Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/oNRWj5t4pHIBXkrRZcXKDkF3QPI.roa
File: oNRWj5t4pHIBXkrRZcXKDkF3QPI.roa (raw, json)
Hash identifier: 6iee4NiQlRJKwsusvJUHbPqYxW2wgBEjBV69+xEFXQc=
Subject key identifier: A0:D4:56:8F:9B:78:A4:72:01:5E:4A:D1:65:C5:CA:0E:41:77:40:F2
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 018CC80155DB37D46985184EC4EB81CAC4D6
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/oNRWj5t4pHIBXkrRZcXKDkF3QPI.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213245
IP address blocks: 185.204.230.0/24 maxlen: 24
185.204.229.0/24 maxlen: 24
185.204.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:55:db:37:d4:69:85:18:4e:c4:eb:81:ca:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0d4568f9b78a472015e4ad165c5ca0e417740f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:c9:4a:5a:65:86:cd:ad:4b:6f:59:41:9b:
54:72:f5:1f:ab:a6:9a:b7:42:bd:be:16:1b:6a:bc:
7b:58:2b:23:62:20:9c:9c:d9:4b:18:b2:19:f0:8b:
b3:56:c2:f4:fe:e0:01:a1:27:0b:46:85:f0:d9:8e:
9d:38:a0:27:f0:8e:64:ca:3a:41:f1:b5:1f:e7:63:
47:5a:e6:2a:09:03:05:7a:4d:cb:c6:ef:d3:1e:0d:
83:c2:b7:eb:22:e9:38:ab:80:ab:36:29:ca:f9:9c:
80:c2:a5:8c:f7:a8:cf:bf:64:19:85:25:eb:31:43:
38:3a:e7:25:c6:68:5c:67:d6:32:15:3f:a6:db:08:
18:3b:b0:c9:59:96:d6:a8:56:54:00:23:4d:86:6e:
b3:5d:1b:a7:bd:75:7d:90:bf:bf:7d:e7:ea:92:58:
d0:21:fe:0c:41:c3:b7:01:15:f0:21:55:3a:36:ae:
fe:d7:56:aa:3a:6b:4f:09:3a:09:77:07:0a:54:26:
4d:06:48:ee:6e:2d:14:34:21:b8:c8:e0:c5:78:d4:
41:c2:e9:bf:99:a8:2f:c0:a9:69:22:2e:ec:47:61:
b5:0a:77:a2:2d:47:b1:81:24:ff:82:21:42:a3:a6:
5a:88:64:42:77:9e:60:fa:98:77:ab:41:f7:b4:a6:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:56:8F:9B:78:A4:72:01:5E:4A:D1:65:C5:CA:0E:41:77:40:F2
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/oNRWj5t4pHIBXkrRZcXKDkF3QPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.229.0-185.204.231.255
Signature Algorithm: sha256WithRSAEncryption
5d:c1:b0:86:e0:b9:79:ab:5c:6e:b3:86:bf:ab:9c:94:ac:02:
8d:38:80:84:ca:84:77:40:19:0d:a1:87:3a:de:23:79:08:c2:
65:4a:3c:0e:b2:87:34:13:6b:2d:b8:39:22:5b:51:96:96:a5:
b6:4c:5a:c3:6a:3d:08:06:ba:ad:ea:85:d8:1d:76:f6:cc:60:
9d:f0:92:b4:59:9e:c9:10:13:63:b6:86:2d:81:83:6f:d4:f2:
86:40:d6:5e:fd:ac:3a:7c:13:3e:46:5b:10:1f:12:41:65:b8:
09:86:42:84:8d:42:52:fd:af:99:1a:15:d3:21:81:68:e6:2a:
9a:71:77:e9:d6:de:30:fb:1e:9f:f6:bb:07:6e:8e:40:45:43:
35:87:77:67:ee:fe:4a:d5:fa:35:9c:bc:f0:a5:07:e6:20:67:
e9:96:fc:bc:da:f6:aa:76:03:bc:e5:08:3e:99:5e:ee:14:66:
4f:25:bc:4f:0a:5e:fb:95:71:ea:9c:e6:c0:93:a8:34:47:b9:
b4:a0:1f:a3:7b:89:8a:0e:04:9c:aa:48:42:06:cb:94:a2:8d:
14:39:02:82:b2:7f:7c:e7:a8:ac:7b:7f:2d:2e:00:3a:be:30:
ef:98:d1:d8:00:ae:ba:30:bd:cb:86:cf:4f:d2:26:cb:b7:49:
eb:39:5a:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzIAVXbN9RphRhOxOuBysTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0
YWM2OTIwHhcNMjQwMTAyMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGQ0NTY4ZjliNzhhNDcyMDE1ZTRhZDE2NWM1Y2EwZTQxNzc0MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBXJSlplhs2tS29ZQZtUcvUfq6aa
t0K9vhYbarx7WCsjYiCcnNlLGLIZ8IuzVsL0/uABoScLRoXw2Y6dOKAn8I5kyjpB
8bUf52NHWuYqCQMFek3Lxu/THg2DwrfrIuk4q4CrNinK+ZyAwqWM96jPv2QZhSXr
MUM4OuclxmhcZ9YyFT+m2wgYO7DJWZbWqFZUACNNhm6zXRunvXV9kL+/fefqkljQ
If4MQcO3ARXwIVU6Nq7+11aqOmtPCToJdwcKVCZNBkjubi0UNCG4yODFeNRBwum/
magvwKlpIi7sR2G1CneiLUexgST/giFCo6ZaiGRCd55g+ph3q0H3tKa3/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKDUVo+beKRyAV5K0WXFyg5Bd0DyMB8GA1UdIwQY
MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt
MTVhMDkzZTJiYjhmLzEvb05SV2o1dDRwSElCWGtyUlpjWEtEa0YzUVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm
LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5zOUD
BAO5zOAwDQYJKoZIhvcNAQELBQADggEBAF3BsIbguXmrXG6zhr+rnJSsAo04gITK
hHdAGQ2hhzreI3kIwmVKPA6yhzQTay24OSJbUZaWpbZMWsNqPQgGuq3qhdgddvbM
YJ3wkrRZnskQE2O2hi2Bg2/U8oZA1l79rDp8Ez5GWxAfEkFluAmGQoSNQlL9r5ka
FdMhgWjmKppxd+nW3jD7Hp/2uwdujkBFQzWHd2fu/krV+jWcvPClB+YgZ+mW/Lza
9qp2A7zlCD6ZXu4UZk8lvE8KXvuVceqc5sCTqDRHubSgH6N7iYoOBJyqSEIGy5Si
jRQ5AoKyf3znqKx7fy0uADq+MO+Y0dgArrowvcuGz0/SJsu3Ses5Wvg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:53 2024 by rpki-client on console-ams.rpki-client.org