Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/62O2uvGvdrtAJ6W8stZPmn51PIU.roa
File: 62O2uvGvdrtAJ6W8stZPmn51PIU.roa (raw, json)
Hash identifier: Fc6ua3Xv80QbGKMP/wRxQ6LkQz+AafvU8TkPj4DsvuU=
Subject key identifier: EB:63:B6:BA:F1:AF:76:BB:40:27:A5:BC:B2:D6:4F:9A:7E:75:3C:85
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 018896E3329ED98E564F0C6647DED671625E
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/62O2uvGvdrtAJ6W8stZPmn51PIU.roa
Signing time: Wed 07 Jun 2023 17:24:11 +0000
ROA not before: Wed 07 Jun 2023 17:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 185.161.150.0/24 maxlen: 24
185.238.176.0/24 maxlen: 24
185.180.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:e3:32:9e:d9:8e:56:4f:0c:66:47:de:d6:71:62:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jun 7 17:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb63b6baf1af76bb4027a5bcb2d64f9a7e753c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:84:d3:d5:e9:02:ef:16:3e:e1:e4:66:9a:
67:8b:a0:c8:53:22:ea:fb:05:bd:53:e8:1c:5c:76:
d1:75:15:57:42:ce:69:a9:ec:be:98:92:6c:c7:74:
bc:9d:dd:b8:39:1f:54:b8:48:03:5c:e3:87:6e:1d:
df:90:cb:17:a8:60:50:72:70:0f:00:81:24:cc:87:
b1:9b:a8:02:f5:23:61:e8:88:82:5d:45:11:67:a2:
24:35:78:8f:f3:55:c7:1c:d0:c4:59:ee:4b:c2:ef:
20:a0:60:4a:6b:07:8d:28:0a:40:4e:5c:b7:65:bb:
af:4a:de:60:a0:01:59:3a:7b:73:b5:ff:15:8e:93:
65:c4:e9:da:eb:47:c9:6e:b1:b8:d3:1c:0e:ae:8b:
a6:b8:89:74:5b:4f:24:3c:2a:e7:87:33:5f:39:ea:
fd:1d:ee:ee:30:31:2a:08:35:7a:d6:6f:77:27:a7:
0b:c3:a2:12:b2:78:a6:15:02:16:5a:da:3f:2d:a6:
c4:5e:b1:f1:43:69:dc:ed:7a:b5:45:d9:1c:52:31:
d6:7e:e4:77:c7:41:d3:2e:d7:44:c1:aa:88:d4:2a:
e6:bf:c7:e8:8b:d3:9a:c1:ac:c4:de:86:f4:02:21:
c9:8c:2a:d9:2d:9f:9c:c2:8c:49:1a:c1:58:78:63:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:B6:BA:F1:AF:76:BB:40:27:A5:BC:B2:D6:4F:9A:7E:75:3C:85
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/62O2uvGvdrtAJ6W8stZPmn51PIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.150.0/24
185.180.193.0/24
185.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c4:79:d1:fd:5f:87:ce:38:cd:92:3c:42:da:ce:0f:29:9e:
ff:36:c5:b7:2b:7a:89:23:90:01:8d:fa:49:c8:4a:b6:72:97:
73:3c:aa:1c:4d:1c:57:a0:54:5d:79:21:ed:a9:6a:be:cf:a5:
1f:52:eb:8c:f5:06:d1:a3:92:34:73:b0:a7:3e:0a:84:06:38:
21:46:d4:0f:0f:99:03:06:b6:21:80:44:f6:cd:4b:51:55:b9:
b8:85:1c:52:d4:24:7e:53:d2:14:da:cf:86:1a:91:1b:8a:9f:
d6:7a:86:6e:2e:cf:ae:15:0f:6e:8d:15:1a:90:16:2a:62:43:
33:b2:53:e7:2a:51:e7:26:be:a4:1a:23:4a:d1:fd:ea:e4:1d:
cc:dc:b8:67:98:28:a5:87:13:67:a8:cb:7f:16:6c:ea:a7:6b:
58:b1:7f:4f:bc:96:bb:c6:7f:14:da:de:15:fa:a7:d2:a2:4f:
c2:ba:fe:82:b3:bc:70:1b:2b:d4:15:62:51:9e:7d:75:f4:5b:
47:11:98:71:a4:ae:6b:30:a2:78:69:bd:51:d3:9f:22:7a:0a:
b5:a3:16:96:cd:41:46:ff:8b:03:da:7d:29:5c:18:52:51:0d:
d2:1c:5c:9a:d9:7b:f0:b8:ad:0e:49:20:f2:1a:f2:92:29:7c:
29:31:50:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiW4zKe2Y5WTwxmR97WcWJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw
ODIxZmQwHhcNMjMwNjA3MTcyNDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjYzYjZiYWYxYWY3NmJiNDAyN2E1YmNiMmQ2NGY5YTdlNzUzYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3SE09XpAu8WPuHkZppni6DIUyLq
+wW9U+gcXHbRdRVXQs5pqey+mJJsx3S8nd24OR9UuEgDXOOHbh3fkMsXqGBQcnAP
AIEkzIexm6gC9SNh6IiCXUURZ6IkNXiP81XHHNDEWe5Lwu8goGBKaweNKApATly3
ZbuvSt5goAFZOntztf8VjpNlxOna60fJbrG40xwOroumuIl0W08kPCrnhzNfOer9
He7uMDEqCDV61m93J6cLw6ISsnimFQIWWto/LabEXrHxQ2nc7Xq1RdkcUjHWfuR3
x0HTLtdEwaqI1Crmv8foi9OawazE3ob0AiHJjCrZLZ+cwoxJGsFYeGOGSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOtjtrrxr3a7QCelvLLWT5p+dTyFMB8GA1UdIwQY
MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt
ODM1NTk5MjYwZmY2LzEvNjJPMnV2R3ZkcnRBSjZXOHN0WlBtbjUxUElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2
LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuaGWAwQA
ubTBAwQAue6wMA0GCSqGSIb3DQEBCwUAA4IBAQBWxHnR/V+HzjjNkjxC2s4PKZ7/
NsW3K3qJI5ABjfpJyEq2cpdzPKocTRxXoFRdeSHtqWq+z6UfUuuM9QbRo5I0c7Cn
PgqEBjghRtQPD5kDBrYhgET2zUtRVbm4hRxS1CR+U9IU2s+GGpEbip/WeoZuLs+u
FQ9ujRUakBYqYkMzslPnKlHnJr6kGiNK0f3q5B3M3LhnmCilhxNnqMt/Fmzqp2tY
sX9PvJa7xn8U2t4V+qfSok/Cuv6Cs7xwGyvUFWJRnn119FtHEZhxpK5rMKJ4ab1R
058iegq1oxaWzUFG/4sD2n0pXBhSUQ3SHFya2XvwuK0OSSDyGvKSKXwpMVC6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:48 2024 by rpki-client on console-fra.rpki-client.org