Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/m3SkxpJjOhYy-ZQT78jVaBlgZSg.roa
File: m3SkxpJjOhYy-ZQT78jVaBlgZSg.roa (raw, json)
Hash identifier: OvPru+LC8ju31OQRXfmqoZ0hTaSCpg/r0Tz1u/6rW20=
Subject key identifier: 9B:74:A4:C6:92:63:3A:16:32:F9:94:13:EF:C8:D5:68:19:60:65:28
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 018CC26D7FD72E6BF75DCECE1102C7446E7A
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/m3SkxpJjOhYy-ZQT78jVaBlgZSg.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 269070
IP address blocks: 185.14.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 05:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:d7:2e:6b:f7:5d:ce:ce:11:02:c7:44:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b74a4c692633a1632f99413efc8d56819606528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:8b:16:a4:07:1d:fe:65:42:ac:a4:8b:03:
68:60:68:f5:af:67:f7:f7:60:36:c0:4e:3d:4a:d8:
fe:d4:1a:63:5d:c2:70:12:5c:3e:a5:2f:03:9c:17:
7e:dd:b1:fe:f1:d6:7b:a8:04:25:e9:11:b5:37:e0:
de:04:c7:7c:4d:c3:56:4f:2b:2e:78:a9:0d:86:d0:
83:ae:91:46:e3:24:30:14:28:18:b5:68:cd:cc:af:
11:13:d8:2f:8f:6b:c2:6e:82:93:ef:86:d5:b9:17:
11:3f:dc:9a:af:af:b0:13:3e:35:7f:bb:82:fc:47:
47:e0:ea:bc:08:6a:78:71:5e:2a:54:b0:0c:8c:41:
a7:01:56:7f:c0:38:ca:08:11:59:96:3c:c5:9e:4f:
cc:61:34:0c:3c:3d:54:67:97:f0:66:9d:c3:24:31:
53:3b:df:1d:c7:0a:39:cd:c1:fe:0a:a3:0a:17:f4:
b6:69:a7:45:7d:db:fc:6d:e4:7d:f6:3c:3f:f8:a1:
21:26:f0:4a:e8:99:00:3b:ae:fb:3e:d1:78:36:4e:
70:71:10:28:5f:bc:d0:8d:eb:aa:55:ed:a1:67:e4:
74:59:e5:40:35:c3:f0:41:84:03:40:2e:2f:07:a7:
a1:90:1d:00:82:23:94:33:0e:c9:a7:6d:a8:7d:ea:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:A4:C6:92:63:3A:16:32:F9:94:13:EF:C8:D5:68:19:60:65:28
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/m3SkxpJjOhYy-ZQT78jVaBlgZSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
27:22:f7:86:2c:ab:d1:cf:50:83:6a:84:97:70:7d:d3:ec:2a:
6a:c3:24:ac:61:81:fa:ec:44:e3:1b:60:b9:93:e4:0b:c5:0e:
21:9f:c1:2f:96:97:a0:e5:f0:b4:e2:2b:e1:0d:e8:34:c4:6c:
2b:51:c2:d8:fb:53:47:fc:df:be:18:7c:3c:18:c7:c1:b4:71:
87:ed:4c:2b:2b:af:26:0c:8f:66:fe:c6:8e:ce:bf:d2:7b:00:
b5:26:01:81:7e:25:3a:f5:da:16:12:2d:c7:79:ff:5f:30:50:
da:bf:9a:f5:7e:56:4d:83:e0:01:cb:2c:aa:84:9a:62:9b:ab:
8b:da:6d:66:9d:ae:b5:04:6e:4a:96:7c:b0:27:18:f2:d6:98:
44:f0:cf:a9:61:74:1d:f0:c5:87:4f:16:c9:3a:74:23:08:a1:
db:86:39:90:6e:cf:63:07:18:4e:22:c9:fe:07:12:6f:90:c9:
a6:2c:2e:45:70:fe:54:e5:6c:3e:ae:67:1d:41:77:15:6e:93:
11:77:44:8f:2c:bb:db:d5:7d:9c:c6:e6:62:9a:f0:cf:dc:05:
91:bb:a3:c8:91:bc:02:8e:cd:28:5f:ca:fd:a9:01:1b:f6:29:
db:62:e3:2d:61:db:88:bc:fd:42:59:35:00:14:5a:af:ef:8a:
bd:82:dc:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbX/XLmv3Xc7OEQLHRG56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy
OWE1MmMwHhcNMjQwMTAxMDAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc0YTRjNjkyNjMzYTE2MzJmOTk0MTNlZmM4ZDU2ODE5NjA2NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gqLFqQHHf5lQqykiwNoYGj1r2f3
92A2wE49Stj+1BpjXcJwElw+pS8DnBd+3bH+8dZ7qAQl6RG1N+DeBMd8TcNWTysu
eKkNhtCDrpFG4yQwFCgYtWjNzK8RE9gvj2vCboKT74bVuRcRP9yar6+wEz41f7uC
/EdH4Oq8CGp4cV4qVLAMjEGnAVZ/wDjKCBFZljzFnk/MYTQMPD1UZ5fwZp3DJDFT
O98dxwo5zcH+CqMKF/S2aadFfdv8beR99jw/+KEhJvBK6JkAO677PtF4Nk5wcRAo
X7zQjeuqVe2hZ+R0WeVANcPwQYQDQC4vB6ehkB0AgiOUMw7Jp22ofeoXIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJt0pMaSYzoWMvmUE+/I1WgZYGUoMB8GA1UdIwQY
MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt
MmZjYzBiNzQ5YjMyLzEvbTNTa3hwSmpPaFl5LVpRVDc4alZhQmxnWlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy
LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ7uMA0G
CSqGSIb3DQEBCwUAA4IBAQAnIveGLKvRz1CDaoSXcH3T7CpqwySsYYH67ETjG2C5
k+QLxQ4hn8Evlpeg5fC04ivhDeg0xGwrUcLY+1NH/N++GHw8GMfBtHGH7UwrK68m
DI9m/saOzr/SewC1JgGBfiU69doWEi3Hef9fMFDav5r1flZNg+AByyyqhJpim6uL
2m1mna61BG5KlnywJxjy1phE8M+pYXQd8MWHTxbJOnQjCKHbhjmQbs9jBxhOIsn+
BxJvkMmmLC5FcP5U5Ww+rmcdQXcVbpMRd0SPLLvb1X2cxuZimvDP3AWRu6PIkbwC
js0oX8r9qQEb9inbYuMtYduIvP1CWTUAFFqv74q9gtzA
-----END CERTIFICATE-----
Generated at Tue May 7 05:43:07 2024 by rpki-client on console-fra.rpki-client.org