Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/j0Rbd05LddZU2IhBPhsR1nGRlPY.roa
File: j0Rbd05LddZU2IhBPhsR1nGRlPY.roa (raw, json)
Hash identifier: wtT3/7j86sCf3z+Ss9bsqvEP44jGOs1/b3hw122EJ8k=
Subject key identifier: 8F:44:5B:77:4E:4B:75:D6:54:D8:88:41:3E:1B:11:D6:71:91:94:F6
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 0186C0E5A9E13C6B4D2DC322AC3A14F86682
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/j0Rbd05LddZU2IhBPhsR1nGRlPY.roa
Signing time: Wed 08 Mar 2023 11:05:22 +0000
ROA not before: Wed 08 Mar 2023 11:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205929
IP address blocks: 185.221.61.0/24 maxlen: 24
2a06:89c4:c000::/48 maxlen: 48
2a06:89c3:5010::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Jun 2023 13:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:e5:a9:e1:3c:6b:4d:2d:c3:22:ac:3a:14:f8:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Mar 8 11:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f445b774e4b75d654d888413e1b11d6719194f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:50:aa:f4:e0:34:17:5b:63:b6:68:c9:10:
13:37:2c:77:92:2a:4c:5a:5a:13:e4:c5:33:f4:94:
52:9a:a5:e6:8b:55:47:de:54:9a:a0:a3:5d:1e:64:
eb:05:74:86:5d:95:86:1f:c0:9c:f1:3c:07:60:19:
6b:19:2b:1c:53:b7:e0:61:99:e9:25:d1:f8:1b:e7:
c5:cd:7b:89:f5:79:ea:b7:d9:11:ad:9d:70:fd:de:
39:5f:26:bb:43:2c:31:76:6f:11:ac:f4:0b:8e:81:
b6:a5:f4:93:7d:98:bb:4f:7a:19:2c:64:a2:6e:8f:
32:78:f1:d1:e6:d6:94:53:42:37:2c:e4:2e:f5:72:
ff:df:23:97:04:ad:d2:33:65:d4:77:cd:27:d0:fe:
dd:9a:64:74:5e:c8:e0:03:ff:f8:da:56:95:c0:b0:
8c:df:2e:7b:3f:bb:50:e5:2d:d4:05:44:1d:3d:fd:
05:13:81:b6:1c:6c:35:70:ee:d4:95:2e:dd:af:35:
eb:78:0a:d0:ab:ec:8a:b1:06:b7:cb:0a:02:e9:c8:
35:36:1e:7e:43:34:e7:83:2a:10:c1:49:f1:da:e6:
4b:bf:64:de:41:36:fc:86:f2:2a:f7:57:bf:fc:35:
af:ff:85:f0:8f:fd:d3:f7:f4:f8:cf:c0:46:d3:b6:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:5B:77:4E:4B:75:D6:54:D8:88:41:3E:1B:11:D6:71:91:94:F6
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/j0Rbd05LddZU2IhBPhsR1nGRlPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.61.0/24
IPv6:
2a06:89c3:5010::/48
2a06:89c4:c000::/48
Signature Algorithm: sha256WithRSAEncryption
1b:aa:df:aa:6a:c3:f2:80:8a:42:c5:2c:72:00:c7:d5:91:00:
f1:1a:6c:0a:df:1b:10:e6:58:30:06:68:90:01:e4:29:5a:da:
21:32:65:a7:d2:5b:c2:4e:7a:e2:e5:de:79:af:24:3f:93:c6:
2c:82:08:fa:96:14:65:68:fb:8e:c4:f5:80:f4:a0:78:17:73:
11:4f:69:ac:06:65:d3:f4:bd:51:12:a0:c7:9d:58:15:80:e7:
b9:9b:10:92:c1:62:0d:04:8f:bd:6f:80:ee:10:31:8a:81:43:
47:21:f4:3f:ed:82:b5:b4:64:a8:26:53:e1:5d:43:95:e2:4e:
7b:4d:e4:a3:80:e9:f1:f2:bd:35:df:c3:4d:f7:8e:ff:83:99:
0f:f6:c8:c8:e4:bc:bd:df:45:0e:39:f5:ac:34:44:3c:3e:a5:
55:95:ba:36:0f:78:34:f2:29:4c:73:d6:ce:f1:46:a3:4a:b3:
3c:1a:6c:45:ed:9b:8e:63:10:c7:c2:b8:f1:cb:c2:b4:c7:e7:
eb:10:0c:3c:f4:09:d3:6e:46:d8:39:99:71:04:f3:e1:bb:7b:
fe:fb:17:ad:40:e9:d1:d7:37:0d:76:4e:6a:8a:37:11:7e:bd:
08:f8:d8:13:e5:a5:70:01:60:fa:32:09:6b:f5:b7:6b:1a:97:
1a:39:8c:77
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYbA5anhPGtNLcMirDoU+GaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjMwMzA4MTEwNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjQ0NWI3NzRlNGI3NWQ2NTRkODg4NDEzZTFiMTFkNjcxOTE5NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXtQqvTgNBdbY7ZoyRATNyx3kipM
WloT5MUz9JRSmqXmi1VH3lSaoKNdHmTrBXSGXZWGH8Cc8TwHYBlrGSscU7fgYZnp
JdH4G+fFzXuJ9Xnqt9kRrZ1w/d45Xya7Qywxdm8RrPQLjoG2pfSTfZi7T3oZLGSi
bo8yePHR5taUU0I3LOQu9XL/3yOXBK3SM2XUd80n0P7dmmR0XsjgA//42laVwLCM
3y57P7tQ5S3UBUQdPf0FE4G2HGw1cO7UlS7drzXreArQq+yKsQa3ywoC6cg1Nh5+
QzTngyoQwUnx2uZLv2TeQTb8hvIq91e//DWv/4Xwj/3T9/T4z8BG07adpwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI9EW3dOS3XWVNiIQT4bEdZxkZT2MB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvajBSYmQwNUxkZFpVMkloQlBoc1IxbkdSbFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAud09MBgE
AgACMBIDBwAqBonDUBADBwAqBonEwAAwDQYJKoZIhvcNAQELBQADggEBABuq36pq
w/KAikLFLHIAx9WRAPEabArfGxDmWDAGaJAB5Cla2iEyZafSW8JOeuLl3nmvJD+T
xiyCCPqWFGVo+47E9YD0oHgXcxFPaawGZdP0vVESoMedWBWA57mbEJLBYg0Ej71v
gO4QMYqBQ0ch9D/tgrW0ZKgmU+FdQ5XiTntN5KOA6fHyvTXfw033jv+DmQ/2yMjk
vL3fRQ459aw0RDw+pVWVujYPeDTyKUxz1s7xRqNKszwabEXtm45jEMfCuPHLwrTH
5+sQDDz0CdNuRtg5mXEE8+G7e/77F61A6dHXNw12TmqKNxF+vQj42BPlpXABYPoy
CWv1t2salxo5jHc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:58 2024 by rpki-client on console-ams.rpki-client.org