Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/6wIUrAeb39r3rG9lkBJ_W-oPoP4.roa
File: 6wIUrAeb39r3rG9lkBJ_W-oPoP4.roa (raw, json)
Hash identifier: W5Jzoxr7cIXIgHAfxk/TUefP7qBOabymsPCW2qKPVwM=
Subject key identifier: EB:02:14:AC:07:9B:DF:DA:F7:AC:6F:65:90:12:7F:5B:EA:0F:A0:FE
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018CB313F3CF3CD6DEF8DA31BE5D76BAFDB5
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/6wIUrAeb39r3rG9lkBJ_W-oPoP4.roa
Signing time: Fri 29 Dec 2023 00:57:58 +0000
ROA not before: Fri 29 Dec 2023 00:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41720
IP address blocks: 185.242.181.0/24 maxlen: 24
185.242.180.0/24 maxlen: 24
185.242.183.0/24 maxlen: 24
185.242.180.0/22 maxlen: 22
185.242.182.0/24 maxlen: 24
2a0d:b280::/29 maxlen: 29
2a0d:b280:8100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:13:f3:cf:3c:d6:de:f8:da:31:be:5d:76:ba:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Dec 29 00:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb0214ac079bdfdaf7ac6f6590127f5bea0fa0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:11:67:a9:02:7a:ce:68:54:07:c8:d5:6b:
a3:f5:ee:dc:ef:b9:17:62:a6:10:d4:37:ec:24:d6:
d3:20:65:81:82:ef:5f:db:7f:3e:26:d9:60:86:30:
3e:a1:d0:10:72:fe:f6:e0:02:24:7e:fa:5e:5e:8a:
a9:68:01:d0:e3:e1:1d:8f:4c:3c:35:ec:ed:af:e3:
c5:51:5e:ba:8b:f6:e0:54:d9:63:89:23:40:68:f3:
27:76:62:f3:e5:f8:41:83:4b:f9:0d:6d:94:99:b5:
7b:18:75:9a:47:18:c9:c5:c7:fa:02:0d:80:a5:f4:
f3:b5:87:e3:aa:20:1b:4f:e1:98:9d:e1:05:7d:ab:
72:e0:74:4e:26:a3:68:69:45:e9:f6:8e:52:95:ec:
23:e8:9b:0e:82:a2:e3:0b:7c:e2:1e:e1:0e:a3:5f:
cf:ee:39:ab:59:0d:54:43:53:08:0d:91:75:c1:dc:
b7:3b:5b:45:04:b2:e0:1e:0d:1c:5d:28:2e:5c:27:
a8:d3:b4:f5:18:65:7d:b1:11:66:fa:6b:ea:59:ed:
ba:e5:e1:02:f2:ac:9b:ad:73:a7:df:72:42:dc:40:
c0:6b:c5:3f:5b:ab:88:2f:43:40:34:a2:12:a7:fe:
75:54:43:b9:97:af:03:3e:6f:df:09:71:7d:eb:1e:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:14:AC:07:9B:DF:DA:F7:AC:6F:65:90:12:7F:5B:EA:0F:A0:FE
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/6wIUrAeb39r3rG9lkBJ_W-oPoP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.180.0/22
IPv6:
2a0d:b280::/29
Signature Algorithm: sha256WithRSAEncryption
82:40:15:40:53:9c:cf:02:03:36:43:71:bb:3d:93:db:b6:46:
c7:b1:31:75:50:6a:c8:05:f9:ce:1c:06:bf:c4:14:48:3b:20:
7b:9f:c2:fa:af:17:f2:83:c2:b3:f1:e1:97:46:92:7b:9f:37:
