Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K6sFGCqVDb17Ei33xs_YStItfzk.roa
File: K6sFGCqVDb17Ei33xs_YStItfzk.roa (raw, json)
Hash identifier: zfdcr/rvGAxYC1GkkkkqdCW5lXdLyjXBCScEfJFm/RY=
Subject key identifier: 2B:AB:05:18:2A:95:0D:BD:7B:12:2D:F7:C6:CF:D8:4A:D2:2D:7F:39
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019282B23D48DC43951CC9E8D4CB6BB79EE7
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K6sFGCqVDb17Ei33xs_YStItfzk.roa
Signing time: Sat 12 Oct 2024 21:46:12 +0000
ROA not before: Sat 12 Oct 2024 21:46:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 147.185.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 12:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:82:b2:3d:48:dc:43:95:1c:c9:e8:d4:cb:6b:b7:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 12 21:46:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bab05182a950dbd7b122df7c6cfd84ad22d7f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:b2:51:5c:bb:52:09:7d:67:08:43:fe:24:
cd:16:0c:27:eb:1d:a3:40:28:f3:3f:61:a0:f1:a5:
e9:f3:5a:43:40:4f:4f:e5:c5:15:e2:d4:8d:7d:c0:
75:72:80:18:11:2a:93:01:6c:22:38:7f:77:bb:5c:
a6:4b:32:fb:31:cf:56:8e:e2:5e:2d:f0:b3:10:31:
ce:da:5c:73:48:63:16:f3:6e:4c:8b:4a:19:c6:5d:
14:1a:2a:fd:c0:a6:e6:a0:12:6e:b3:75:b8:2e:a0:
25:ab:2d:d2:12:3b:6b:bb:ac:c8:6d:db:d8:ed:6b:
b1:95:60:2c:d1:6a:29:27:3b:7c:21:d9:cf:76:42:
1e:0f:10:58:33:50:80:8b:c9:a5:4d:c9:92:35:9d:
31:2b:54:88:9e:66:56:d7:f6:e6:43:3c:9f:18:25:
42:98:45:3b:f6:7a:ca:71:c2:39:b1:7c:ce:49:f3:
2b:7a:58:bc:95:f2:cc:d3:82:2d:ed:86:03:65:5a:
dd:17:52:6e:2f:57:2e:ee:be:95:73:7e:a3:10:8c:
04:0a:fb:60:38:2a:8b:c2:7e:bb:ef:41:f1:7f:be:
3b:6a:9b:95:84:a8:f3:c3:cf:08:d3:c4:e4:0a:03:
db:65:be:e2:ad:b5:3a:90:22:83:ce:67:b0:33:a3:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:05:18:2A:95:0D:BD:7B:12:2D:F7:C6:CF:D8:4A:D2:2D:7F:39
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K6sFGCqVDb17Ei33xs_YStItfzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a9:e6:6c:dc:30:60:09:4a:6c:68:a6:37:34:3f:40:7e:e1:
3a:c9:e9:73:e6:04:55:e0:2a:f5:0c:11:bf:d4:ef:59:2c:92:
0c:79:02:61:5f:4c:a4:33:e1:da:fe:16:f6:13:32:12:40:14:
1d:6b:5b:a7:b8:12:e1:9a:19:4d:84:4b:d6:f1:55:cf:09:07:
81:6b:a8:a8:8e:17:d6:8d:9b:a0:ac:10:1f:3c:93:01:6d:9f:
35:a7:e1:7f:b8:85:da:fa:95:28:b6:ea:b9:bb:59:de:c0:29:
4b:20:be:8b:ef:d4:d4:31:b5:86:73:15:ed:4b:8b:6a:e2:21:
07:0b:45:cf:fe:7a:6d:d9:da:56:c2:86:cf:97:94:de:34:f4:
bb:6c:82:92:48:79:01:44:1b:f2:5b:9d:cb:8a:dd:84:0e:21:
fa:4f:53:b8:a6:f7:32:59:50:52:99:7c:49:d6:8c:f5:40:0d:
9a:a6:31:9b:62:ab:89:5d:40:a6:e9:1f:96:bb:7d:b9:69:00:
71:64:c0:b4:7a:76:e4:13:81:c8:5d:37:53:52:88:39:35:f9:
1d:52:72:9b:ec:47:24:94:33:1b:26:c8:35:85:d4:11:18:8b:
d9:7f:1e:2e:80:b8:04:d1:ce:15:3a:09:f8:0e:6b:a0:83:5f:
e7:d8:12:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKCsj1I3EOVHMno1Mtrt57nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjQxMDEyMjE0NjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmFiMDUxODJhOTUwZGJkN2IxMjJkZjdjNmNmZDg0YWQyMmQ3ZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRGyUVy7Ugl9ZwhD/iTNFgwn6x2j
QCjzP2Gg8aXp81pDQE9P5cUV4tSNfcB1coAYESqTAWwiOH93u1ymSzL7Mc9WjuJe
LfCzEDHO2lxzSGMW825Mi0oZxl0UGir9wKbmoBJus3W4LqAlqy3SEjtru6zIbdvY
7WuxlWAs0WopJzt8IdnPdkIeDxBYM1CAi8mlTcmSNZ0xK1SInmZW1/bmQzyfGCVC
mEU79nrKccI5sXzOSfMreli8lfLM04It7YYDZVrdF1JuL1cu7r6Vc36jEIwECvtg
OCqLwn6770Hxf747apuVhKjzw88I08TkCgPbZb7irbU6kCKDzmewM6POEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCurBRgqlQ29exIt98bP2ErSLX85MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvSzZzRkdDcVZEYjE3RWkzM3hzX1lTdEl0ZnprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nEMA0G
CSqGSIb3DQEBCwUAA4IBAQA8qeZs3DBgCUpsaKY3ND9AfuE6yelz5gRV4Cr1DBG/
1O9ZLJIMeQJhX0ykM+Ha/hb2EzISQBQda1unuBLhmhlNhEvW8VXPCQeBa6iojhfW
jZugrBAfPJMBbZ81p+F/uIXa+pUotuq5u1newClLIL6L79TUMbWGcxXtS4tq4iEH
C0XP/npt2dpWwobPl5TeNPS7bIKSSHkBRBvyW53Lit2EDiH6T1O4pvcyWVBSmXxJ
1oz1QA2apjGbYquJXUCm6R+Wu325aQBxZMC0enbkE4HIXTdTUog5NfkdUnKb7Eck
lDMbJsg1hdQRGIvZfx4ugLgE0c4VOgn4Dmugg1/n2BLN
-----END CERTIFICATE-----
Generated at Mon Oct 14 15:20:31 2024 by rpki-client on console-fra.rpki-client.org