Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/neRPSCiO7Ns_HWSHPNeMjDuwtn8.roa
File: neRPSCiO7Ns_HWSHPNeMjDuwtn8.roa (raw, json)
Hash identifier: SXAG+O2cPQR6fPhnaOSfeNPZSxWTWNWtxEpCVxHrSc0=
Subject key identifier: 9D:E4:4F:48:28:8E:EC:DB:3F:1D:64:87:3C:D7:8C:8C:3B:B0:B6:7F
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 018F7B75C1A4B3F5FD31ACBD8618A4F1FF39
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/neRPSCiO7Ns_HWSHPNeMjDuwtn8.roa
Signing time: Wed 15 May 2024 08:54:25 +0000
ROA not before: Wed 15 May 2024 08:54:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211804
IP address blocks: 185.250.240.0/24 maxlen: 24
185.250.241.0/24 maxlen: 24
185.250.242.0/24 maxlen: 24
185.250.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:75:c1:a4:b3:f5:fd:31:ac:bd:86:18:a4:f1:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: May 15 08:54:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de44f48288eecdb3f1d64873cd78c8c3bb0b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:bc:ed:b6:c3:95:6b:f3:b0:86:09:54:48:
6e:a8:2b:8b:17:42:67:9f:ca:d3:19:f2:ff:fa:53:
cf:ed:28:95:44:b1:a9:31:5c:09:84:6a:99:1b:ee:
34:c7:61:e0:15:b9:b4:14:90:ae:ff:da:1a:8e:2e:
ae:ff:ff:02:42:71:3d:0f:45:0b:31:42:45:7b:91:
90:6d:0c:ce:54:39:a7:10:a7:b3:58:69:f5:fc:bc:
86:24:ef:df:70:96:45:db:a8:39:d3:5e:a2:36:06:
9d:90:a3:20:af:87:1a:15:7a:e6:6d:d4:6c:a9:6f:
2e:40:7e:14:e7:a5:0e:c5:46:fe:2d:6a:0b:b1:78:
29:ac:d1:a4:0e:a7:46:81:8e:57:59:9d:03:51:ff:
b5:db:1e:03:62:da:6a:21:be:92:2c:01:ed:3f:1e:
23:72:72:ce:60:9a:9d:7d:dd:04:97:2a:b2:ea:11:
47:68:d0:fb:6f:86:76:ed:c8:b8:0c:c4:77:74:01:
ee:f9:be:6a:30:af:f6:e6:8d:4c:02:ae:81:26:f8:
a0:c5:12:29:a1:37:55:19:7d:0a:42:0d:b8:fb:d3:
d8:5b:2c:5a:3b:67:5e:88:09:63:90:cf:3c:4d:a3:
ee:ee:17:d8:b5:7a:6d:12:35:1e:bf:f0:ac:99:99:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:4F:48:28:8E:EC:DB:3F:1D:64:87:3C:D7:8C:8C:3B:B0:B6:7F
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/neRPSCiO7Ns_HWSHPNeMjDuwtn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.240.0/22
Signature Algorithm: sha256WithRSAEncryption
40:28:a2:f2:3e:17:cf:12:6e:5b:24:d2:70:fb:43:b6:5e:a1:
9b:77:8f:85:d3:8c:72:ba:b1:f2:74:dd:97:51:31:16:ba:80:
d1:eb:8f:7c:ad:72:55:d1:d8:d4:f0:21:55:5e:5a:f0:58:0d:
56:bb:31:0a:3f:69:8a:98:c1:37:2d:1b:ed:48:68:dd:51:21:
0e:1a:84:d9:25:36:90:46:0e:26:1a:ca:e3:ae:b1:ed:4c:73:
d6:01:21:3c:59:67:44:ef:bf:9e:fe:74:5d:8f:73:02:55:b6:
1f:e0:83:d2:b3:4e:9f:b0:ce:d9:d1:83:19:94:dc:80:51:36:
4c:57:5c:d8:b1:24:0a:3c:71:04:f7:3b:e0:ac:28:48:06:b9:
ea:fc:9f:72:7e:55:41:7c:88:1f:fb:f3:3c:dd:04:db:43:c0:
23:97:df:20:27:74:63:09:fe:07:42:33:fd:16:f1:3b:7d:36:
a3:9b:6f:9c:19:e0:e3:e9:ca:d5:54:55:c1:84:72:51:70:4d:
6d:88:7c:39:e0:33:38:48:c6:d2:82:c9:eb:55:34:e9:88:22:
2c:1e:e3:fc:84:00:86:0b:09:7d:f0:8b:81:f2:f6:50:8a:55:
64:ef:81:03:20:3e:ca:98:25:5e:9b:37:c8:0e:4f:cd:c0:6f:
d4:6d:46:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY97dcGks/X9May9hhik8f85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4
ZThjNzIwHhcNMjQwNTE1MDg1NDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGU0NGY0ODI4OGVlY2RiM2YxZDY0ODczY2Q3OGM4YzNiYjBiNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a687bbDlWvzsIYJVEhuqCuLF0Jn
n8rTGfL/+lPP7SiVRLGpMVwJhGqZG+40x2HgFbm0FJCu/9oaji6u//8CQnE9D0UL
MUJFe5GQbQzOVDmnEKezWGn1/LyGJO/fcJZF26g5016iNgadkKMgr4caFXrmbdRs
qW8uQH4U56UOxUb+LWoLsXgprNGkDqdGgY5XWZ0DUf+12x4DYtpqIb6SLAHtPx4j
cnLOYJqdfd0Elyqy6hFHaND7b4Z27ci4DMR3dAHu+b5qMK/25o1MAq6BJvigxRIp
oTdVGX0KQg24+9PYWyxaO2deiAljkM88TaPu7hfYtXptEjUev/CsmZnFjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3kT0gojuzbPx1khzzXjIw7sLZ/MB8GA1UdIwQY
MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt
MTk3ZmU4MzY1NjQzLzEvbmVSUFNDaU83TnNfSFdTSFBOZU1qRHV3dG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz
LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufrwMA0G
CSqGSIb3DQEBCwUAA4IBAQBAKKLyPhfPEm5bJNJw+0O2XqGbd4+F04xyurHydN2X
UTEWuoDR6498rXJV0djU8CFVXlrwWA1WuzEKP2mKmME3LRvtSGjdUSEOGoTZJTaQ
Rg4mGsrjrrHtTHPWASE8WWdE77+e/nRdj3MCVbYf4IPSs06fsM7Z0YMZlNyAUTZM
V1zYsSQKPHEE9zvgrChIBrnq/J9yflVBfIgf+/M83QTbQ8Ajl98gJ3RjCf4HQjP9
FvE7fTajm2+cGeDj6crVVFXBhHJRcE1tiHw54DM4SMbSgsnrVTTpiCIsHuP8hACG
Cwl98IuB8vZQilVk74EDID7KmCVemzfIDk/NwG/UbUb/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org