Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/634lIXMT3CBcb4gZu-1TyRRmDUc.roa
File: 634lIXMT3CBcb4gZu-1TyRRmDUc.roa (raw, json)
Hash identifier: RuYiXiGb0UtXqmAAE0bjvSQcuBSeDzF8vTONqeLPZoM=
Subject key identifier: EB:7E:25:21:73:13:DC:20:5C:6F:88:19:BB:ED:53:C9:14:66:0D:47
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 018CC424590B65C63BAC66B0A2C1620A46F7
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/634lIXMT3CBcb4gZu-1TyRRmDUc.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207208
IP address blocks: 185.1.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:59:0b:65:c6:3b:ac:66:b0:a2:c1:62:0a:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7e25217313dc205c6f8819bbed53c914660d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:e2:6b:4b:95:36:6d:d4:5a:18:f8:e3:e8:
ce:22:21:17:b5:2e:04:24:66:7a:27:0b:3f:36:ad:
2f:b2:87:87:a4:8b:39:70:9a:8a:e2:ae:1a:ea:20:
b0:f1:fa:12:aa:c8:15:62:8f:65:25:3a:19:81:19:
07:ce:a2:83:53:63:80:a4:71:99:41:94:5d:59:5d:
80:f6:d8:47:c9:bc:99:9b:c9:54:61:9e:c8:84:11:
e6:cc:97:75:3a:73:4d:59:34:ea:f1:af:f4:aa:cc:
29:66:4b:a7:06:cf:e8:1f:1b:c3:47:16:3f:c7:82:
70:5d:af:ba:ae:e4:7a:c4:73:26:4e:6a:ef:ee:46:
a5:df:1f:df:f3:b2:05:4f:18:d6:05:de:72:c8:08:
00:52:1d:af:75:72:ab:4a:03:f5:6f:4f:a7:69:e4:
08:b4:ad:70:37:56:d0:68:79:ba:ec:49:7e:78:35:
5c:c5:33:b0:b7:87:5b:b7:1f:27:52:ce:ab:4c:3d:
76:f6:40:97:89:54:e1:23:70:75:2e:79:87:d9:31:
de:85:99:30:cf:8f:59:97:40:dd:30:92:ea:19:e9:
83:22:3e:60:b8:26:4a:d3:b5:8c:89:63:da:6a:4f:
37:4b:91:26:93:ab:cc:87:70:7b:91:8c:c2:b1:f4:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:25:21:73:13:DC:20:5C:6F:88:19:BB:ED:53:C9:14:66:0D:47
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/634lIXMT3CBcb4gZu-1TyRRmDUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.217.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:67:25:2d:44:0a:84:ec:2f:73:d9:4a:3f:ce:b2:cf:d5:
5e:be:78:62:bc:64:34:c5:f8:d7:73:f7:ae:ac:14:42:50:87:
7e:68:ad:5f:f0:16:d0:55:41:d6:9a:a7:b6:11:15:56:17:82:
5a:fb:15:e3:40:13:85:f2:22:cb:11:97:1a:d3:7f:5b:f8:e6:
4c:3d:88:13:71:80:9e:54:43:4b:e3:00:eb:51:de:bd:66:7d:
dd:2b:cc:1d:61:f3:fa:8c:07:53:e6:1d:1b:4e:05:ac:e2:3b:
4f:12:6b:7b:c5:7d:a4:08:45:bd:e3:b2:ec:89:ea:75:20:94:
3e:c8:f5:23:19:b1:b8:ae:18:df:a9:2c:d5:39:44:a6:f9:e7:
d3:37:ac:59:6e:b1:a9:42:cb:d9:e9:99:79:88:8b:6d:0c:bb:
ba:b0:c4:fd:0f:a5:61:e3:33:96:e5:0f:9d:c5:62:96:2a:80:
0b:51:53:ec:2d:7d:e9:d8:56:fe:a1:c3:53:1f:2f:b5:dc:b0:
a0:7f:e7:00:68:4d:e5:c1:b2:44:9f:81:30:f3:dd:5f:52:33:
58:87:f2:d2:cb:0e:96:b2:b1:40:b4:07:22:8e:a5:66:a7:45:
05:70:14:15:ef:31:5f:86:5e:fd:1e:73:43:4d:b4:a8:1a:1d:
6e:7d:08:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJFkLZcY7rGawosFiCkb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM5NzFhMzJjMDY5MmM0ZTM0MmU5MTE3OTA2NjI0NzBj
ZjMxYjIwHhcNMjQwMTAxMDgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjdlMjUyMTczMTNkYzIwNWM2Zjg4MTliYmVkNTNjOTE0NjYwZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLbia0uVNm3UWhj44+jOIiEXtS4E
JGZ6Jws/Nq0vsoeHpIs5cJqK4q4a6iCw8foSqsgVYo9lJToZgRkHzqKDU2OApHGZ
QZRdWV2A9thHybyZm8lUYZ7IhBHmzJd1OnNNWTTq8a/0qswpZkunBs/oHxvDRxY/
x4JwXa+6ruR6xHMmTmrv7kal3x/f87IFTxjWBd5yyAgAUh2vdXKrSgP1b0+naeQI
tK1wN1bQaHm67El+eDVcxTOwt4dbtx8nUs6rTD129kCXiVThI3B1LnmH2THehZkw
z49Zl0DdMJLqGemDIj5guCZK07WMiWPaak83S5Emk6vMh3B7kYzCsfTwrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOt+JSFzE9wgXG+IGbvtU8kUZg1HMB8GA1UdIwQY
MBaAFL/jlxoywGksTjQukReQZiRwzzGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUt
YzRkY2M3ZjZiN2RmLzEvNjM0bElYTVQzQ0JjYjRnWnUtMVR5UlJtRFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUtYzRkY2M3ZjZiN2Rm
LzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQHZMA0G
CSqGSIb3DQEBCwUAA4IBAQCYV2clLUQKhOwvc9lKP86yz9VevnhivGQ0xfjXc/eu
rBRCUId+aK1f8BbQVUHWmqe2ERVWF4Ja+xXjQBOF8iLLEZca039b+OZMPYgTcYCe
VENL4wDrUd69Zn3dK8wdYfP6jAdT5h0bTgWs4jtPEmt7xX2kCEW947Lsiep1IJQ+
yPUjGbG4rhjfqSzVOUSm+efTN6xZbrGpQsvZ6Zl5iIttDLu6sMT9D6Vh4zOW5Q+d
xWKWKoALUVPsLX3p2Fb+ocNTHy+13LCgf+cAaE3lwbJEn4Ew891fUjNYh/LSyw6W
srFAtAcijqVmp0UFcBQV7zFfhl79HnNDTbSoGh1ufQju
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:03 2024 by rpki-client on console-ams.rpki-client.org