Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/30rOPI_4rpR-FcauO0B2LVylb6E.roa
File: 30rOPI_4rpR-FcauO0B2LVylb6E.roa (raw, json)
Hash identifier: fIIhlPS7WiNvnxUL+LtBGuBnHHnHKDA0+/eimlKJLz8=
Subject key identifier: DF:4A:CE:3C:8F:F8:AE:94:7E:15:C6:AE:3B:40:76:2D:5C:A5:6F:A1
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 018C433D875ABA7371E82F10E345EC0231C8
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/30rOPI_4rpR-FcauO0B2LVylb6E.roa
Signing time: Thu 07 Dec 2023 07:45:54 +0000
ROA not before: Thu 07 Dec 2023 07:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393559
IP address blocks: 185.230.180.0/22 maxlen: 24
2a13:d00:cf00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:3d:87:5a:ba:73:71:e8:2f:10:e3:45:ec:02:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Dec 7 07:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df4ace3c8ff8ae947e15c6ae3b40762d5ca56fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:2f:90:14:e3:61:70:01:2d:87:52:f3:25:
77:85:5b:9b:f3:be:13:f9:b3:42:26:b3:de:59:51:
a6:fb:4c:87:00:7f:37:58:4f:3d:14:19:66:6f:b0:
dd:39:ae:4f:9a:ea:b3:c5:34:37:8e:f5:dd:8d:f7:
2e:19:e8:aa:99:60:4d:1d:d2:39:86:04:f7:71:a3:
ef:e3:00:4a:1e:7d:7c:43:06:69:2e:3a:53:33:07:
29:8c:cf:4a:ca:a3:2e:41:b1:e2:dc:5b:3c:8e:17:
92:24:be:69:0e:d7:81:0a:64:62:6c:99:37:3a:e2:
80:17:28:a8:25:09:e1:2c:21:2b:3e:2e:8a:4d:78:
6e:f6:bd:55:c0:08:cc:da:3a:e5:4b:00:62:f4:d2:
f9:47:f2:fc:6e:8f:9c:71:56:d0:88:32:c2:d2:ab:
30:23:7a:2f:91:77:38:ca:ee:58:08:d8:eb:fd:b1:
d8:3b:a9:db:a6:7a:f3:c0:1c:8a:98:32:31:a8:db:
ea:d5:c5:c1:29:04:25:6b:f2:51:86:36:b9:64:37:
fd:0b:23:ec:41:ed:de:fc:5c:ab:6e:d6:76:e9:91:
28:27:40:dd:8c:64:cd:ae:9a:67:39:0d:99:8b:c7:
5a:84:a0:e1:8d:3a:cc:a1:52:09:4d:a6:75:9f:25:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:CE:3C:8F:F8:AE:94:7E:15:C6:AE:3B:40:76:2D:5C:A5:6F:A1
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/30rOPI_4rpR-FcauO0B2LVylb6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.180.0/22
IPv6:
2a13:d00:cf00::/40
Signature Algorithm: sha256WithRSAEncryption
5e:b6:8f:a2:ee:2e:b0:e5:e1:cc:05:a4:a7:a4:b0:bb:14:51:
75:32:30:02:80:36:92:1e:4a:f3:87:f1:41:0f:a7:1c:33:0c:
4e:33:16:2c:1a:2d:2b:a0:be:6a:fe:bd:b2:34:7f:16:6b:1b:
11:c7:d4:fa:90:f1:e3:71:c3:5d:c2:91:93:82:5b:be:80:69:
77:b6:3a:49:a4:3f:0c:fa:05:91:e3:34:a3:c6:ad:f1:fb:16:
62:50:46:05:98:19:77:5c:34:b1:3f:a4:45:4c:5d:5a:c8:76:
05:23:4b:87:79:f3:00:ff:58:25:b0:90:63:1a:fe:00:b6:39:
9e:8c:80:a5:2d:f7:0e:5d:da:3a:bd:62:ca:5f:95:50:74:43:
17:8c:a6:7c:23:71:96:dd:54:74:81:04:5d:e6:36:a2:f9:2f:
87:63:78:34:56:ff:35:2c:19:73:98:a7:79:4d:5c:6f:bd:82:
88:39:b9:08:fb:d7:ef:96:3e:1e:ed:3a:c3:55:de:ed:89:78:
c2:75:04:a4:eb:bf:22:c4:9d:b0:36:db:32:58:f4:b4:b6:96:
85:46:a3:75:94:59:0e:8b:45:64:dc:22:6e:81:6a:43:05:d3:
46:ef:6e:16:82:b2:3e:20:0f:d0:39:c4:4e:52:59:8d:6c:00:
cb:52:c5:18
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYxDPYdaunNx6C8Q40XsAjHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjMxMjA3MDc0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjRhY2UzYzhmZjhhZTk0N2UxNWM2YWUzYjQwNzYyZDVjYTU2ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVovkBTjYXABLYdS8yV3hVub874T
+bNCJrPeWVGm+0yHAH83WE89FBlmb7DdOa5PmuqzxTQ3jvXdjfcuGeiqmWBNHdI5
hgT3caPv4wBKHn18QwZpLjpTMwcpjM9KyqMuQbHi3Fs8jheSJL5pDteBCmRibJk3
OuKAFyioJQnhLCErPi6KTXhu9r1VwAjM2jrlSwBi9NL5R/L8bo+ccVbQiDLC0qsw
I3ovkXc4yu5YCNjr/bHYO6nbpnrzwByKmDIxqNvq1cXBKQQla/JRhja5ZDf9CyPs
Qe3e/FyrbtZ26ZEoJ0DdjGTNrppnOQ2Zi8dahKDhjTrMoVIJTaZ1nyXKpQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFN9KzjyP+K6UfhXGrjtAdi1cpW+hMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvMzByT1BJXzRycFItRmNhdU8wQjJMVnlsYjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuea0MA4E
AgACMAgDBgAqEw0AzzANBgkqhkiG9w0BAQsFAAOCAQEAXraPou4usOXhzAWkp6Sw
uxRRdTIwAoA2kh5K84fxQQ+nHDMMTjMWLBotK6C+av69sjR/FmsbEcfU+pDx43HD
XcKRk4JbvoBpd7Y6SaQ/DPoFkeM0o8at8fsWYlBGBZgZd1w0sT+kRUxdWsh2BSNL
h3nzAP9YJbCQYxr+ALY5noyApS33Dl3aOr1iyl+VUHRDF4ymfCNxlt1UdIEEXeY2
ovkvh2N4NFb/NSwZc5ineU1cb72CiDm5CPvX75Y+Hu06w1Xe7Yl4wnUEpOu/IsSd
sDbbMlj0tLaWhUajdZRZDotFZNwiboFqQwXTRu9uFoKyPiAP0DnETlJZjWwAy1LF
GA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org