Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/Fld6UaNyVNhed47mp4q9bHBWkiw.roa
File: Fld6UaNyVNhed47mp4q9bHBWkiw.roa (raw, json)
Hash identifier: JCh6R/MGkrGEAqwXacBKYMfNh6/FgxjsdrOZD2Tv6Q4=
Subject key identifier: 16:57:7A:51:A3:72:54:D8:5E:77:8E:E6:A7:8A:BD:6C:70:56:92:2C
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 01856BE59A1566D8950213715FD9B41A9E0E
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/Fld6UaNyVNhed47mp4q9bHBWkiw.roa
Signing time: Sun 01 Jan 2023 05:54:47 +0000
ROA not before: Sun 01 Jan 2023 05:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57335
IP address blocks: 185.203.206.0/24 maxlen: 24
185.203.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:9a:15:66:d8:95:02:13:71:5f:d9:b4:1a:9e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 05:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16577a51a37254d85e778ee6a78abd6c7056922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:4e:83:fb:73:c9:b3:66:3d:5c:21:fd:79:
1f:f1:9f:ac:e6:be:f3:bf:87:53:32:3f:c3:de:0c:
62:65:5a:c3:55:ad:0c:da:44:e4:22:0e:20:4e:a4:
3c:7c:c1:25:c3:82:68:7e:db:6f:d8:79:89:67:a1:
7e:1d:bc:b2:80:b4:24:c1:49:73:1c:be:57:49:82:
70:9a:28:e5:6f:70:71:bd:8e:6f:9b:8c:56:78:aa:
4f:60:eb:8e:6f:e4:73:a4:c5:fe:78:98:68:e3:13:
b8:f6:ff:f3:58:53:30:5f:9e:87:e7:63:98:1e:1d:
a0:17:34:b8:b5:ca:25:9a:8d:24:2c:76:87:a2:c9:
84:3d:1b:68:ed:b3:ac:e0:33:65:f2:5d:92:4e:35:
94:0e:bd:db:2b:1f:bb:43:98:e9:9e:ad:d8:32:e4:
6d:12:68:a9:47:62:11:91:54:9e:4c:f3:e1:ef:2d:
90:eb:d0:62:69:f4:6b:9c:a5:61:3a:52:22:6f:cf:
ef:29:59:06:d7:78:0e:42:c7:a5:a9:ee:69:28:69:
ed:11:68:8f:91:a8:ee:a8:f5:29:d1:de:a1:d5:0b:
9c:74:6d:9e:05:9f:39:25:cb:f3:f9:ac:a9:09:44:
d1:a0:1d:16:15:c5:67:c8:5b:96:20:b1:d6:7b:51:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:7A:51:A3:72:54:D8:5E:77:8E:E6:A7:8A:BD:6C:70:56:92:2C
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/Fld6UaNyVNhed47mp4q9bHBWkiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.204.0-185.203.206.255
Signature Algorithm: sha256WithRSAEncryption
ac:72:6c:34:a9:3b:c4:af:58:d0:f3:d1:c5:3d:2b:bd:92:e9:
79:86:9a:be:bf:2d:21:06:a7:4d:84:92:9c:10:28:f0:4d:16:
1f:2e:dc:4a:cd:b4:d7:b3:b5:77:91:3d:74:a1:f9:b0:9e:dd:
c9:ca:aa:be:3f:69:64:12:10:28:75:ed:38:57:a9:2d:01:06:
81:1d:f1:c2:b2:c4:b4:10:72:38:4e:72:84:d2:01:1d:5b:f3:
2c:59:48:34:31:b5:e6:2a:9e:db:fa:27:94:0d:ba:63:d3:a5:
07:a1:ed:46:f7:e7:f6:7d:0d:a0:b3:ef:3b:b7:89:b4:01:c0:
8a:ee:2b:d1:6e:63:8c:22:fc:cc:60:f0:8b:82:b6:73:0e:ba:
16:a5:b9:a8:ef:c6:36:2d:70:5f:d2:c7:70:d1:f0:5b:1d:e3:
81:33:b8:29:96:40:af:f1:75:07:20:91:3e:84:70:b4:55:61:
71:88:07:50:c8:d5:ed:8e:12:12:70:ea:d1:fc:59:d4:52:92:
56:8e:94:d3:3f:84:a7:32:d5:f6:9c:be:5b:b0:fe:5c:20:71:
7a:93:2f:d8:23:3a:f4:b7:6d:81:8c:20:07:e4:52:fb:02:24:
57:83:37:bd:b3:c7:11:63:c7:11:f4:0a:89:ac:4b:16:fe:78:
6d:e2:6a:36
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVr5ZoVZtiVAhNxX9m0Gp4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWI2NjRjOTJiM2U3MjEwYzJiMGVkNDUzYzY0ZWE3ZjVl
ODc2ZjcwHhcNMjMwMTAxMDU1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjU3N2E1MWEzNzI1NGQ4NWU3NzhlZTZhNzhhYmQ2YzcwNTY5MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAVOg/tzybNmPVwh/Xkf8Z+s5r7z
v4dTMj/D3gxiZVrDVa0M2kTkIg4gTqQ8fMElw4Jofttv2HmJZ6F+HbyygLQkwUlz
HL5XSYJwmijlb3BxvY5vm4xWeKpPYOuOb+RzpMX+eJho4xO49v/zWFMwX56H52OY
Hh2gFzS4tcolmo0kLHaHosmEPRto7bOs4DNl8l2STjWUDr3bKx+7Q5jpnq3YMuRt
EmipR2IRkVSeTPPh7y2Q69BiafRrnKVhOlIib8/vKVkG13gOQselqe5pKGntEWiP
kajuqPUp0d6h1QucdG2eBZ85Jcvz+aypCUTRoB0WFcVnyFuWILHWe1EvfQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBZXelGjclTYXneO5qeKvWxwVpIsMB8GA1UdIwQY
MBaAFOVbZkySs+chDCsO1FPGTqf16Hb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZ0bVRKS3o1eUVNS3c3VVU4Wk9wX1hvZHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZDQxNGUtMDAwOS00Yzc2LWFhYTgt
MGNmNGNiMTM2ZTE2LzEvRmxkNlVhTnlWTmhlZDQ3bXA0cTliSEJXa2l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZDQxNGUtMDAwOS00Yzc2LWFhYTgtMGNmNGNiMTM2ZTE2
LzEvNVZ0bVRKS3o1eUVNS3c3VVU4Wk9wX1hvZHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5y8wD
BAC5y84wDQYJKoZIhvcNAQELBQADggEBAKxybDSpO8SvWNDz0cU9K72S6XmGmr6/
LSEGp02EkpwQKPBNFh8u3ErNtNeztXeRPXSh+bCe3cnKqr4/aWQSECh17ThXqS0B
BoEd8cKyxLQQcjhOcoTSAR1b8yxZSDQxteYqntv6J5QNumPTpQeh7Ub35/Z9DaCz
7zu3ibQBwIruK9FuY4wi/Mxg8IuCtnMOuhaluajvxjYtcF/Sx3DR8Fsd44EzuCmW
QK/xdQcgkT6EcLRVYXGIB1DI1e2OEhJw6tH8WdRSklaOlNM/hKcy1facvluw/lwg
cXqTL9gjOvS3bYGMIAfkUvsCJFeDN72zxxFjxxH0ComsSxb+eG3iajY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:14 2024 by rpki-client on console-ams.rpki-client.org