa:fe:4f:c1:22:0e:43:20:
40:aa:52:98:68:11:ee:15:a9:6a:82:6c:d0:33:10:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:5E:E6:C1:69:04:59:26:A7:8D:36:4D:B6:98:1F:BA:FF:F8:82
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/6OBe5sFpBFkmp402TbaYH7r_-II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.224.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f8:b5:74:0c:f5:07:83:19:65:34:6a:64:46:5d:b9:ca:0d:
fe:fe:65:43:0b:1d:27:17:e9:42:6f:e5:8e:41:38:db:d9:70:
34:df:45:e2:89:9d:a7:71:f9:fb:06:64:08:9d:e4:88:58:0f:
ee:5a:5e:d0:57:96:72:73:f0:a6:62:68:9a:09:11:12:65:cd:
28:53:3f:9f:65:82:bb:82:05:b4:d7:0f:37:8b:6e:84:e3:82:
0a:0e:09:ce:95:c9:f1:24:51:d4:f8:55:cd:98:b5:bf:af:f5:
02:f9:9b:d7:60:00:84:9e:b2:25:40:4a:ec:06:f8:c9:96:90:
09:8c:8e:dc:1f:25:c9:75:0e:16:30:7d:7c:b1:6a:d8:1e:73:
a4:b7:2f:96:6c:58:dd:92:e5:a1:a5:e4:48:ad:89:c4:d1:82:
40:6f:a8:48:95:9f:bb:df:8c:52:a1:e2:7a:c4:c5:bc:63:3e:
02:98:d8:99:d6:db:ad:67:3e:d1:bc:1b:07:e0:80:05:08:d2:
2c:95:13:65:c7:56:35:d4:16:70:6e:19:b8:36:12:d0:92:a1:
b0:6c:e7:72:c9:08:2e:eb:48:25:c3:a8:16:34:2a:39:6c:2b:
65:0c:63:1b:f2:d8:f7:71:a6:54:ec:49:27:59:14:02:3f:04:
99:ca:95:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOXiLThTSNGge+FKPE+bHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjFmMTg1YjRiMzg2Njc1NWRiYTAwMTBiY2YxMGI5NGE4
YWE2NmMwHhcNMjMwMTAyMDIwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGUwNWVlNmMxNjkwNDU5MjZhNzhkMzY0ZGI2OTgxZmJhZmZmODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgipQOLlED2Pn7se+nvfPZ3u449SD
73V2r0SzN1ISEeX/kJaZGw+MppDFqCAXfmzLHgUJnJk38+jeu++OVLMQwJyeWUrd
n7CcUJGDrsAIlnQI7x3HLZoViPe5bZMfZ/qSQokdlNgWiy+QDMw1ECnLDenzMSaN
RJUuTpV1lvolH9dLVHRokbdxHiDTH1vE8n5qrni4ZJYqRX3ypLLqgg2DTSewmWNP
1P23+uuMKCvcTJf55tX8tuZ17bTbtR1GGtQbhoiwxKqPRNyNJ+afZ0MpcL+Y3ZdJ
3bDywn1+Yi0ryCkVdYYIl759qv5PwSIOQyBAqlKYaBHuFalqgmzQMxBQLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjgXubBaQRZJqeNNk22mB+6//iCMB8GA1UdIwQY
MBaAFFoh8YW0s4ZnVdugAQvPELlKiqZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYt
OWNiN2ZjMTU0NDI1LzEvNk9CZTVzRnBCRmttcDQwMlRiYVlIN3JfLUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYtOWNiN2ZjMTU0NDI1
LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufbgMA0G
CSqGSIb3DQEBCwUAA4IBAQAm+LV0DPUHgxllNGpkRl25yg3+/mVDCx0nF+lCb+WO
QTjb2XA030XiiZ2ncfn7BmQIneSIWA/uWl7QV5Zyc/CmYmiaCRESZc0oUz+fZYK7
ggW01w83i26E44IKDgnOlcnxJFHU+FXNmLW/r/UC+ZvXYACEnrIlQErsBvjJlpAJ
jI7cHyXJdQ4WMH18sWrYHnOkty+WbFjdkuWhpeRIrYnE0YJAb6hIlZ+734xSoeJ6
xMW8Yz4CmNiZ1tutZz7RvBsH4IAFCNIslRNlx1Y11BZwbhm4NhLQkqGwbOdyyQgu
60glw6gWNCo5bCtlDGMb8tj3caZU7EknWRQCPwSZypXd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:58 2024 by rpki-client on console-ams.rpki-client.org