Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/2JPCNGOf16YvwcOb0mVCt0wg5uU.roa
File: 2JPCNGOf16YvwcOb0mVCt0wg5uU.roa (raw, json)
Hash identifier: wy7p7aJ55kDM7ANrbxefVGUqAHEGDtN/kAAPRBExF4Q=
Subject key identifier: D8:93:C2:34:63:9F:D7:A6:2F:C1:C3:9B:D2:65:42:B7:4C:20:E6:E5
Certificate issuer: /CN=63e24977993c15bcc134b174937f41b2129f56d1
Certificate serial: 01856CEF2F7DF895C0CDF703F19FA9AED69B
Authority key identifier: 63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/2JPCNGOf16YvwcOb0mVCt0wg5uU.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15704
IP address blocks: 185.208.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2f:7d:f8:95:c0:cd:f7:03:f1:9f:a9:ae:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e24977993c15bcc134b174937f41b2129f56d1
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d893c234639fd7a62fc1c39bd26542b74c20e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:01:bc:08:fd:97:a1:63:ee:5d:94:fa:5b:
47:9f:60:a3:4c:e3:f2:e1:58:21:c0:06:2f:11:61:
6a:d8:41:c2:95:7f:a2:7a:d5:1c:bc:82:c0:0c:c5:
6d:04:71:b5:0f:ad:a0:c1:78:3a:77:e0:58:30:92:
bf:93:df:a2:2f:9f:c8:c7:01:d5:b8:df:b9:39:e6:
54:85:3d:64:c0:8e:de:4c:0d:97:0c:45:0d:31:f4:
76:84:1b:80:89:1d:7e:8e:f5:44:d0:5a:44:c5:76:
06:5b:2e:ca:02:e5:01:05:05:7a:1d:ee:61:4b:b6:
47:e1:61:14:da:35:5e:d6:92:c9:c1:d4:21:fc:98:
f2:07:dc:7c:bc:6f:80:cb:9b:53:8c:48:b5:ba:c5:
94:52:ef:e4:7b:9b:ca:5b:62:49:c0:2b:66:9b:75:
88:7f:f7:2f:d0:8c:5f:19:12:6f:3c:12:01:ff:fd:
af:60:8c:b6:fc:0c:30:2d:74:64:25:79:5a:db:8b:
cc:4d:3b:45:e0:03:41:91:b9:a4:fb:b5:2b:49:46:
a9:9d:d1:44:29:31:77:b1:5c:c6:04:d3:05:f6:b6:
7c:9a:db:61:10:cb:75:e9:1e:52:62:50:b9:49:cc:
94:bc:a3:44:94:74:78:b2:ab:5b:4c:7f:8f:45:c0:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:C2:34:63:9F:D7:A6:2F:C1:C3:9B:D2:65:42:B7:4C:20:E6:E5
X509v3 Authority Key Identifier:
keyid:63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/2JPCNGOf16YvwcOb0mVCt0wg5uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:7e:39:cf:60:d9:5a:7f:2d:a9:e0:23:15:b1:9e:62:39:b1:
c8:4a:0b:0e:69:9f:6d:70:c4:c6:f9:a0:01:6c:c6:66:b6:85:
e8:b4:ef:89:f6:a5:73:68:2b:e7:8a:c8:43:ec:6a:76:b0:5f:
4b:09:eb:7e:fd:24:6b:23:a1:49:40:e0:69:62:90:55:ed:a3:
e3:3d:d7:8c:a7:2b:a4:cd:f6:4a:e2:43:a3:fc:89:1f:ff:01:
cc:fe:0d:47:1f:a3:d0:0e:83:d6:e1:41:01:26:12:10:80:f9:
ff:b6:02:57:c1:26:ea:1b:b9:1f:14:1c:e2:e7:ac:c5:e1:2d:
48:83:64:96:af:c7:64:e0:f0:c5:78:c9:ca:14:5a:7d:1c:07:
f3:66:51:f5:7b:98:ac:08:80:68:b7:d2:19:8f:ff:b5:a4:c4:
5d:3b:67:4a:9f:66:99:08:7b:5f:e6:ca:53:8b:18:8f:4f:ff:
65:85:fe:ef:d6:5c:eb:5b:44:6c:9f:0e:38:be:35:d2:3f:18:
09:e4:c4:fa:f9:87:b4:58:3b:5e:26:35:62:39:42:5f:87:99:
dd:6a:f2:33:15:11:e2:12:2d:b8:a5:87:f0:cd:56:6b:62:ae:
76:8a:5b:ee:5b:e3:3d:14:23:ae:68:a4:d2:fd:61:8c:5a:0a:
7d:22:14:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs7y99+JXAzfcD8Z+prtabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTI0OTc3OTkzYzE1YmNjMTM0YjE3NDkzN2Y0MWIyMTI5
ZjU2ZDEwHhcNMjMwMTAxMTA0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODkzYzIzNDYzOWZkN2E2MmZjMWMzOWJkMjY1NDJiNzRjMjBlNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsYBvAj9l6Fj7l2U+ltHn2CjTOPy
4VghwAYvEWFq2EHClX+ietUcvILADMVtBHG1D62gwXg6d+BYMJK/k9+iL5/IxwHV
uN+5OeZUhT1kwI7eTA2XDEUNMfR2hBuAiR1+jvVE0FpExXYGWy7KAuUBBQV6He5h
S7ZH4WEU2jVe1pLJwdQh/JjyB9x8vG+Ay5tTjEi1usWUUu/ke5vKW2JJwCtmm3WI
f/cv0IxfGRJvPBIB//2vYIy2/AwwLXRkJXla24vMTTtF4ANBkbmk+7UrSUapndFE
KTF3sVzGBNMF9rZ8mtthEMt16R5SYlC5ScyUvKNElHR4sqtbTH+PRcAuCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiTwjRjn9emL8HDm9JlQrdMIOblMB8GA1UdIwQY
MBaAFGPiSXeZPBW8wTSxdJN/QbISn1bRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1KSmQ1azhGYnpCTkxGMGszOUJzaEtmVnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mZDgxMTYtNWU5OC00NWVmLWFmNzQt
MDczYTVkYjBlZmI1LzEvMkpQQ05HT2YxNll2d2NPYjBtVkN0MHdnNXVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mZDgxMTYtNWU5OC00NWVmLWFmNzQtMDczYTVkYjBlZmI1
LzEvWS1KSmQ1azhGYnpCTkxGMGszOUJzaEtmVnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudCSMA0G
CSqGSIb3DQEBCwUAA4IBAQC6fjnPYNlafy2p4CMVsZ5iObHISgsOaZ9tcMTG+aAB
bMZmtoXotO+J9qVzaCvnishD7Gp2sF9LCet+/SRrI6FJQOBpYpBV7aPjPdeMpyuk
zfZK4kOj/Ikf/wHM/g1HH6PQDoPW4UEBJhIQgPn/tgJXwSbqG7kfFBzi56zF4S1I
g2SWr8dk4PDFeMnKFFp9HAfzZlH1e5isCIBot9IZj/+1pMRdO2dKn2aZCHtf5spT
ixiPT/9lhf7v1lzrW0Rsnw44vjXSPxgJ5MT6+Ye0WDteJjViOUJfh5ndavIzFRHi
Ei24pYfwzVZrYq52ilvuW+M9FCOuaKTS/WGMWgp9IhRT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:13 2024 by rpki-client on console-fra.rpki-client.org