Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/VHtiy0hEG2BR1NF_VrAqHEX_sIU.roa
File: VHtiy0hEG2BR1NF_VrAqHEX_sIU.roa (raw, json)
Hash identifier: Be8OopdKJNC/bdMPhp8vpStT23KL7SjxjdUDTC6Iq9E=
Subject key identifier: 54:7B:62:CB:48:44:1B:60:51:D4:D1:7F:56:B0:2A:1C:45:FF:B0:85
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 018CC8012470887470F4992447025289F016
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/VHtiy0hEG2BR1NF_VrAqHEX_sIU.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198589
IP address blocks: 185.122.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 16:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:24:70:88:74:70:f4:99:24:47:02:52:89:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547b62cb48441b6051d4d17f56b02a1c45ffb085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:46:0f:5c:f7:54:f8:2c:12:14:b8:2e:9e:
c8:48:a0:10:b6:5c:3c:7b:1f:86:0d:06:ff:05:6b:
2f:58:0b:42:1c:1e:41:b0:4f:e2:3b:ed:b9:f5:33:
c3:18:c0:15:f0:13:15:bc:11:d0:8f:87:3b:98:7c:
be:50:29:48:d5:5d:17:34:00:89:cf:b0:fa:5a:bb:
7e:23:ff:be:1c:72:b1:ab:25:28:c1:da:6d:28:b1:
4a:c6:93:76:cc:5b:c8:6d:67:b1:ef:a5:2e:5e:47:
09:bb:b3:e0:ee:2f:81:20:5c:32:37:ca:77:d0:e6:
c8:61:39:40:32:7e:b6:15:61:04:be:a5:34:6b:14:
5a:57:9f:1f:91:1a:fa:64:57:9e:8d:9a:22:4b:3d:
ee:a3:ed:53:ee:28:15:18:ff:bb:57:ab:24:a1:6d:
3e:c9:56:ba:ba:71:3d:01:11:c8:54:57:10:96:1e:
e4:04:dc:ff:36:64:27:4e:62:64:29:43:85:6b:bc:
68:07:ac:9a:7a:b4:2c:b7:b8:82:11:59:eb:a4:4b:
d4:e6:2b:15:45:51:e4:17:09:81:af:1e:86:61:9e:
28:13:56:09:ba:74:af:9c:00:09:ae:6c:75:23:69:
ed:6c:7b:74:94:1f:ba:85:17:e7:f3:37:41:a7:a0:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:62:CB:48:44:1B:60:51:D4:D1:7F:56:B0:2A:1C:45:FF:B0:85
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/VHtiy0hEG2BR1NF_VrAqHEX_sIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ba:de:c3:0c:07:ea:10:c8:5c:56:2e:dd:8e:53:22:05:3e:
e0:f0:ae:03:fa:20:90:ce:de:94:99:b5:7d:4f:0b:5b:70:fe:
ed:eb:bb:ef:fb:39:1c:0c:52:af:08:23:36:98:2b:b7:c9:87:
ac:b4:63:17:4f:75:60:80:43:3a:d2:55:6c:ae:e3:6e:b8:42:
01:3c:97:01:f4:d1:b1:7b:49:53:f2:11:ab:7a:95:77:a6:bf:
9d:c6:06:c1:3c:87:d3:b6:9b:97:4a:66:13:f3:9f:c4:6a:ca:
91:1d:62:1c:a6:44:d0:45:e7:fc:81:cf:6a:49:39:c0:cc:07:
83:56:67:4e:43:d6:55:e1:5e:ed:f1:71:bd:b8:95:70:d2:ce:
0d:29:7d:71:11:d3:c2:4d:f0:1d:d2:f7:75:c6:bb:55:89:0b:
2d:6f:24:7c:0f:eb:a6:6a:43:99:56:c2:9a:af:40:70:fb:02:
82:51:74:5f:0f:60:eb:9c:27:3a:8a:9b:1e:08:61:4c:32:11:
52:23:ee:3d:30:04:d0:f7:9e:fb:8b:e5:ef:ee:8a:5b:7e:a1:
56:fa:09:c1:48:ee:ed:f7:84:a5:cf:2c:96:cd:7b:e2:58:a0:
70:14:9d:94:cf:0b:fd:89:9b:c7:19:63:07:1e:36:0a:c9:67:
9e:9a:f0:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASRwiHRw9JkkRwJSifAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQwMTAyMDIyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDdiNjJjYjQ4NDQxYjYwNTFkNGQxN2Y1NmIwMmExYzQ1ZmZiMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3xGD1z3VPgsEhS4Lp7ISKAQtlw8
ex+GDQb/BWsvWAtCHB5BsE/iO+259TPDGMAV8BMVvBHQj4c7mHy+UClI1V0XNACJ
z7D6Wrt+I/++HHKxqyUowdptKLFKxpN2zFvIbWex76UuXkcJu7Pg7i+BIFwyN8p3
0ObIYTlAMn62FWEEvqU0axRaV58fkRr6ZFeejZoiSz3uo+1T7igVGP+7V6skoW0+
yVa6unE9ARHIVFcQlh7kBNz/NmQnTmJkKUOFa7xoB6yaerQst7iCEVnrpEvU5isV
RVHkFwmBrx6GYZ4oE1YJunSvnAAJrmx1I2ntbHt0lB+6hRfn8zdBp6C1AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFR7YstIRBtgUdTRf1awKhxF/7CFMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvVkh0aXkwaEVHMkJSMU5GX1ZyQXFIRVhfc0lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXr9MA0G
CSqGSIb3DQEBCwUAA4IBAQA1ut7DDAfqEMhcVi7djlMiBT7g8K4D+iCQzt6UmbV9
TwtbcP7t67vv+zkcDFKvCCM2mCu3yYestGMXT3VggEM60lVsruNuuEIBPJcB9NGx
e0lT8hGrepV3pr+dxgbBPIfTtpuXSmYT85/EasqRHWIcpkTQRef8gc9qSTnAzAeD
VmdOQ9ZV4V7t8XG9uJVw0s4NKX1xEdPCTfAd0vd1xrtViQstbyR8D+umakOZVsKa
r0Bw+wKCUXRfD2DrnCc6ipseCGFMMhFSI+49MATQ9577i+Xv7opbfqFW+gnBSO7t
94SlzyyWzXviWKBwFJ2Uzwv9iZvHGWMHHjYKyWeemvDq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org