Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/EoN3DgQROZ5TIKebxQ8xnWM2fU0.roa
File: EoN3DgQROZ5TIKebxQ8xnWM2fU0.roa (raw, json)
Hash identifier: F007O9aQAFKDFymdd2JP65jnDu/K2HOWDRpRDHtjDxc=
Subject key identifier: 12:83:77:0E:04:11:39:9E:53:20:A7:9B:C5:0F:31:9D:63:36:7D:4D
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 018C62B7B4BE05733E6E8B2FEF9D48C3F2FD
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/EoN3DgQROZ5TIKebxQ8xnWM2fU0.roa
Signing time: Wed 13 Dec 2023 10:27:35 +0000
ROA not before: Wed 13 Dec 2023 10:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204778
IP address blocks: 185.120.141.0/24 maxlen: 24
2a13:2180::/48 maxlen: 48
2a13:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Dec 2023 15:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:b7:b4:be:05:73:3e:6e:8b:2f:ef:9d:48:c3:f2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Dec 13 10:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1283770e0411399e5320a79bc50f319d63367d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:68:38:cc:a8:69:9d:08:2a:12:55:9f:21:
8b:84:ba:2e:a3:a8:3f:96:9a:e3:22:d4:5e:51:c7:
54:db:6e:d5:1b:ea:31:48:18:e1:dc:6c:4a:9d:e0:
29:a9:3a:06:8c:af:9f:66:80:d2:ec:b8:6d:51:e2:
8f:bd:31:2d:17:b7:65:6e:c7:55:22:1e:00:61:3c:
06:15:66:34:f8:c0:79:73:d0:d4:33:01:86:37:57:
ee:98:82:92:40:cf:d6:b6:83:cc:c3:a9:29:82:82:
29:64:45:a5:b6:2c:eb:75:cb:7e:a2:8c:c9:14:bc:
4e:d8:ca:67:17:81:94:ea:47:05:7d:43:4f:82:be:
50:00:c7:04:c9:5d:32:eb:b5:d8:21:89:9d:31:09:
ad:12:5f:2c:91:65:7b:a2:f4:b8:cf:cd:73:0d:bd:
13:98:2e:10:93:46:55:13:83:c9:a5:ea:df:b1:66:
1d:52:b6:b4:75:d7:75:dd:e0:29:7d:ce:d8:20:6b:
ce:bf:53:31:8a:f2:7c:d2:c6:58:b5:16:27:a7:64:
60:e6:80:c0:9a:ba:d5:1a:2d:a0:33:da:75:a1:10:
2b:62:e2:ad:e4:2d:ff:2c:86:e3:5e:11:cd:64:39:
64:a5:1d:b4:0d:20:6f:1d:00:ac:0e:f6:8d:e9:a8:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:77:0E:04:11:39:9E:53:20:A7:9B:C5:0F:31:9D:63:36:7D:4D
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/EoN3DgQROZ5TIKebxQ8xnWM2fU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.141.0/24
IPv6:
2a13:2180::/29
Signature Algorithm: sha256WithRSAEncryption
7a:d1:1b:0e:1c:d9:56:ad:c8:2a:de:a1:7d:9a:82:a6:52:91:
4f:e0:1a:ba:12:ca:46:bf:20:b0:f3:1c:6a:ce:3e:f5:e0:1d:
04:66:b5:d7:5a:67:4e:8f:9c:03:b6:27:01:46:2e:c3:26:55:
c7:09:5c:52:18:ad:e6:54:45:f5:14:9e:35:6c:4b:74:67:5e:
61:63:76:63:82:7a:a7:b9:c5:dc:20:e8:31:24:f4:91:79:80:
bf:ed:b7:82:a9:72:b0:d3:07:01:b1:97:54:b5:8d:a5:27:45:
ae:04:f2:9d:58:c9:c9:39:50:9d:26:89:2a:dd:a2:1a:02:0b:
8b:0e:85:6e:54:19:f0:b0:75:44:85:60:e8:68:ba:1a:a7:9a:
d5:fa:5c:ad:11:b8:49:45:57:41:63:b3:b0:82:07:e1:f3:8c:
d8:c4:74:7a:23:19:22:cc:7b:38:3b:e3:d4:dd:8a:98:9e:0a:
67:3e:b2:c3:98:28:a4:31:41:6b:8f:4a:d6:73:6c:16:9d:ed:
5b:4d:e9:f7:1c:52:11:e7:e3:02:1a:15:1f:d4:50:02:ef:77:
61:08:73:f6:af:a1:f0:f3:85:1d:e2:7d:22:a1:d0:c5:04:f8:
f2:51:80:a5:d7:0f:75:63:11:ea:0c:00:ca:b7:d9:6d:6e:af:
9a:13:da:1e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYxit7S+BXM+bosv751Iw/L9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx
NDRiYjYwHhcNMjMxMjEzMTAyNzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjgzNzcwZTA0MTEzOTllNTMyMGE3OWJjNTBmMzE5ZDYzMzY3ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSloOMyoaZ0IKhJVnyGLhLouo6g/
lprjItReUcdU227VG+oxSBjh3GxKneApqToGjK+fZoDS7LhtUeKPvTEtF7dlbsdV
Ih4AYTwGFWY0+MB5c9DUMwGGN1fumIKSQM/WtoPMw6kpgoIpZEWltizrdct+oozJ
FLxO2MpnF4GU6kcFfUNPgr5QAMcEyV0y67XYIYmdMQmtEl8skWV7ovS4z81zDb0T
mC4Qk0ZVE4PJperfsWYdUra0ddd13eApfc7YIGvOv1MxivJ80sZYtRYnp2Rg5oDA
mrrVGi2gM9p1oRArYuKt5C3/LIbjXhHNZDlkpR20DSBvHQCsDvaN6ahNzwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBKDdw4EETmeUyCnm8UPMZ1jNn1NMB8GA1UdIwQY
MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt
MmY3ZTUyZmI4YmQzLzEvRW9OM0RnUVJPWjVUSUtlYnhROHhuV00yZlUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz
LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXiNMA0E
AgACMAcDBQMqEyGAMA0GCSqGSIb3DQEBCwUAA4IBAQB60RsOHNlWrcgq3qF9moKm
UpFP4Bq6EspGvyCw8xxqzj714B0EZrXXWmdOj5wDticBRi7DJlXHCVxSGK3mVEX1
FJ41bEt0Z15hY3ZjgnqnucXcIOgxJPSReYC/7beCqXKw0wcBsZdUtY2lJ0WuBPKd
WMnJOVCdJokq3aIaAguLDoVuVBnwsHVEhWDoaLoap5rV+lytEbhJRVdBY7Owggfh
84zYxHR6IxkizHs4O+PU3YqYngpnPrLDmCikMUFrj0rWc2wWne1bTen3HFIR5+MC
GhUf1FAC73dhCHP2r6Hw84Ud4n0iodDFBPjyUYCl1w91YxHqDADKt9ltbq+aE9oe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:38 2024 by rpki-client on console-ams.rpki-client.org