Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/1-SjdxNQEDIIIy_ctSyWOGc26xZ0.roa
File: 1-SjdxNQEDIIIy_ctSyWOGc26xZ0.roa (raw, json)
Hash identifier: sfZlF0hVmEOGlb3eEjQ47KFhUQHWUBLz1DTBlpz7cRQ=
Subject key identifier: F9:28:DD:C4:D4:04:0C:82:08:CB:F7:2D:4B:25:8E:19:CD:BA:C5:9D
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 018C537539C8ED9188A67358D2A473C99030
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/1-SjdxNQEDIIIy_ctSyWOGc26xZ0.roa
Signing time: Sun 10 Dec 2023 11:20:40 +0000
ROA not before: Sun 10 Dec 2023 11:20:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200402
IP address blocks: 185.84.56.0/22 maxlen: 24
2a03:6ee0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:75:39:c8:ed:91:88:a6:73:58:d2:a4:73:c9:90:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Dec 10 11:20:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f928ddc4d4040c8208cbf72d4b258e19cdbac59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:ff:de:15:62:d4:de:b8:91:1c:62:07:6e:
3d:77:4d:05:7f:45:54:ee:8d:d0:d8:0d:99:41:0c:
51:6a:e8:8b:7a:4f:0c:7f:d4:d6:64:d1:9a:e2:79:
e9:f8:b8:03:d3:ba:cd:f0:e3:4c:f9:b8:99:95:ae:
d5:e1:8d:5b:e5:66:2e:4f:cd:b5:0e:ad:94:47:9c:
ca:a3:38:b7:ab:8a:e9:6f:bb:de:96:55:e3:b9:b4:
79:2b:35:14:2a:f1:ab:04:8e:90:15:ab:b2:17:fc:
5d:9c:02:5a:84:ee:de:80:c3:80:51:e9:df:00:e5:
a4:04:cc:c8:b4:0b:74:7a:87:5a:c3:98:c1:c8:8f:
bb:f4:9c:ed:41:2f:c7:6f:c9:b0:eb:0a:c9:38:7f:
cb:03:16:f5:45:26:94:eb:41:15:e5:24:41:9f:0c:
c3:a9:6a:8b:4a:08:ef:ec:4b:9a:44:32:e9:79:68:
e3:46:23:21:cc:54:ab:d8:fb:03:0d:46:d1:fe:ff:
d6:5f:f0:95:e1:5d:82:fd:17:9e:b2:5e:ce:f5:4b:
03:00:e7:ab:81:ac:8b:be:57:5f:23:de:61:c6:1d:
45:ae:56:39:92:75:c0:ed:52:b3:da:4f:d0:53:59:
aa:df:8c:e8:00:7e:08:85:f6:8d:b9:bb:76:c6:66:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:DD:C4:D4:04:0C:82:08:CB:F7:2D:4B:25:8E:19:CD:BA:C5:9D
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/1-SjdxNQEDIIIy_ctSyWOGc26xZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.56.0/22
IPv6:
2a03:6ee0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:b7:bc:ea:ed:ca:8b:d9:c7:c1:9a:91:e0:30:b0:b3:b5:99:
20:6d:4f:94:02:a7:11:b5:65:28:da:56:8b:01:08:bd:ce:ca:
79:21:60:0e:5e:e5:d3:4f:68:e8:f8:64:df:1b:57:86:7c:cb:
1b:71:f6:69:55:f9:46:49:5a:67:23:7c:21:39:2b:1a:ad:ba:
79:d4:f9:84:a2:79:0a:c3:64:49:86:dd:95:ac:62:d3:51:0c:
f3:5c:20:15:51:ee:86:d3:56:c6:d2:5f:c3:b6:8b:87:be:f0:
38:b6:b2:d0:23:c6:8c:0f:ca:be:52:f0:ec:60:f2:9d:ff:4b:
6a:a1:b3:6c:d0:7d:37:00:8a:c0:bc:9d:a7:f5:d6:e7:94:33:
2c:98:1e:f9:fa:76:71:2b:06:5c:ab:e1:6c:1d:7e:55:cf:41:
df:ad:37:80:90:fc:03:7b:b9:40:43:8d:35:1c:d9:60:6d:3b:
b1:a0:5a:9f:b4:54:25:06:0f:16:f2:59:de:e7:dd:93:8d:ff:
97:60:82:1a:e5:9d:dd:d9:af:06:78:7e:85:16:50:e8:fa:b9:
92:42:ca:a9:d2:14:50:17:fd:87:a8:1b:34:77:e0:c9:9b:34:
58:7d:6b:d2:e2:c9:42:70:4a:c5:9d:95:ac:a7:b6:64:52:32:
94:b8:5e:4c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYxTdTnI7ZGIpnNY0qRzyZAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0
MTdjYWEwHhcNMjMxMjEwMTEyMDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTI4ZGRjNGQ0MDQwYzgyMDhjYmY3MmQ0YjI1OGUxOWNkYmFjNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgv/3hVi1N64kRxiB249d00Ff0VU
7o3Q2A2ZQQxRauiLek8Mf9TWZNGa4nnp+LgD07rN8ONM+biZla7V4Y1b5WYuT821
Dq2UR5zKozi3q4rpb7vellXjubR5KzUUKvGrBI6QFauyF/xdnAJahO7egMOAUenf
AOWkBMzItAt0eodaw5jByI+79JztQS/Hb8mw6wrJOH/LAxb1RSaU60EV5SRBnwzD
qWqLSgjv7EuaRDLpeWjjRiMhzFSr2PsDDUbR/v/WX/CV4V2C/Reesl7O9UsDAOer
gayLvldfI95hxh1FrlY5knXA7VKz2k/QU1mq34zoAH4IhfaNubt2xmYHrwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPko3cTUBAyCCMv3LUsljhnNusWdMB8GA1UdIwQY
MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt
MmQyNmYxYjU2ZTIwLzEvMS1TamR4TlFFRElJSXlfY3RTeVdPR2MyNnhaMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvNjhiNTIxLWM3OTAtNDk1Ny05ZTUyLTJkMjZmMWI1NmUy
MC8xL3dPdG1pM05hR0RrM1RrajNuTEpEYmI5QmZLby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlUODAN
BAIAAjAHAwUAKgNu4DANBgkqhkiG9w0BAQsFAAOCAQEAm7e86u3Ki9nHwZqR4DCw
s7WZIG1PlAKnEbVlKNpWiwEIvc7KeSFgDl7l009o6Phk3xtXhnzLG3H2aVX5Rkla
ZyN8ITkrGq26edT5hKJ5CsNkSYbdlaxi01EM81wgFVHuhtNWxtJfw7aLh77wOLay
0CPGjA/KvlLw7GDynf9LaqGzbNB9NwCKwLydp/XW55QzLJge+fp2cSsGXKvhbB1+
Vc9B3603gJD8A3u5QEONNRzZYG07saBan7RUJQYPFvJZ3ufdk43/l2CCGuWd3dmv
Bnh+hRZQ6Pq5kkLKqdIUUBf9h6gbNHfgyZs0WH1r0uLJQnBKxZ2VrKe2ZFIylLhe
TA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:54 2024 by rpki-client on console-fra.rpki-client.org