Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/cgGwHMUIh9dcHzncXNMYMbuvO7c.roa
File: cgGwHMUIh9dcHzncXNMYMbuvO7c.roa (raw, json)
Hash identifier: cJcwKlahn2sFGHo3Ejfv7gDCaioFIVaP6PYjYYObpsM=
Subject key identifier: 72:01:B0:1C:C5:08:87:D7:5C:1F:39:DC:5C:D3:18:31:BB:AF:3B:B7
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 018AF4F1A51CE68464A58F3F7E0613AC7228
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/cgGwHMUIh9dcHzncXNMYMbuvO7c.roa
Signing time: Tue 03 Oct 2023 09:49:51 +0000
ROA not before: Tue 03 Oct 2023 09:49:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206737
IP address blocks: 185.177.212.0/22 maxlen: 24
2a0a:4680::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:f1:a5:1c:e6:84:64:a5:8f:3f:7e:06:13:ac:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Oct 3 09:49:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7201b01cc50887d75c1f39dc5cd31831bbaf3bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:8b:e8:82:b2:d4:71:ff:6a:c8:a6:1e:4c:
48:79:4d:19:20:78:a8:6f:f1:20:23:05:ca:4f:c6:
ef:7e:a3:93:85:78:cf:3b:fd:72:e2:33:ac:4e:13:
c0:22:5c:67:12:45:c7:56:cc:49:c3:24:8a:5d:f6:
11:06:ef:88:f0:b1:d9:11:3c:e3:cd:68:e7:bc:68:
a8:03:5d:f4:71:4b:76:bd:d8:6d:21:b0:f0:e5:1d:
95:d8:7b:47:dc:a0:60:40:f6:c5:49:68:ea:20:4b:
b4:6a:2d:d4:d0:b0:b0:c2:d9:fe:67:92:fa:1e:3d:
a3:1a:cc:38:10:35:24:f1:a3:c2:0f:87:a7:ac:76:
13:d7:4b:92:e3:af:aa:d1:6f:24:2d:46:42:71:21:
ff:09:82:a2:58:6b:4e:00:25:04:4b:69:39:a6:e6:
fa:20:31:8b:1c:09:53:df:64:43:14:10:92:15:c0:
23:9f:8e:d0:9b:c9:52:7a:44:f0:fb:08:9b:6e:c0:
7c:f0:ec:39:7a:72:14:78:dd:51:4a:24:14:33:73:
ac:5b:82:22:a9:13:59:22:db:a1:b4:90:e8:a8:3c:
ac:57:ba:be:bd:70:60:14:a9:29:41:04:f8:31:eb:
16:39:38:2d:a2:e0:f9:11:bc:da:b9:d8:dd:ac:37:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:B0:1C:C5:08:87:D7:5C:1F:39:DC:5C:D3:18:31:BB:AF:3B:B7
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/cgGwHMUIh9dcHzncXNMYMbuvO7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.212.0/22
IPv6:
2a0a:4680::/29
Signature Algorithm: sha256WithRSAEncryption
26:b6:bc:c6:d3:69:2e:3c:92:64:85:bf:43:c7:0f:48:cf:89:
95:34:ac:ad:d1:25:c9:cd:2b:84:e3:e3:74:e9:b2:62:ad:6a:
90:37:0a:eb:c2:fe:07:c6:43:1f:71:41:4c:2d:f9:8b:03:23:
ca:92:2b:85:67:7d:d2:66:5a:47:31:8e:6e:95:22:e0:ca:88:
b4:ac:65:5d:5f:3e:f9:a2:e2:56:c9:04:9e:f7:ab:be:c8:d1:
7a:21:4a:0d:ee:87:4a:1b:0e:cc:15:8c:a4:1b:1f:4a:0a:2a:
5f:53:ff:5f:86:68:29:75:60:db:82:5e:de:f4:f9:51:4c:63:
f1:67:cd:3a:6c:87:61:0f:2e:fa:86:0e:98:48:a6:74:d2:b4:
0b:ff:61:b6:77:b6:c4:49:29:e5:77:99:bc:f9:01:00:a4:c6:
a5:12:7d:76:07:94:67:19:42:08:87:81:83:77:2c:81:4d:f9:
6f:4f:08:65:f3:3d:78:d5:29:e6:98:de:74:a7:9f:aa:fd:60:
a4:2f:db:f0:24:94:e9:25:07:3a:b3:93:40:6c:0d:42:5f:f1:
7d:3e:49:ff:b2:89:d1:ca:a9:2f:df:c4:45:e3:4b:c8:9a:2d:
9d:79:6c:b4:45:3b:71:2f:60:8c:00:7b:74:dd:5f:46:d8:b0:
3e:1e:96:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYr08aUc5oRkpY8/fgYTrHIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjY4N2ZiNjRhNzdmMDEwMGJhZjIzZDRmMzQxZWNlNzc1
OTUwZTUwHhcNMjMxMDAzMDk0OTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjAxYjAxY2M1MDg4N2Q3NWMxZjM5ZGM1Y2QzMTgzMWJiYWYzYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tCL6IKy1HH/asimHkxIeU0ZIHio
b/EgIwXKT8bvfqOThXjPO/1y4jOsThPAIlxnEkXHVsxJwySKXfYRBu+I8LHZETzj
zWjnvGioA130cUt2vdhtIbDw5R2V2HtH3KBgQPbFSWjqIEu0ai3U0LCwwtn+Z5L6
Hj2jGsw4EDUk8aPCD4enrHYT10uS46+q0W8kLUZCcSH/CYKiWGtOACUES2k5pub6
IDGLHAlT32RDFBCSFcAjn47Qm8lSekTw+wibbsB88Ow5enIUeN1RSiQUM3OsW4Ii
qRNZItuhtJDoqDysV7q+vXBgFKkpQQT4MesWOTgtouD5EbzaudjdrDc1dwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHIBsBzFCIfXXB853FzTGDG7rzu3MB8GA1UdIwQY
MBaAFChmh/tkp38BALryPU80Hs53WVDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQt
NjMzOWY2YjM2YmNiLzEvY2dHd0hNVUloOWRjSHpuY1hOTVlNYnV2TzdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQtNjMzOWY2YjM2YmNi
LzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubHUMA0E
AgACMAcDBQMqCkaAMA0GCSqGSIb3DQEBCwUAA4IBAQAmtrzG02kuPJJkhb9Dxw9I
z4mVNKyt0SXJzSuE4+N06bJirWqQNwrrwv4HxkMfcUFMLfmLAyPKkiuFZ33SZlpH
MY5ulSLgyoi0rGVdXz75ouJWyQSe96u+yNF6IUoN7odKGw7MFYykGx9KCipfU/9f
hmgpdWDbgl7e9PlRTGPxZ806bIdhDy76hg6YSKZ00rQL/2G2d7bESSnld5m8+QEA
pMalEn12B5RnGUIIh4GDdyyBTflvTwhl8z141SnmmN50p5+q/WCkL9vwJJTpJQc6
s5NAbA1CX/F9Pkn/sonRyqkv38RF40vImi2deWy0RTtxL2CMAHt03V9G2LA+HpZg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:07 2024 by rpki-client on console-ams.rpki-client.org