Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/UgHVItg-yaXUAdzvfPs-iC3_wkY.roa
File: UgHVItg-yaXUAdzvfPs-iC3_wkY.roa (raw, json)
Hash identifier: fRzRhwIZT6oOGLWVojk6hTKEBobajWzrPeyLR8gl7SQ=
Subject key identifier: 52:01:D5:22:D8:3E:C9:A5:D4:01:DC:EF:7C:FB:3E:88:2D:FF:C2:46
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 018F517646AFE363F53EB9A203873E6901A5
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/UgHVItg-yaXUAdzvfPs-iC3_wkY.roa
Signing time: Tue 07 May 2024 05:10:56 +0000
ROA not before: Tue 07 May 2024 05:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.14.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 20:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:76:46:af:e3:63:f5:3e:b9:a2:03:87:3e:69:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: May 7 05:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5201d522d83ec9a5d401dcef7cfb3e882dffc246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:57:22:b3:27:19:8a:8f:41:23:de:61:ea:
dd:bd:6b:48:59:fb:87:40:e5:f7:29:d4:36:bc:de:
9c:0f:09:cc:c6:25:ce:e7:6f:ee:9d:c5:71:75:43:
c7:1f:35:50:e6:57:75:d6:1a:ab:bc:06:ab:4a:f0:
5c:70:59:7e:de:77:64:10:b4:8d:30:2e:11:e6:2d:
d7:cc:ad:bf:5b:df:4c:0f:3f:98:f7:4a:d7:eb:ed:
5d:73:84:92:b4:0d:2f:30:45:9b:55:1f:28:3b:00:
d7:70:bb:52:69:64:b7:f5:8e:b1:cb:25:8b:0f:12:
54:66:50:89:5c:ac:fe:9a:55:5d:d2:bd:24:20:3c:
6a:dc:ef:a0:7c:69:f5:05:e3:d7:91:ab:a2:fd:c7:
96:d1:d4:26:7c:08:e7:26:af:d7:2d:d6:dc:67:01:
9d:e2:e7:06:a2:77:75:bf:2b:1e:b9:95:25:b5:1c:
c4:eb:3b:4b:6f:95:fb:68:40:72:ed:81:77:36:eb:
ff:a9:ac:fd:99:89:c1:ce:70:d0:3c:70:d2:80:ab:
3d:66:85:6b:59:55:9c:65:ef:4e:aa:4e:39:83:f0:
91:85:01:de:83:9b:b0:b9:4c:4b:65:e0:3e:1a:71:
6e:08:69:77:49:fc:56:5f:54:a1:77:44:da:ca:87:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:D5:22:D8:3E:C9:A5:D4:01:DC:EF:7C:FB:3E:88:2D:FF:C2:46
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/UgHVItg-yaXUAdzvfPs-iC3_wkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:22:4f:70:fa:8c:bf:70:18:19:39:27:d5:dc:5c:33:b3:43:
63:f3:4a:97:c5:6c:68:f4:27:5b:42:38:a1:8d:99:e3:f6:c4:
da:47:b3:1c:2d:3f:96:d6:3b:ac:e0:bd:aa:33:b9:db:45:99:
2f:dc:f6:37:0a:14:2b:6d:ee:eb:2d:22:cb:c0:f8:97:84:bd:
c1:b2:c4:4c:db:27:3d:77:82:0b:d9:21:91:6c:7b:c8:e3:f3:
2a:99:52:21:45:c8:89:86:43:ca:6a:20:b5:16:97:2c:e4:b3:
13:e3:fb:bd:0a:93:92:06:52:d9:c4:ab:d9:60:1b:a9:76:bc:
f4:05:f0:11:ef:ce:88:94:c8:19:d5:e1:8f:8f:13:da:87:ce:
7f:c4:23:dc:c5:5c:79:a5:a9:42:25:bc:ac:b2:ad:60:5f:09:
57:cf:69:1e:ad:72:63:a6:98:e2:ef:05:f2:29:87:81:b5:75:
9c:b2:e1:2b:a9:36:cf:e2:ed:65:c4:23:1f:8c:d6:43:2a:2d:
a6:18:2b:24:ba:e4:fd:f6:79:cf:10:93:26:62:65:07:ab:f1:
ba:fe:df:1a:df:b7:a5:28:86:6a:8c:29:d3:a2:a1:73:47:79:
eb:9c:c8:26:a1:a9:b2:80:c2:4c:2a:c8:d5:6c:45:9b:b1:e9:
18:ea:e2:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9Rdkav42P1PrmiA4c+aQGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy
OWE1MmMwHhcNMjQwNTA3MDUxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjAxZDUyMmQ4M2VjOWE1ZDQwMWRjZWY3Y2ZiM2U4ODJkZmZjMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+1XIrMnGYqPQSPeYerdvWtIWfuH
QOX3KdQ2vN6cDwnMxiXO52/uncVxdUPHHzVQ5ld11hqrvAarSvBccFl+3ndkELSN
MC4R5i3XzK2/W99MDz+Y90rX6+1dc4SStA0vMEWbVR8oOwDXcLtSaWS39Y6xyyWL
DxJUZlCJXKz+mlVd0r0kIDxq3O+gfGn1BePXkaui/ceW0dQmfAjnJq/XLdbcZwGd
4ucGond1vyseuZUltRzE6ztLb5X7aEBy7YF3Nuv/qaz9mYnBznDQPHDSgKs9ZoVr
WVWcZe9Oqk45g/CRhQHeg5uwuUxLZeA+GnFuCGl3SfxWX1Shd0TayodFAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIB1SLYPsml1AHc73z7Pogt/8JGMB8GA1UdIwQY
MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt
MmZjYzBiNzQ5YjMyLzEvVWdIVkl0Zy15YVhVQWR6dmZQcy1pQzNfd2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy
LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ7uMA0G
CSqGSIb3DQEBCwUAA4IBAQAPIk9w+oy/cBgZOSfV3Fwzs0Nj80qXxWxo9CdbQjih
jZnj9sTaR7McLT+W1jus4L2qM7nbRZkv3PY3ChQrbe7rLSLLwPiXhL3BssRM2yc9
d4IL2SGRbHvI4/MqmVIhRciJhkPKaiC1Fpcs5LMT4/u9CpOSBlLZxKvZYBupdrz0
BfAR786IlMgZ1eGPjxPah85/xCPcxVx5palCJbyssq1gXwlXz2kerXJjppji7wXy
KYeBtXWcsuErqTbP4u1lxCMfjNZDKi2mGCskuuT99nnPEJMmYmUHq/G6/t8a37el
KIZqjCnToqFzR3nrnMgmoamygMJMKsjVbEWbsekY6uLO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org