Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/VG18Y8ej-OlTGDr69AI8iykCC-M.roa
File: VG18Y8ej-OlTGDr69AI8iykCC-M.roa (raw, json)
Hash identifier: BJTNi2ELDmuZqMCSQlbBWuwddCj3byxqhw4TRgf1A8Y=
Subject key identifier: 54:6D:7C:63:C7:A3:F8:E9:53:18:3A:FA:F4:02:3C:8B:29:02:0B:E3
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 018DA2C209ED3B24F902A192CDC98D665936
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/VG18Y8ej-OlTGDr69AI8iykCC-M.roa
Signing time: Tue 13 Feb 2024 13:57:21 +0000
ROA not before: Tue 13 Feb 2024 13:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211090
IP address blocks: 185.172.230.0/24 maxlen: 24
185.172.231.0/24 maxlen: 24
2a0b:81c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Feb 2024 16:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:c2:09:ed:3b:24:f9:02:a1:92:cd:c9:8d:66:59:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Feb 13 13:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=546d7c63c7a3f8e953183afaf4023c8b29020be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:20:81:a9:c8:c7:b1:ae:a9:c1:fb:72:de:
59:d1:a7:12:00:5c:72:2e:2e:3e:ad:41:78:1e:c2:
cc:14:11:6a:f9:08:6e:ac:69:31:e3:57:e1:db:ae:
cb:51:1f:a8:a6:f4:f7:f5:c2:c3:78:2f:ef:38:e9:
98:14:5d:6e:68:b9:18:e8:0e:71:f2:31:a8:93:f8:
09:a0:b5:5e:51:ea:1d:3a:64:f6:e6:8a:a5:a4:e8:
59:6c:ae:a4:3f:3d:36:a7:26:be:95:25:08:74:3c:
b5:3d:5d:1a:95:e8:86:6d:47:81:cc:c6:36:cf:a2:
d7:66:27:d1:a0:a0:53:24:e1:5c:40:c1:02:3d:e0:
b1:3c:5a:9f:38:5d:d2:56:13:87:5f:73:19:d8:2b:
f9:c1:a1:16:03:fa:43:67:be:7f:cd:9c:0d:17:86:
5e:24:1e:8b:ee:8b:44:bc:84:0c:24:c2:81:c4:d1:
80:67:e7:35:04:4c:c8:b5:9e:87:3f:20:38:13:a8:
35:ac:0c:65:de:66:35:e5:4e:58:42:39:f4:a2:b1:
aa:0e:31:9c:77:a3:97:59:40:1e:b5:4c:a6:d1:b9:
96:aa:57:56:f9:bb:53:1b:1f:67:1b:38:89:1c:3c:
d6:dc:6c:d1:08:82:88:5b:03:90:db:e9:b5:8f:55:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:7C:63:C7:A3:F8:E9:53:18:3A:FA:F4:02:3C:8B:29:02:0B:E3
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/VG18Y8ej-OlTGDr69AI8iykCC-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.230.0/23
IPv6:
2a0b:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:7c:1f:e0:ca:1c:d7:e4:85:45:b6:2e:e1:c5:8e:ce:1a:90:
02:cc:df:7b:fe:ec:d0:fd:08:99:98:7e:8a:3d:e3:53:ed:a8:
38:6a:98:7d:fb:8e:1a:07:25:a0:5e:eb:eb:3c:ab:94:6c:70:
36:4d:e5:64:59:c5:e5:4b:64:ac:e5:24:b9:ec:d1:e5:7a:e2:
8c:1b:b6:62:02:34:1f:35:61:4e:5a:a9:fb:96:6e:c5:fc:c8:
12:af:cb:e2:31:db:de:2d:ea:20:30:e4:9a:dc:db:94:5f:6a:
31:fe:2f:2d:12:46:77:67:30:ed:18:84:33:d9:c8:39:00:85:
9a:70:97:37:eb:ff:d2:37:3f:cb:18:d6:35:d3:d6:31:5f:3b:
c8:a2:eb:8d:4a:94:18:48:8a:1d:a2:7f:5b:e5:e0:60:f1:45:
50:47:a7:bb:36:f4:28:ce:18:1c:5d:ba:b3:f3:b9:1a:66:e4:
cb:a1:5b:f8:e0:b5:64:eb:5e:ba:fa:80:c9:9b:6b:8b:c9:2b:
e2:30:ba:af:40:df:4b:7c:ff:1f:7d:cc:48:c2:87:e6:05:39:
39:e0:6e:6e:f9:bd:0a:04:7e:6c:a3:d5:38:3a:cc:1f:55:ee:
17:1d:e9:f1:3c:70:f9:e1:7a:45:7f:2c:f5:14:78:40:d7:9f:
a3:4c:dc:9e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY2iwgntOyT5AqGSzcmNZlk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjQwMjEzMTM1NzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDZkN2M2M2M3YTNmOGU5NTMxODNhZmFmNDAyM2M4YjI5MDIwYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RIgganIx7GuqcH7ct5Z0acSAFxy
Li4+rUF4HsLMFBFq+QhurGkx41fh267LUR+opvT39cLDeC/vOOmYFF1uaLkY6A5x
8jGok/gJoLVeUeodOmT25oqlpOhZbK6kPz02pya+lSUIdDy1PV0aleiGbUeBzMY2
z6LXZifRoKBTJOFcQMECPeCxPFqfOF3SVhOHX3MZ2Cv5waEWA/pDZ75/zZwNF4Ze
JB6L7otEvIQMJMKBxNGAZ+c1BEzItZ6HPyA4E6g1rAxl3mY15U5YQjn0orGqDjGc
d6OXWUAetUym0bmWqldW+btTGx9nGziJHDzW3GzRCIKIWwOQ2+m1j1Ug2wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFRtfGPHo/jpUxg6+vQCPIspAgvjMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvVkcxOFk4ZWotT2xUR0RyNjlBSThpeWtDQy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuazmMA0E
AgACMAcDBQMqC4HAMA0GCSqGSIb3DQEBCwUAA4IBAQB/fB/gyhzX5IVFti7hxY7O
GpACzN97/uzQ/QiZmH6KPeNT7ag4aph9+44aByWgXuvrPKuUbHA2TeVkWcXlS2Ss
5SS57NHleuKMG7ZiAjQfNWFOWqn7lm7F/MgSr8viMdveLeogMOSa3NuUX2ox/i8t
EkZ3ZzDtGIQz2cg5AIWacJc36//SNz/LGNY109YxXzvIouuNSpQYSIodon9b5eBg
8UVQR6e7NvQozhgcXbqz87kaZuTLoVv44LVk6166+oDJm2uLySviMLqvQN9LfP8f
fcxIwofmBTk54G5u+b0KBH5so9U4OswfVe4XHenxPHD54XpFfyz1FHhA15+jTNye
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:30 2024 by rpki-client on console-ams.rpki-client.org