a3:12:b0:31:8c:fe:ca:df:25:fb:51:43:a6:56:d1:2d:60:a7:
40:bf:ed:90:05:fa:80:98:a0:c6:9d:2e:ec:bc:38:f1:d5:d1:
ca:1b:e6:c6:ac:27:36:4d:7c:00:95:2a:b3:e6:0c:9f:94:47:
c7:87:51:bb:89:0f:1a:90:19:cf:48:85:95:9c:fe:3b:33:4a:
c0:91:32:e1:e2:68:2a:2f:4c:2c:ae:96:54:ec:66:9a:b8:23:
a0:a8:85:b6:3d:7a:cc:59:01:4f:12:3c:2e:8c:b8:ff:26:5c:
d4:07:04:1f:5b:4b:92:15:66:8a:d6:e9:99:4f:fc:ad:b5:9d:
70:a7:25:9a:36:71:02:13:20:06:18:07:5d:e3:e1:d3:f9:25:
e9:35:81:3d:33:10:f5:40:ea:3f:a1:61:a5:72:f2:0b:34:95:
eb:a8:63:5e:db:51:80:96:35:35:5e:ff:34:ac:e4:56:b4:e0:
fc:3e:5f:ec:98:39:92:f0:b0:66:a7:01:b8:61:3e:0f:c0:b1:
7c:0b:13:85
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYyzE/PPPNbe+Noxvl12uv21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2IzMGZkN2Q2ZTQ0OTQ5M2VjN2NiMGQ5Zjc4NjAwNDU4
YmUyMWIwHhcNMjMxMjI5MDA1NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjAyMTRhYzA3OWJkZmRhZjdhYzZmNjU5MDEyN2Y1YmVhMGZhMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTkRZ6kCes5oVAfI1Wuj9e7c77kX
YqYQ1DfsJNbTIGWBgu9f238+JtlghjA+odAQcv724AIkfvpeXoqpaAHQ4+Edj0w8
Neztr+PFUV66i/bgVNljiSNAaPMndmLz5fhBg0v5DW2UmbV7GHWaRxjJxcf6Ag2A
pfTztYfjqiAbT+GYneEFfaty4HROJqNoaUXp9o5Slewj6JsOgqLjC3ziHuEOo1/P
7jmrWQ1UQ1MIDZF1wdy3O1tFBLLgHg0cXSguXCeo07T1GGV9sRFm+mvqWe265eEC
8qybrXOn33JC3EDAa8U/W6uIL0NANKISp/51VEO5l68DPm/fCXF96x7oDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOsCFKwHm9/a96xvZZASf1vqD6D+MB8GA1UdIwQY
MBaAFC/LMP19bkSUk+x8sNn3hgBFi+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhzd19YMXVSSlNUN0h5dzJmZUdBRVdMNGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOTEwYmYtZTQ5Yi00Y2RjLWJlNzkt
NGRkNGRjMzM5MWFjLzEvNndJVXJBZWIzOXIzckc5bGtCSl9XLW9Qb1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOTEwYmYtZTQ5Yi00Y2RjLWJlNzktNGRkNGRjMzM5MWFj
LzEvTDhzd19YMXVSSlNUN0h5dzJmZUdBRVdMNGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufK0MA0E
AgACMAcDBQMqDbKAMA0GCSqGSIb3DQEBCwUAA4IBAQCCQBVAU5zPAgM2Q3G7PZPb
tkbHsTF1UGrIBfnOHAa/xBRIOyB7n8L6rxfyg8Kz8eGXRpJ7nzejErAxjP7K3yX7
UUOmVtEtYKdAv+2QBfqAmKDGnS7svDjx1dHKG+bGrCc2TXwAlSqz5gyflEfHh1G7
iQ8akBnPSIWVnP47M0rAkTLh4mgqL0wsrpZU7GaauCOgqIW2PXrMWQFPEjwujLj/
JlzUBwQfW0uSFWaK1umZT/yttZ1wpyWaNnECEyAGGAdd4+HT+SXpNYE9MxD1QOo/
oWGlcvILNJXrqGNe21GAljU1Xv80rORWtOD8Pl/smDmS8LBmpwG4YT4PwLF8CxOF
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:11 2024 by rpki-client on console-ams.rpki-client.org