Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/bQT5dBIX_z36R9Wo1TpzQ5FM5hs.roa
File: bQT5dBIX_z36R9Wo1TpzQ5FM5hs.roa (raw, json)
Hash identifier: u2wkd7UgFDE7cF8x3k0n2YL8lC4X+7YlwXuGrgHitBM=
Subject key identifier: 6D:04:F9:74:12:17:FF:3D:FA:47:D5:A8:D5:3A:73:43:91:4C:E6:1B
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 018572B43E6EE86ADDD147951703B59FDEC2
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/bQT5dBIX_z36R9Wo1TpzQ5FM5hs.roa
Signing time: Mon 02 Jan 2023 13:38:13 +0000
ROA not before: Mon 02 Jan 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3e:6e:e8:6a:dd:d1:47:95:17:03:b5:9f:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jan 2 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d04f9741217ff3dfa47d5a8d53a7343914ce61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:77:bc:3a:82:54:9d:6a:a9:ac:88:b3:00:87:
25:0a:cd:86:ff:43:1d:2f:87:19:ec:a9:5f:07:68:
60:71:86:89:8b:d6:b7:13:70:de:e8:90:43:ff:c1:
2e:e2:61:6c:49:ca:8a:a8:69:99:77:e0:7d:fb:52:
b5:95:f6:0e:d4:fb:d8:22:4f:8f:15:aa:2b:9f:44:
eb:d6:a2:3f:fa:c6:29:5b:f3:24:e8:e0:fa:cd:a8:
d1:bd:34:d4:cd:d2:61:8b:10:ab:d2:1c:de:1f:03:
34:15:f0:e3:37:c1:72:90:22:90:c8:a0:69:fc:6c:
1b:51:ae:e1:b3:0e:ae:83:c2:96:d7:c2:37:75:17:
8a:a3:4d:e4:df:95:85:46:9a:3f:11:16:02:62:58:
9b:f5:f1:0e:07:c6:36:22:3d:2d:a6:61:5c:00:2b:
c3:cd:94:b0:1e:83:47:cd:30:32:4d:74:a3:0a:c3:
59:ef:50:65:4a:bb:ec:9f:af:e8:2b:ee:4b:64:b2:
37:7e:78:fd:cb:79:aa:f0:55:36:8a:e6:9f:d0:dd:
96:9e:88:70:0a:9e:36:ba:d0:dc:6d:7f:93:57:72:
34:7b:18:06:0e:96:d4:eb:ea:6c:90:03:a9:b4:41:
e0:a9:ef:9c:d9:c8:2f:40:06:f9:0b:f0:59:03:ce:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:04:F9:74:12:17:FF:3D:FA:47:D5:A8:D5:3A:73:43:91:4C:E6:1B
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/bQT5dBIX_z36R9Wo1TpzQ5FM5hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:50:f6:a7:5d:41:52:0c:04:ec:be:c4:60:29:d3:ab:3b:44:
ae:60:51:cd:5e:2b:62:ae:59:56:db:5c:c9:0e:54:40:74:3c:
71:1b:cd:89:52:65:c4:ab:f7:cd:e4:17:eb:99:c9:86:27:bf:
e4:80:8d:1b:cf:7f:11:ff:82:c1:33:d6:74:0a:39:f2:7f:32:
4c:dc:7c:86:b8:6a:34:71:46:bd:a4:66:f2:ec:9b:45:75:35:
d4:8d:9f:46:5e:f3:a4:fa:66:40:00:f5:83:45:a2:bb:1b:ef:
ba:d0:67:9f:38:6d:f0:76:58:a6:f3:aa:37:e0:d0:33:44:ff:
23:41:a3:5a:bc:bc:2b:d8:1b:ee:97:ae:d4:04:40:45:8b:63:
82:a9:67:0f:c6:e5:59:6b:9a:b7:07:ca:d8:ce:c9:46:9b:0a:
37:9f:b8:46:d0:fa:fe:50:ac:5b:f0:de:aa:77:ba:d0:6c:33:
07:b0:11:5a:bf:de:3c:2d:0d:e6:18:aa:2b:73:95:a4:50:fd:
2f:6a:26:17:1c:e5:eb:b5:72:78:94:72:d6:49:89:ae:a2:1a:
85:c1:c8:50:80:f6:29:80:19:8d:3b:2f:a8:76:fc:9d:56:1e:
8a:3c:20:6b:13:fa:bd:6d:34:ff:0d:22:d6:25:e0:18:c1:3b:
f4:bf:71:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVytD5u6Grd0UeVFwO1n97CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj
ZTAzOTEwHhcNMjMwMTAyMTMzODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDA0Zjk3NDEyMTdmZjNkZmE0N2Q1YThkNTNhNzM0MzkxNGNlNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHe8OoJUnWqprIizAIclCs2G/0Md
L4cZ7KlfB2hgcYaJi9a3E3De6JBD/8Eu4mFsScqKqGmZd+B9+1K1lfYO1PvYIk+P
Faorn0Tr1qI/+sYpW/Mk6OD6zajRvTTUzdJhixCr0hzeHwM0FfDjN8FykCKQyKBp
/GwbUa7hsw6ug8KW18I3dReKo03k35WFRpo/ERYCYlib9fEOB8Y2Ij0tpmFcACvD
zZSwHoNHzTAyTXSjCsNZ71BlSrvsn6/oK+5LZLI3fnj9y3mq8FU2iuaf0N2Wnohw
Cp42utDcbX+TV3I0exgGDpbU6+pskAOptEHgqe+c2cgvQAb5C/BZA87maQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0E+XQSF/89+kfVqNU6c0ORTOYbMB8GA1UdIwQY
MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt
OWI2NTg5MGUyZWFlLzEvYlFUNWRCSVhfejM2UjlXbzFUcHpRNUZNNWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl
LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudFQMA0G
CSqGSIb3DQEBCwUAA4IBAQBLUPanXUFSDATsvsRgKdOrO0SuYFHNXitirllW21zJ
DlRAdDxxG82JUmXEq/fN5BfrmcmGJ7/kgI0bz38R/4LBM9Z0CjnyfzJM3HyGuGo0
cUa9pGby7JtFdTXUjZ9GXvOk+mZAAPWDRaK7G++60GefOG3wdlim86o34NAzRP8j
QaNavLwr2Bvul67UBEBFi2OCqWcPxuVZa5q3B8rYzslGmwo3n7hG0Pr+UKxb8N6q
d7rQbDMHsBFav948LQ3mGKorc5WkUP0vaiYXHOXrtXJ4lHLWSYmuohqFwchQgPYp
gBmNOy+odvydVh6KPCBrE/q9bTT/DSLWJeAYwTv0v3GL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org