Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2xF_hnFw2sSekb7kluVImf0e8IA.roa
File: 2xF_hnFw2sSekb7kluVImf0e8IA.roa (raw, json)
Hash identifier: zHdnUUqXs+YdplDAV9j7sX6M1xzNlxSD/2D1sd4W0T0=
Subject key identifier: DB:11:7F:86:71:70:DA:C4:9E:91:BE:E4:96:E5:48:99:FD:1E:F0:80
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0185718C33D21FD5CB73E9B2BA769A211C56
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2xF_hnFw2sSekb7kluVImf0e8IA.roa
Signing time: Mon 02 Jan 2023 08:14:51 +0000
ROA not before: Mon 02 Jan 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207724
IP address blocks: 185.239.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 08:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:33:d2:1f:d5:cb:73:e9:b2:ba:76:9a:21:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 2 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db117f867170dac49e91bee496e54899fd1ef080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:21:41:d7:20:ff:c7:a3:53:df:0d:99:b6:
19:84:35:e0:6c:e9:15:fd:fe:77:32:8d:39:82:7c:
04:d1:36:4a:be:26:59:ca:2f:50:de:62:6c:a9:1d:
b4:db:5c:c0:2a:1b:74:c3:a2:6d:47:23:8e:da:1a:
60:ed:51:f0:a1:1a:c6:34:8d:6e:a5:e0:81:b1:23:
da:f1:7f:3b:00:f9:b7:a1:2c:46:6a:49:5d:03:95:
46:88:44:8a:31:a6:51:f2:0f:04:8c:f6:e7:05:8c:
95:20:ea:af:b9:f6:2f:a5:ee:28:54:ed:15:ad:42:
48:6c:e4:92:97:80:76:02:ee:9b:fa:90:36:c5:47:
a3:d3:6a:a6:ce:21:e3:a8:fc:6e:b6:cd:06:fb:09:
ac:2f:78:79:ee:c0:57:06:66:e4:67:5d:b7:ac:76:
d1:e7:26:dc:8a:37:6f:d4:b0:82:cd:ea:00:fc:45:
4b:1a:3e:70:40:b3:bd:e5:e5:52:80:ae:42:6e:18:
59:b3:b7:f0:9d:6c:05:66:da:93:66:e5:80:14:d9:
5c:18:14:10:6a:69:54:23:9c:df:e7:4f:36:e2:47:
3c:12:97:c1:83:ed:af:e9:1f:5a:cd:68:7a:b2:bf:
8a:45:1f:b5:48:46:4c:1c:99:41:16:80:6a:fc:ef:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:7F:86:71:70:DA:C4:9E:91:BE:E4:96:E5:48:99:FD:1E:F0:80
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/2xF_hnFw2sSekb7kluVImf0e8IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a0:55:b9:33:d0:54:04:5d:ab:52:45:96:6f:01:80:d6:70:
fb:17:89:6e:a4:48:57:87:7c:d8:99:ce:e4:57:2e:8b:cd:5c:
61:27:7f:f7:fe:83:32:9f:97:54:8e:84:dd:9c:9c:fc:16:a8:
e9:f7:46:f1:26:c4:7d:b9:ee:67:37:5a:58:a3:53:8e:5e:da:
fa:7a:3b:ee:b2:72:f4:8a:fb:b9:e7:1f:8e:37:e0:55:98:62:
e0:4c:ce:12:80:f3:92:b6:96:93:db:a0:d8:f9:e1:c5:26:7b:
1c:c1:f4:bb:65:39:1d:55:89:c3:72:a7:f2:9e:1d:bc:ef:d8:
3c:da:5c:22:e5:82:dc:82:07:db:9a:c2:36:90:4b:68:68:80:
47:e8:8c:bb:07:cb:48:e6:83:28:63:3c:6c:71:64:6d:fe:01:
df:9a:24:62:10:b6:8f:87:e4:d2:78:87:45:26:27:b2:c6:08:
22:9e:41:ab:11:91:ee:fe:78:d3:60:15:f3:44:87:9e:a7:ce:
47:7e:cc:7c:df:74:02:58:61:84:34:29:49:a1:b7:ae:28:73:
a8:21:50:a8:76:27:61:bc:77:5c:ea:b8:ae:ed:23:e7:3e:92:
c0:12:e3:ba:88:76:cf:36:63:e8:72:7e:b9:24:67:fc:4d:39:
9c:2d:5c:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxjDPSH9XLc+myunaaIRxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMwMTAyMDgxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjExN2Y4NjcxNzBkYWM0OWU5MWJlZTQ5NmU1NDg5OWZkMWVmMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk50hQdcg/8ejU98NmbYZhDXgbOkV
/f53Mo05gnwE0TZKviZZyi9Q3mJsqR2021zAKht0w6JtRyOO2hpg7VHwoRrGNI1u
peCBsSPa8X87APm3oSxGakldA5VGiESKMaZR8g8EjPbnBYyVIOqvufYvpe4oVO0V
rUJIbOSSl4B2Au6b+pA2xUej02qmziHjqPxuts0G+wmsL3h57sBXBmbkZ123rHbR
5ybcijdv1LCCzeoA/EVLGj5wQLO95eVSgK5CbhhZs7fwnWwFZtqTZuWAFNlcGBQQ
amlUI5zf50824kc8EpfBg+2v6R9azWh6sr+KRR+1SEZMHJlBFoBq/O/N3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsRf4ZxcNrEnpG+5JblSJn9HvCAMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvMnhGX2huRncyc1Nla2I3a2x1VkltZjBlOElBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue8AMA0G
CSqGSIb3DQEBCwUAA4IBAQCmoFW5M9BUBF2rUkWWbwGA1nD7F4lupEhXh3zYmc7k
Vy6LzVxhJ3/3/oMyn5dUjoTdnJz8Fqjp90bxJsR9ue5nN1pYo1OOXtr6ejvusnL0
ivu55x+ON+BVmGLgTM4SgPOStpaT26DY+eHFJnscwfS7ZTkdVYnDcqfynh2879g8
2lwi5YLcggfbmsI2kEtoaIBH6Iy7B8tI5oMoYzxscWRt/gHfmiRiELaPh+TSeIdF
JieyxgginkGrEZHu/njTYBXzRIeep85Hfsx833QCWGGENClJobeuKHOoIVCodidh
vHdc6riu7SPnPpLAEuO6iHbPNmPocn65JGf8TTmcLVzt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org