Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/J_dGEx6B4ZuV7e9WC1bWMGeHPQE.roa
File: J_dGEx6B4ZuV7e9WC1bWMGeHPQE.roa (raw, json)
Hash identifier: OvaFCIrFriV6DLhHifFgbqY7sJU3sFfQooOIeFP1/Q8=
Subject key identifier: 27:F7:46:13:1E:81:E1:9B:95:ED:EF:56:0B:56:D6:30:67:87:3D:01
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 01856E6FB62001D36E75C35557A0663783F6
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/J_dGEx6B4ZuV7e9WC1bWMGeHPQE.roa
Signing time: Sun 01 Jan 2023 17:44:52 +0000
ROA not before: Sun 01 Jan 2023 17:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60465
IP address blocks: 185.30.104.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:b6:20:01:d3:6e:75:c3:55:57:a0:66:37:83:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 1 17:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f746131e81e19b95edef560b56d63067873d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:13:d1:e2:69:d8:88:d7:71:ea:a0:5b:88:
03:7a:a0:cd:ae:e1:ae:87:f3:2b:39:3d:ed:08:31:
0e:2a:a6:df:26:24:bf:ba:20:86:e5:b6:00:fa:41:
7a:1c:c3:44:00:b2:b1:f7:50:89:df:bb:5f:90:af:
f4:0a:df:3b:f7:95:35:f7:71:df:8c:4d:9e:a4:77:
7e:26:84:8f:d0:7d:ff:2b:df:dd:ed:6f:8d:cb:0f:
1b:8d:bf:7c:8a:2e:c4:d0:18:57:55:f4:93:d1:6e:
94:b9:6b:fa:69:f3:ae:c4:85:cb:d9:8a:b3:7e:9b:
74:9e:b2:60:37:18:87:0e:7a:24:3b:7b:e7:17:db:
4f:c3:f0:93:33:ae:84:cc:c0:6e:64:2f:be:d5:10:
60:4d:eb:7a:3b:45:a5:91:68:dd:c3:85:c5:86:be:
21:26:f1:fb:a1:3e:9c:7f:d2:17:66:83:8d:6b:63:
fd:8f:1f:d4:be:a1:63:86:f7:19:b6:45:71:04:98:
a9:91:49:7c:0a:ff:9c:0c:2b:00:79:f4:54:f0:55:
91:6a:6e:5c:08:22:d9:8d:17:68:41:f3:20:6a:4c:
bf:0a:2f:d0:8e:08:88:93:85:23:9d:e5:69:b4:eb:
90:a1:cf:fa:05:fd:39:b9:0c:20:e1:69:36:dd:e3:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:46:13:1E:81:E1:9B:95:ED:EF:56:0B:56:D6:30:67:87:3D:01
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/J_dGEx6B4ZuV7e9WC1bWMGeHPQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.104.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:30:c6:20:ad:c8:55:a2:37:29:3c:e9:72:77:e8:9d:78:ad:
24:a5:93:c2:a1:e0:14:18:5b:00:b8:0e:e1:83:22:12:19:3b:
a2:1a:2a:12:1a:ac:e6:d0:ad:83:5c:05:30:11:6a:f5:4b:ea:
71:50:e7:b0:43:2a:a1:83:b8:f9:d0:72:03:f7:87:11:9b:17:
63:93:6d:a2:f6:18:a1:3b:e1:f6:91:5a:9c:f5:20:70:cc:78:
5e:1a:dd:53:f4:93:c8:41:8b:90:b8:3f:a4:ce:2d:e4:0c:4b:
12:c2:a0:20:7e:53:d4:5e:3c:7c:48:b3:2d:6d:52:f6:5a:ca:
35:e6:47:68:33:07:73:8c:d7:d9:63:0e:32:32:36:c2:43:a4:
5a:e4:4c:07:23:84:35:86:30:1f:10:e8:dd:b4:53:7b:34:bb:
68:30:39:db:d0:42:64:08:b5:31:c1:4e:75:58:70:e0:fc:8c:
23:e1:7c:b6:44:3f:4a:fd:21:0f:49:21:7e:2b:72:1b:f5:4d:
ac:87:87:49:b6:de:00:f8:39:20:10:e3:81:3a:5f:f2:1c:70:
6d:cb:b2:3a:b5:99:2f:48:ec:67:c7:04:dd:1d:0f:94:6d:40:
4b:11:5f:5b:75:fc:3e:97:bb:3a:cc:9a:5f:f2:a7:13:67:c6:
54:c9:43:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub7YgAdNudcNVV6BmN4P2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjMwMTAxMTc0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2Y3NDYxMzFlODFlMTliOTVlZGVmNTYwYjU2ZDYzMDY3ODczZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ0T0eJp2IjXceqgW4gDeqDNruGu
h/MrOT3tCDEOKqbfJiS/uiCG5bYA+kF6HMNEALKx91CJ37tfkK/0Ct8795U193Hf
jE2epHd+JoSP0H3/K9/d7W+Nyw8bjb98ii7E0BhXVfST0W6UuWv6afOuxIXL2Yqz
fpt0nrJgNxiHDnokO3vnF9tPw/CTM66EzMBuZC++1RBgTet6O0WlkWjdw4XFhr4h
JvH7oT6cf9IXZoONa2P9jx/UvqFjhvcZtkVxBJipkUl8Cv+cDCsAefRU8FWRam5c
CCLZjRdoQfMgaky/Ci/QjgiIk4UjneVptOuQoc/6Bf05uQwg4Wk23ePhnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCf3RhMegeGble3vVgtW1jBnhz0BMB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvSl9kR0V4NkI0WnVWN2U5V0MxYldNR2VIUFFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuR5oMA0G
CSqGSIb3DQEBCwUAA4IBAQDUMMYgrchVojcpPOlyd+ideK0kpZPCoeAUGFsAuA7h
gyISGTuiGioSGqzm0K2DXAUwEWr1S+pxUOewQyqhg7j50HID94cRmxdjk22i9hih
O+H2kVqc9SBwzHheGt1T9JPIQYuQuD+kzi3kDEsSwqAgflPUXjx8SLMtbVL2Wso1
5kdoMwdzjNfZYw4yMjbCQ6Ra5EwHI4Q1hjAfEOjdtFN7NLtoMDnb0EJkCLUxwU51
WHDg/Iwj4Xy2RD9K/SEPSSF+K3Ib9U2sh4dJtt4A+DkgEOOBOl/yHHBty7I6tZkv
SOxnxwTdHQ+UbUBLEV9bdfw+l7s6zJpf8qcTZ8ZUyUPA
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:29 2024 by rpki-client on console-ams.rpki-client.org