Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/OT2pqgFhUJ_iG4JIE6enLQ-MLo0.roa
File: OT2pqgFhUJ_iG4JIE6enLQ-MLo0.roa (raw, json)
Hash identifier: QNnCIXSiwhM9jUTrXNEZo5i0u3DQ+0/wMeu76mTmvio=
Subject key identifier: 39:3D:A9:AA:01:61:50:9F:E2:1B:82:48:13:A7:A7:2D:0F:8C:2E:8D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 018571832FC684503B40C5A868D8BAE61ED0
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/OT2pqgFhUJ_iG4JIE6enLQ-MLo0.roa
Signing time: Mon 02 Jan 2023 08:05:00 +0000
ROA not before: Mon 02 Jan 2023 08:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212140
IP address blocks: 185.205.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:2f:c6:84:50:3b:40:c5:a8:68:d8:ba:e6:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Jan 2 08:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=393da9aa0161509fe21b824813a7a72d0f8c2e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:c9:b4:5f:12:49:e2:0d:e2:da:5d:3d:ce:
4d:40:9d:66:e5:55:80:bd:e8:90:fa:d6:0e:ca:07:
fb:e4:64:ba:03:00:5b:8c:70:b4:b0:0c:c5:0f:bc:
b3:de:02:0b:a4:a5:7e:a7:cc:a7:12:6c:83:f5:d3:
80:9f:9f:cf:38:dd:47:a6:60:a0:10:60:fc:5c:7e:
be:78:19:5e:8d:44:a5:c5:0e:8b:10:33:e3:30:81:
20:cc:3a:ce:45:fe:13:c3:11:e4:62:d5:c8:28:de:
b5:21:bb:f5:d2:65:2a:aa:a3:58:c4:62:ee:23:5b:
bc:48:f2:5f:c0:b6:e8:db:c8:dd:71:e0:bd:db:ea:
97:81:ce:ec:c3:31:d3:30:49:94:ea:7d:86:81:c8:
5c:fe:a4:64:3a:4d:f2:ed:53:29:17:26:65:eb:d3:
19:25:47:c8:ed:09:f8:88:b4:fc:5b:8f:0b:70:24:
7e:c2:78:e0:09:f2:29:a3:90:71:31:79:01:30:d5:
12:ca:87:95:36:cd:27:cc:99:06:ab:33:df:4c:23:
88:81:dd:7f:68:e0:18:75:b0:a9:ab:32:cb:59:d6:
d0:14:bf:8e:c5:1d:50:e9:a7:df:47:2d:d3:60:01:
5a:cf:2f:0a:86:2e:d3:70:04:e9:2b:e2:e5:7c:5f:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:A9:AA:01:61:50:9F:E2:1B:82:48:13:A7:A7:2D:0F:8C:2E:8D
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/OT2pqgFhUJ_iG4JIE6enLQ-MLo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.71.0/24
Signature Algorithm: sha256WithRSAEncryption
78:13:16:e9:60:c9:1e:2c:cc:9f:b5:ec:80:3a:4f:25:2a:07:
83:e0:46:b8:fe:b4:4c:f1:00:69:08:8f:8f:44:9c:25:19:1a:
52:54:28:a0:3b:39:cf:d6:e1:79:5d:f6:09:f3:4c:e2:ca:65:
07:39:d2:89:58:98:7c:c0:62:da:57:01:14:05:57:12:01:85:
83:7b:c8:59:77:df:8f:46:9d:a8:66:23:93:aa:20:66:5f:ba:
b2:84:ce:18:e0:da:0c:88:3f:23:a3:c7:2b:f4:c2:00:51:f4:
cd:25:2d:7d:09:3c:b1:f4:25:c1:29:10:a2:ae:ae:84:2b:fb:
58:56:3c:a2:07:7a:a3:45:cc:ff:b0:4b:8e:2a:0b:27:87:d3:
e0:4f:cf:80:64:d9:8a:d2:5b:57:dc:ba:5d:fe:f9:55:59:ad:
a4:f4:27:34:57:32:79:cc:b2:f1:e4:9c:47:a6:1c:11:22:21:
fc:75:59:fc:0c:fa:08:fa:d0:c8:3e:7f:9c:5a:14:49:ed:ff:
4b:e4:58:e0:93:e4:87:a8:54:ea:cc:e4:72:96:13:56:e4:7c:
a1:55:f5:e9:2c:11:d6:55:7b:35:02:f6:d7:d6:8b:b7:e8:90:
a4:69:b3:dd:bc:aa:34:bd:f0:f4:c2:97:9f:f8:23:fe:ef:9a:
d3:44:8f:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxgy/GhFA7QMWoaNi65h7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTNjZjExNGJlNGZhNGM0ZmY3NmIyMThmYWQ1MGU1MTcz
OTE2MGQwHhcNMjMwMTAyMDgwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTNkYTlhYTAxNjE1MDlmZTIxYjgyNDgxM2E3YTcyZDBmOGMyZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArozJtF8SSeIN4tpdPc5NQJ1m5VWA
veiQ+tYOygf75GS6AwBbjHC0sAzFD7yz3gILpKV+p8ynEmyD9dOAn5/PON1HpmCg
EGD8XH6+eBlejUSlxQ6LEDPjMIEgzDrORf4TwxHkYtXIKN61Ibv10mUqqqNYxGLu
I1u8SPJfwLbo28jdceC92+qXgc7swzHTMEmU6n2Ggchc/qRkOk3y7VMpFyZl69MZ
JUfI7Qn4iLT8W48LcCR+wnjgCfIpo5BxMXkBMNUSyoeVNs0nzJkGqzPfTCOIgd1/
aOAYdbCpqzLLWdbQFL+OxR1Q6affRy3TYAFazy8Khi7TcATpK+LlfF9G4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDk9qaoBYVCf4huCSBOnpy0PjC6NMB8GA1UdIwQY
MBaAFISjzxFL5PpMT/drIY+tUOUXORYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUt
NTM5MzI5YmVkNDZlLzEvT1QycHFnRmhVSl9pRzRKSUU2ZW5MUS1NTG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUtNTM5MzI5YmVkNDZl
LzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc1HMA0G
CSqGSIb3DQEBCwUAA4IBAQB4ExbpYMkeLMyfteyAOk8lKgeD4Ea4/rRM8QBpCI+P
RJwlGRpSVCigOznP1uF5XfYJ80ziymUHOdKJWJh8wGLaVwEUBVcSAYWDe8hZd9+P
Rp2oZiOTqiBmX7qyhM4Y4NoMiD8jo8cr9MIAUfTNJS19CTyx9CXBKRCirq6EK/tY
VjyiB3qjRcz/sEuOKgsnh9PgT8+AZNmK0ltX3Lpd/vlVWa2k9Cc0VzJ5zLLx5JxH
phwRIiH8dVn8DPoI+tDIPn+cWhRJ7f9L5Fjgk+SHqFTqzORylhNW5HyhVfXpLBHW
VXs1AvbX1ou36JCkabPdvKo0vfD0wpef+CP+75rTRI96
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org