Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/_bSt2_BhvHt2IKUUf5trHDQBMTg.roa
File: _bSt2_BhvHt2IKUUf5trHDQBMTg.roa (raw, json)
Hash identifier: l0jpF+4wxYeC/kOPNfQYjHbNQxhoEqBUB9WJNxvGU2k=
Subject key identifier: FD:B4:AD:DB:F0:61:BC:7B:76:20:A5:14:7F:9B:6B:1C:34:01:31:38
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 018C6E178CA49BEFB7054E6E806A94516268
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/_bSt2_BhvHt2IKUUf5trHDQBMTg.roa
Signing time: Fri 15 Dec 2023 15:28:06 +0000
ROA not before: Fri 15 Dec 2023 15:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204945
IP address blocks: 185.210.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:17:8c:a4:9b:ef:b7:05:4e:6e:80:6a:94:51:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Dec 15 15:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb4addbf061bc7b7620a5147f9b6b1c34013138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:9b:3e:c1:48:b1:63:e0:fc:80:7c:ac:fb:
63:95:69:86:29:ec:1f:d7:25:97:b2:d2:37:11:c2:
f3:c4:4f:03:cc:9e:8d:04:d0:4a:8c:af:8c:1d:23:
54:6e:99:a5:95:d9:a4:de:86:91:c8:48:ca:50:1e:
94:c6:f0:ea:b1:c4:36:d4:71:ac:83:a5:05:48:f1:
00:70:ce:e7:88:39:86:a3:c7:78:e6:ff:ff:66:aa:
cb:5f:bc:a8:c2:a6:9d:3e:0b:d8:e2:ea:d9:1b:dd:
6e:50:03:a7:16:c5:07:99:44:fe:2e:10:15:55:35:
18:fb:77:42:f6:c6:9d:cf:29:df:94:36:76:73:ed:
10:f8:13:f9:7b:f6:9f:c6:59:b5:be:70:59:d0:a6:
b8:5a:d6:88:60:40:5f:a6:08:bc:52:f6:41:6f:37:
49:ae:97:8e:fa:01:8b:aa:77:70:56:11:25:42:82:
96:96:2b:ad:48:33:aa:a5:9b:ea:d2:da:1e:51:89:
df:c5:74:d3:58:e7:90:c6:6b:93:9d:ac:63:13:1a:
76:e3:4e:bf:d3:bc:d9:cc:aa:8c:5d:e7:0d:ac:af:
3c:b5:67:1a:e3:9e:7f:cc:4f:8c:65:10:bf:ff:93:
d1:82:13:47:2c:2c:80:58:1e:06:15:41:bf:7f:08:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:AD:DB:F0:61:BC:7B:76:20:A5:14:7F:9B:6B:1C:34:01:31:38
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/_bSt2_BhvHt2IKUUf5trHDQBMTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.116.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:9d:d9:ce:fe:cd:be:da:9a:4d:94:9e:7a:d6:75:99:ba:08:
e7:3d:45:21:48:95:1a:15:42:38:1f:46:58:f2:34:3e:6e:bd:
f6:97:32:04:f6:20:aa:bb:2b:f7:e7:1d:8c:6c:12:9b:c5:76:
fc:9f:75:e1:2a:65:5d:f8:fd:71:c4:8b:ef:00:a8:ff:b1:3f:
d3:56:f3:62:3d:33:7b:bd:8a:6c:16:9e:2a:0a:f2:a3:d9:da:
07:39:83:5d:47:95:6d:d1:02:c2:98:31:f9:5f:f7:e3:c6:c6:
a2:13:8e:a6:50:69:ef:7a:f9:53:52:9e:17:37:97:af:b1:a4:
fe:ab:40:6e:74:80:7b:8a:40:75:cc:37:c5:06:7b:17:e3:cd:
90:be:2d:85:70:6f:57:76:13:c0:12:d4:0e:b4:82:56:f3:45:
db:c6:8b:ac:bd:1b:34:c7:9c:01:fa:f5:41:4c:f6:e2:2a:46:
0d:35:4c:a4:16:fa:ea:d8:d1:89:f3:b8:42:0d:03:7b:4a:a0:
b7:dd:db:51:f1:bf:52:24:1c:31:0a:cd:46:ab:69:cc:35:47:
ce:9f:9d:91:e7:fc:24:d5:41:61:54:0d:19:dd:6b:9b:81:41:
47:b8:71:d9:eb:e6:0f:26:bf:f3:7b:e2:9f:56:fe:08:98:d6:
e7:51:b7:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxuF4ykm++3BU5ugGqUUWJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz
YjljN2UwHhcNMjMxMjE1MTUyODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGI0YWRkYmYwNjFiYzdiNzYyMGE1MTQ3ZjliNmIxYzM0MDEzMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSubPsFIsWPg/IB8rPtjlWmGKewf
1yWXstI3EcLzxE8DzJ6NBNBKjK+MHSNUbpmlldmk3oaRyEjKUB6UxvDqscQ21HGs
g6UFSPEAcM7niDmGo8d45v//ZqrLX7yowqadPgvY4urZG91uUAOnFsUHmUT+LhAV
VTUY+3dC9sadzynflDZ2c+0Q+BP5e/afxlm1vnBZ0Ka4WtaIYEBfpgi8UvZBbzdJ
rpeO+gGLqndwVhElQoKWliutSDOqpZvq0toeUYnfxXTTWOeQxmuTnaxjExp2406/
07zZzKqMXecNrK88tWca455/zE+MZRC//5PRghNHLCyAWB4GFUG/fwjCcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP20rdvwYbx7diClFH+baxw0ATE4MB8GA1UdIwQY
MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt
MjgzNmFkMWMzMjFlLzEvX2JTdDJfQmh2SHQySUtVVWY1dHJIRFFCTVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl
LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudJ0MA0G
CSqGSIb3DQEBCwUAA4IBAQDKndnO/s2+2ppNlJ561nWZugjnPUUhSJUaFUI4H0ZY
8jQ+br32lzIE9iCquyv35x2MbBKbxXb8n3XhKmVd+P1xxIvvAKj/sT/TVvNiPTN7
vYpsFp4qCvKj2doHOYNdR5Vt0QLCmDH5X/fjxsaiE46mUGnvevlTUp4XN5evsaT+
q0BudIB7ikB1zDfFBnsX482Qvi2FcG9XdhPAEtQOtIJW80XbxousvRs0x5wB+vVB
TPbiKkYNNUykFvrq2NGJ87hCDQN7SqC33dtR8b9SJBwxCs1Gq2nMNUfOn52R5/wk
1UFhVA0Z3WubgUFHuHHZ6+YPJr/ze+KfVv4ImNbnUbew
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org