Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/a73DCKNk-WZAUNyjZKI7YxP5EN8.roa
File: a73DCKNk-WZAUNyjZKI7YxP5EN8.roa (raw, json)
Hash identifier: Zrgcl+SFbyTEAroQTmcjhTH3kRWwHF192QAbzzAUt3E=
Subject key identifier: 6B:BD:C3:08:A3:64:F9:66:40:50:DC:A3:64:A2:3B:63:13:F9:10:DF
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0188F10328DF17D33CF5899A450DA9A31C84
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/a73DCKNk-WZAUNyjZKI7YxP5EN8.roa
Signing time: Sun 25 Jun 2023 05:24:56 +0000
ROA not before: Sun 25 Jun 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57935
IP address blocks: 185.104.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f1:03:28:df:17:d3:3c:f5:89:9a:45:0d:a9:a3:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jun 25 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bbdc308a364f9664050dca364a23b6313f910df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:b6:cf:f6:17:f6:74:0e:06:42:41:0d:95:
ff:ed:c9:51:35:bf:04:d4:1a:f3:ca:94:eb:3a:04:
6c:8d:75:b0:47:13:76:2b:aa:35:11:7e:df:5d:4a:
ea:bf:3a:63:bd:e6:7c:ee:69:01:5d:ae:a1:bf:65:
74:31:bc:1a:d7:3f:99:13:24:fc:97:c8:56:d4:9c:
c7:69:fb:9b:6c:b3:28:a1:14:b7:d7:cf:6a:e5:92:
0d:ad:61:00:04:a5:51:63:31:ea:28:2c:07:7f:6f:
9e:96:ff:1e:fe:a9:9b:e9:e0:30:92:c5:74:57:71:
ac:71:7a:62:f4:0b:67:eb:25:cc:17:d0:f6:7c:b6:
2e:24:5e:15:dc:30:12:3e:9c:4d:41:2a:00:8a:c5:
2b:bd:76:90:6a:cb:31:98:ca:fb:0a:70:2d:ee:04:
6c:e2:1f:34:0f:e7:a8:38:db:cb:35:eb:e1:8f:5c:
30:1f:16:ad:e8:d8:f0:5c:23:ad:8e:85:37:3a:8f:
a2:92:c2:c0:76:ec:7e:c4:cb:ea:15:aa:76:dc:34:
a5:80:65:5c:a0:6a:15:0a:9c:cd:c9:55:1d:35:5c:
cc:b6:1b:ad:d5:ba:16:ef:e6:59:80:fa:93:e3:5c:
e6:61:fb:38:2d:51:2a:fa:a9:ed:53:9a:d6:50:2f:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:C3:08:A3:64:F9:66:40:50:DC:A3:64:A2:3B:63:13:F9:10:DF
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/a73DCKNk-WZAUNyjZKI7YxP5EN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.189.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ae:e1:2b:28:91:67:0f:1c:28:73:e0:a6:2d:ac:7b:08:dd:
51:17:07:13:c3:e6:7c:a4:8a:cd:32:ed:0c:0a:3b:9f:54:0d:
28:89:39:e8:3f:2f:5a:3c:3b:1a:4c:da:3c:39:26:7c:15:08:
72:f7:1f:e9:b6:ce:a2:f1:37:03:ed:db:4d:0e:e4:7b:7a:37:
0c:e3:ec:b6:78:b0:c3:ea:57:44:e8:a6:43:9c:08:ab:9b:a5:
83:8b:ff:fd:43:7a:a0:29:0f:21:7b:38:24:e9:dd:6e:31:c7:
39:ae:d7:b0:c2:57:bb:de:b0:bd:4a:56:e4:0d:6f:e1:ec:b7:
57:7e:58:33:b9:7f:56:91:c8:b5:c6:ce:86:3e:0c:ea:64:e7:
5f:5a:52:0d:5f:5c:93:7e:a6:02:e6:9c:4a:c5:5f:e6:62:8a:
39:ed:c9:48:96:22:ed:9e:2a:12:e2:89:3c:36:24:54:2c:a7:
ba:13:ee:67:37:e6:b2:87:d2:6b:69:d1:7a:3c:38:96:9f:4d:
dc:c3:1c:6b:e5:5d:99:73:ed:27:d4:4d:a9:00:99:ad:ba:92:
eb:51:1e:11:8d:57:73:c8:1b:f7:f1:99:85:a4:16:f4:a2:de:
c3:e5:03:bc:de:e2:3d:45:59:f9:d6:76:64:23:ec:84:3f:d3:
53:32:df:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjxAyjfF9M89YmaRQ2poxyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz
YTBjZTIwHhcNMjMwNjI1MDUyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmJkYzMwOGEzNjRmOTY2NDA1MGRjYTM2NGEyM2I2MzEzZjkxMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL+2z/YX9nQOBkJBDZX/7clRNb8E
1BrzypTrOgRsjXWwRxN2K6o1EX7fXUrqvzpjveZ87mkBXa6hv2V0Mbwa1z+ZEyT8
l8hW1JzHafubbLMooRS3189q5ZINrWEABKVRYzHqKCwHf2+elv8e/qmb6eAwksV0
V3GscXpi9Atn6yXMF9D2fLYuJF4V3DASPpxNQSoAisUrvXaQassxmMr7CnAt7gRs
4h80D+eoONvLNevhj1wwHxat6NjwXCOtjoU3Oo+iksLAdux+xMvqFap23DSlgGVc
oGoVCpzNyVUdNVzMthut1boW7+ZZgPqT41zmYfs4LVEq+qntU5rWUC8JGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGu9wwijZPlmQFDco2SiO2MT+RDfMB8GA1UdIwQY
MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt
NTZjYzM5ZGI2ZWQ2LzEvYTczRENLTmstV1pBVU55alpLSTdZeFA1RU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2
LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWi9MA0G
CSqGSIb3DQEBCwUAA4IBAQAkruErKJFnDxwoc+CmLax7CN1RFwcTw+Z8pIrNMu0M
CjufVA0oiTnoPy9aPDsaTNo8OSZ8FQhy9x/pts6i8TcD7dtNDuR7ejcM4+y2eLDD
6ldE6KZDnAirm6WDi//9Q3qgKQ8hezgk6d1uMcc5rtewwle73rC9SlbkDW/h7LdX
flgzuX9Wkci1xs6GPgzqZOdfWlINX1yTfqYC5pxKxV/mYoo57clIliLtnioS4ok8
NiRULKe6E+5nN+ayh9JradF6PDiWn03cwxxr5V2Zc+0n1E2pAJmtupLrUR4RjVdz
yBv38ZmFpBb0ot7D5QO83uI9RVn51nZkI+yEP9NTMt8w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org