Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/uJadJqpNxoZyN44Zjhb3SjBLL4g.roa
File: uJadJqpNxoZyN44Zjhb3SjBLL4g.roa (raw, json)
Hash identifier: uqfD0KjVp9K1qxQFHMjZRudtavVtRXeQW7lQhCgD6H0=
Subject key identifier: B8:96:9D:26:AA:4D:C6:86:72:37:8E:19:8E:16:F7:4A:30:4B:2F:88
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 018CCAE64814EBAD1A5FFF92484FB04A2792
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/uJadJqpNxoZyN44Zjhb3SjBLL4g.roa
Signing time: Tue 02 Jan 2024 15:58:58 +0000
ROA not before: Tue 02 Jan 2024 15:58:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50319
IP address blocks: 185.84.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Feb 2024 12:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:e6:48:14:eb:ad:1a:5f:ff:92:48:4f:b0:4a:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Jan 2 15:58:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8969d26aa4dc68672378e198e16f74a304b2f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:8d:e6:cf:86:af:a5:46:c6:2e:00:88:d6:
07:c8:db:66:9d:63:84:98:de:75:f6:4e:79:57:02:
50:e8:7c:6d:0f:fd:d3:1a:ed:86:44:db:b6:d6:25:
d4:36:02:13:77:df:9e:3e:50:b6:01:39:90:ef:cf:
da:7f:5e:bb:45:05:fb:f5:35:70:87:c4:27:62:46:
ba:3d:ef:bd:46:c6:14:cb:0e:24:1f:03:4b:6f:56:
73:bc:07:6c:a3:10:88:1f:b5:c8:3d:9c:79:dc:83:
d6:58:da:53:3f:7b:b7:24:91:4e:b0:54:0c:59:2f:
e1:2d:b7:99:0b:91:93:6e:0f:97:47:ac:ef:5e:6f:
80:f4:68:85:03:08:cd:b3:a7:0e:68:98:ed:78:e6:
c9:d8:81:36:10:e3:b2:d9:a4:84:fc:1c:69:2d:88:
58:a1:52:f6:0a:c5:e3:15:2a:fc:02:b2:e1:61:5e:
65:b3:77:bf:e9:bc:07:0a:d5:b8:e4:e7:9a:b2:61:
d3:01:2a:eb:32:c2:38:10:55:33:74:02:33:95:d0:
8c:01:2e:2a:50:bc:57:28:e7:24:49:75:f4:4a:fc:
7e:d5:df:a1:3b:11:04:25:d2:11:b8:b8:3c:e7:6c:
5c:3f:5d:d4:54:12:f9:15:0c:4d:dc:6a:d9:7e:1c:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:9D:26:AA:4D:C6:86:72:37:8E:19:8E:16:F7:4A:30:4B:2F:88
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/uJadJqpNxoZyN44Zjhb3SjBLL4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:2b:b4:c0:a5:32:64:a3:a4:74:a7:f0:ba:6b:99:bd:01:f1:
89:f6:38:93:f8:49:fb:5d:95:c0:bb:db:df:cb:6c:38:28:c7:
4c:aa:2d:9d:19:d6:c6:bc:37:40:9a:09:58:13:bf:50:fc:a0:
46:74:1a:e2:3a:1a:e9:fc:9f:55:db:1c:44:a3:11:fe:aa:43:
7c:69:91:b9:8b:64:27:c6:2e:ae:a7:1a:76:4e:a2:48:6a:f5:
05:c6:8f:3d:5a:a4:0b:f4:18:b3:00:30:eb:54:79:f1:cd:b8:
7a:14:6e:59:43:e1:b4:22:aa:26:bb:25:e9:9a:b8:ab:0c:9f:
4d:e6:af:4f:22:4c:e4:5d:af:86:66:7f:17:c8:b7:e6:d9:43:
bf:1e:31:73:d5:60:6a:7e:04:79:e8:49:ea:47:64:f4:fa:3b:
cb:23:09:70:ca:3e:f7:e7:dd:da:74:f7:34:d0:5e:db:a7:5c:
0d:8c:e4:d2:4c:00:f8:64:be:17:04:66:58:84:5e:b4:11:10:
e3:cf:9f:8b:c2:50:fd:7d:64:2d:40:ee:7a:88:e7:b0:5a:ad:
8f:33:f8:f3:ac:69:25:90:32:5d:df:2d:c8:44:a5:22:7b:23:
40:c0:d1:bb:61:59:4c:ef:71:24:c9:b3:fa:3f:7a:c6:cb:e1:
27:8b:0a:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzK5kgU660aX/+SSE+wSieSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjQwMTAyMTU1ODU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODk2OWQyNmFhNGRjNjg2NzIzNzhlMTk4ZTE2Zjc0YTMwNGIyZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiiN5s+Gr6VGxi4AiNYHyNtmnWOE
mN519k55VwJQ6HxtD/3TGu2GRNu21iXUNgITd9+ePlC2ATmQ78/af167RQX79TVw
h8QnYka6Pe+9RsYUyw4kHwNLb1ZzvAdsoxCIH7XIPZx53IPWWNpTP3u3JJFOsFQM
WS/hLbeZC5GTbg+XR6zvXm+A9GiFAwjNs6cOaJjteObJ2IE2EOOy2aSE/BxpLYhY
oVL2CsXjFSr8ArLhYV5ls3e/6bwHCtW45OeasmHTASrrMsI4EFUzdAIzldCMAS4q
ULxXKOckSXX0Svx+1d+hOxEEJdIRuLg852xcP13UVBL5FQxN3GrZfhyqkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiWnSaqTcaGcjeOGY4W90owSy+IMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvdUphZEpxcE54b1p5TjQ0WmpoYjNTakJMTDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVTEMA0G
CSqGSIb3DQEBCwUAA4IBAQCdK7TApTJko6R0p/C6a5m9AfGJ9jiT+En7XZXAu9vf
y2w4KMdMqi2dGdbGvDdAmglYE79Q/KBGdBriOhrp/J9V2xxEoxH+qkN8aZG5i2Qn
xi6upxp2TqJIavUFxo89WqQL9BizADDrVHnxzbh6FG5ZQ+G0IqomuyXpmrirDJ9N
5q9PIkzkXa+GZn8XyLfm2UO/HjFz1WBqfgR56EnqR2T0+jvLIwlwyj73593adPc0
0F7bp1wNjOTSTAD4ZL4XBGZYhF60ERDjz5+LwlD9fWQtQO56iOewWq2PM/jzrGkl
kDJd3y3IRKUieyNAwNG7YVlM73EkybP6P3rGy+Eniwr/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:01 2025 by rpki-client