Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/Ra4yUVwp7fXtu01Z4Incq1YiJrQ.roa
File: Ra4yUVwp7fXtu01Z4Incq1YiJrQ.roa (raw, json)
Hash identifier: WwiAKbYxYtU/gD2E48qi6abGO0F1ahP+wytnoEA1Hzk=
Subject key identifier: 45:AE:32:51:5C:29:ED:F5:ED:BB:4D:59:E0:89:DC:AB:56:22:26:B4
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 018CC3B73BD5A0CA77FE267F46C9620A8149
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/Ra4yUVwp7fXtu01Z4Incq1YiJrQ.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 185.207.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 07 May 2024 09:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:d5:a0:ca:77:fe:26:7f:46:c9:62:0a:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45ae32515c29edf5edbb4d59e089dcab562226b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:ee:73:2a:7f:43:ef:86:8c:9d:14:96:f7:
83:e7:48:69:dd:4b:df:f7:4a:72:04:0f:1f:83:23:
78:85:c6:ee:0e:4d:f8:a2:2e:19:dd:3a:0c:dc:71:
c5:ca:86:23:f4:8a:5f:1d:21:a5:8e:b2:31:27:7b:
66:17:b7:c8:56:c1:90:ef:b6:a9:10:03:9e:c6:9e:
d1:ef:51:07:33:91:fd:37:13:6b:c3:59:93:88:28:
dd:7d:e9:20:7c:c2:ce:9e:5e:67:5d:4d:1c:c7:dd:
13:e7:0c:f3:a8:21:f1:40:ac:b8:6f:fa:2d:af:7a:
a6:28:82:af:78:cb:54:0f:96:24:49:f5:4a:23:1b:
71:c8:4a:60:37:90:b7:15:9e:44:9a:c4:15:03:c6:
7a:b3:f0:a5:08:78:04:7e:38:75:91:b0:1c:99:23:
21:46:c4:5f:27:82:ad:2f:a9:d4:10:ed:0e:4c:b3:
ea:fd:7f:67:55:b2:1f:4c:42:2f:eb:e7:59:ff:c9:
57:e4:91:cd:7e:75:9e:61:45:b3:92:bf:5a:62:19:
82:47:f6:78:61:c9:d2:0d:e5:5d:0f:13:12:66:00:
0d:5d:e2:29:f6:37:0c:a3:87:dc:8c:77:78:b7:cc:
2d:76:ef:7f:af:35:2e:51:e3:d1:32:13:97:96:7c:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AE:32:51:5C:29:ED:F5:ED:BB:4D:59:E0:89:DC:AB:56:22:26:B4
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/Ra4yUVwp7fXtu01Z4Incq1YiJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:9d:80:80:88:3c:01:e2:7a:83:43:44:4f:a1:de:8a:8c:5b:
c4:4d:a2:e5:7b:0d:4f:85:df:1c:89:1e:26:f9:a2:88:c7:ff:
ef:fa:81:30:23:be:a3:2b:ac:95:f2:17:13:a5:89:63:a1:d9:
a0:38:e3:d6:ac:34:57:18:c1:4c:a1:76:b1:b8:21:e9:41:3e:
87:e2:ab:43:5b:37:89:d8:01:36:dc:1b:42:93:ee:88:4a:bf:
83:eb:2f:c5:39:cf:67:df:6e:4b:a7:9e:d5:35:80:99:bb:38:
00:af:ef:50:70:c6:c6:f4:c6:bd:20:03:5c:ef:7c:14:52:b6:
8e:73:2d:29:6b:e7:36:06:08:17:78:73:4b:44:0e:5e:b4:f9:
0f:55:5d:65:7d:6d:fb:a7:e9:41:69:93:07:e1:98:44:4b:94:
c2:78:68:e7:b6:2e:9c:7c:6a:ab:38:70:a4:68:5f:fc:58:28:
9f:5d:f9:79:95:d7:7a:41:af:8c:16:ed:e8:c7:78:14:57:b7:
4f:91:6e:c2:f1:ff:f9:d7:51:6a:69:36:8e:09:df:09:9c:a0:
38:a8:02:22:37:e6:91:fb:59:1a:09:a6:3f:7d:6e:3d:c5:16:
6b:ff:77:88:95:89:45:b7:1f:ac:5e:d5:0b:8d:02:9e:72:b9:
2d:a8:5f:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzvVoMp3/iZ/RsliCoFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4
NThlYjIwHhcNMjQwMTAxMDYzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWFlMzI1MTVjMjllZGY1ZWRiYjRkNTllMDg5ZGNhYjU2MjIyNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvprucyp/Q++GjJ0UlveD50hp3Uvf
90pyBA8fgyN4hcbuDk34oi4Z3ToM3HHFyoYj9IpfHSGljrIxJ3tmF7fIVsGQ77ap
EAOexp7R71EHM5H9NxNrw1mTiCjdfekgfMLOnl5nXU0cx90T5wzzqCHxQKy4b/ot
r3qmKIKveMtUD5YkSfVKIxtxyEpgN5C3FZ5EmsQVA8Z6s/ClCHgEfjh1kbAcmSMh
RsRfJ4KtL6nUEO0OTLPq/X9nVbIfTEIv6+dZ/8lX5JHNfnWeYUWzkr9aYhmCR/Z4
YcnSDeVdDxMSZgANXeIp9jcMo4fcjHd4t8wtdu9/rzUuUePRMhOXlnwaDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWuMlFcKe317btNWeCJ3KtWIia0MB8GA1UdIwQY
MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt
MDJjMzdmZWI4YTllLzEvUmE0eVVWd3A3Zlh0dTAxWjRJbmNxMVlpSnJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll
LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc9kMA0G
CSqGSIb3DQEBCwUAA4IBAQCbnYCAiDwB4nqDQ0RPod6KjFvETaLlew1Phd8ciR4m
+aKIx//v+oEwI76jK6yV8hcTpYljodmgOOPWrDRXGMFMoXaxuCHpQT6H4qtDWzeJ
2AE23BtCk+6ISr+D6y/FOc9n325Lp57VNYCZuzgAr+9QcMbG9Ma9IANc73wUUraO
cy0pa+c2BggXeHNLRA5etPkPVV1lfW37p+lBaZMH4ZhES5TCeGjnti6cfGqrOHCk
aF/8WCifXfl5ldd6Qa+MFu3ox3gUV7dPkW7C8f/511FqaTaOCd8JnKA4qAIiN+aR
+1kaCaY/fW49xRZr/3eIlYlFtx+sXtULjQKecrktqF9n
-----END CERTIFICATE-----
Generated at Tue May 7 14:33:05 2024 by rpki-client on console-fra.rpki-client.org