Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IxGwu14vvQ9y7yGhpvz4UAny6_8.roa
File: IxGwu14vvQ9y7yGhpvz4UAny6_8.roa (raw, json)
Hash identifier: JxZPXEHgOx+PemRqD8gtKoUQz1XFeqkHn6bI2au/Fsc=
Subject key identifier: 23:11:B0:BB:5E:2F:BD:0F:72:EF:21:A1:A6:FC:F8:50:09:F2:EB:FF
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 018CC348A0F428A4FD177C7C201FD2036093
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IxGwu14vvQ9y7yGhpvz4UAny6_8.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206494
IP address blocks: 185.134.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 20:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a0:f4:28:a4:fd:17:7c:7c:20:1f:d2:03:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2311b0bb5e2fbd0f72ef21a1a6fcf85009f2ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:7a:3a:0d:57:85:37:a5:d7:ad:4d:2c:57:
25:21:73:10:19:f6:e1:3a:6c:97:a4:84:ee:57:c4:
89:b0:22:e1:67:54:19:67:93:b0:18:22:1d:21:b2:
11:81:a8:ba:8c:75:3f:c4:16:7c:82:18:27:b0:20:
2b:63:26:90:4e:f1:a1:f4:24:42:3b:4e:1c:d6:8a:
c3:db:ca:47:88:e2:ca:8b:d4:95:95:03:d4:4a:6f:
52:cd:a5:35:1c:90:d5:e4:d9:b8:c6:6e:b9:28:7e:
42:aa:5c:1f:1a:82:44:1e:a1:2e:9f:86:3c:d4:5b:
54:2c:11:b3:f6:35:5e:fc:fc:56:7d:46:b2:84:dc:
88:60:91:84:ca:85:7c:1c:ea:44:d8:f5:25:62:68:
17:f9:83:cb:d2:8e:4e:ea:3d:1e:e2:c4:a3:8c:39:
81:d9:4c:60:c9:68:c4:29:fe:55:3a:9e:6a:8e:b6:
5d:3f:78:b3:b0:db:f9:d5:28:af:a4:e6:fb:84:87:
32:ef:6d:1e:33:6a:55:c9:60:18:9f:1b:0a:66:e6:
12:25:e6:78:64:31:46:72:29:47:80:1b:79:7d:22:
ac:a5:7a:41:00:31:61:90:ce:ba:b1:f7:68:a4:3f:
65:e4:92:5e:38:63:1a:97:32:4a:72:0f:d5:fe:49:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:B0:BB:5E:2F:BD:0F:72:EF:21:A1:A6:FC:F8:50:09:F2:EB:FF
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IxGwu14vvQ9y7yGhpvz4UAny6_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.177.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a3:ed:76:0c:cd:2b:25:c2:74:46:58:97:f3:da:eb:ef:56:
b7:f5:52:c8:62:ad:73:63:13:9a:0a:7f:47:ae:55:03:a6:65:
61:4b:d1:d6:20:02:55:29:d8:84:08:9c:ee:57:b0:04:2a:16:
48:04:a1:17:2a:09:3d:68:89:76:00:6f:f7:bc:bc:7b:a6:a8:
e1:ee:e7:c1:33:f2:48:bc:bc:0d:68:e9:60:8f:57:1f:0c:92:
bc:87:e3:a2:0f:07:2c:d7:2e:44:3a:e3:df:be:f3:59:10:45:
0c:1c:ec:14:11:8c:a0:06:f8:be:37:08:c0:c1:87:ae:5e:54:
f2:8d:c2:db:8b:51:e8:0f:74:94:3a:64:4d:53:1c:bd:0c:02:
7a:4f:0f:e0:61:53:d5:e0:e5:54:f4:4c:a3:1b:6b:e0:f6:3c:
2d:56:56:c3:98:4c:b5:3f:12:0f:33:59:88:e0:15:ae:1e:3e:
4d:fa:95:45:9b:35:5d:8a:c6:c8:bd:7f:be:89:b2:a3:11:96:
67:0f:0f:d1:80:35:c8:e3:51:c8:2a:a6:53:81:4e:6e:38:8e:
82:b4:75:9d:16:b3:c1:3d:17:90:fe:a0:88:4e:f6:d0:0c:41:
cd:d0:c5:b4:98:73:7b:cc:19:79:d8:7e:ec:5b:b0:9f:fe:8a:
ba:8c:4b:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSKD0KKT9F3x8IB/SA2CTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl
MDJkYmIwHhcNMjQwMTAxMDQyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzExYjBiYjVlMmZiZDBmNzJlZjIxYTFhNmZjZjg1MDA5ZjJlYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm56Og1XhTel161NLFclIXMQGfbh
OmyXpITuV8SJsCLhZ1QZZ5OwGCIdIbIRgai6jHU/xBZ8ghgnsCArYyaQTvGh9CRC
O04c1orD28pHiOLKi9SVlQPUSm9SzaU1HJDV5Nm4xm65KH5CqlwfGoJEHqEun4Y8
1FtULBGz9jVe/PxWfUayhNyIYJGEyoV8HOpE2PUlYmgX+YPL0o5O6j0e4sSjjDmB
2UxgyWjEKf5VOp5qjrZdP3izsNv51SivpOb7hIcy720eM2pVyWAYnxsKZuYSJeZ4
ZDFGcilHgBt5fSKspXpBADFhkM66sfdopD9l5JJeOGMalzJKcg/V/knjLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMRsLteL70Pcu8hoab8+FAJ8uv/MB8GA1UdIwQY
MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut
OThkMmZlZTBmODdhLzEvSXhHd3UxNHZ2UTl5N3lHaHB2ejRVQW55Nl84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh
LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYaxMA0G
CSqGSIb3DQEBCwUAA4IBAQBZo+12DM0rJcJ0RliX89rr71a39VLIYq1zYxOaCn9H
rlUDpmVhS9HWIAJVKdiECJzuV7AEKhZIBKEXKgk9aIl2AG/3vLx7pqjh7ufBM/JI
vLwNaOlgj1cfDJK8h+OiDwcs1y5EOuPfvvNZEEUMHOwUEYygBvi+NwjAwYeuXlTy
jcLbi1HoD3SUOmRNUxy9DAJ6Tw/gYVPV4OVU9EyjG2vg9jwtVlbDmEy1PxIPM1mI
4BWuHj5N+pVFmzVdisbIvX++ibKjEZZnDw/RgDXI41HIKqZTgU5uOI6CtHWdFrPB
PReQ/qCITvbQDEHN0MW0mHN7zBl52H7sW7Cf/oq6jEsp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org