Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa
File: NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa (raw, json)
Hash identifier: H8JK1PQwEdwg6DXJOqgHp4CJMtE4+nDKuOlCAftbvmE=
Subject key identifier: 34:7D:A4:24:4B:82:D2:5B:15:5B:4B:38:DD:77:81:7F:36:53:F9:18
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018A8CA09A5D23EBB6CE08295DA32E35EF6F
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa
Signing time: Wed 13 Sep 2023 03:40:50 +0000
ROA not before: Wed 13 Sep 2023 03:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 10:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8c:a0:9a:5d:23:eb:b6:ce:08:29:5d:a3:2e:35:ef:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Sep 13 03:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=347da4244b82d25b155b4b38dd77817f3653f918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:dc:5a:2f:05:98:fd:4f:d1:3f:aa:0b:f7:
e3:69:19:ce:1a:1c:78:5d:9c:8c:41:c1:c2:55:4f:
59:e5:0f:ba:cb:76:fd:ee:e5:2f:35:ef:19:87:ad:
b4:97:f1:ce:ca:64:ef:63:34:ea:94:ea:ab:1e:68:
92:d8:db:b1:86:c8:10:ae:7d:96:57:4e:b5:b7:ee:
fa:72:a3:f8:99:c8:18:58:60:e1:fc:77:9a:f5:f8:
73:9c:0d:3b:ab:93:d1:bd:e7:91:6a:74:2b:71:4a:
04:97:49:eb:d3:c3:29:d4:53:56:a7:3b:a3:09:87:
14:06:0d:1e:39:a8:e9:3c:22:0f:28:d1:dc:47:4a:
db:7e:2c:68:0b:da:8b:14:4e:f2:ab:16:06:5f:23:
52:5c:5a:16:47:a7:f6:85:e6:31:05:7a:49:0a:09:
fd:5f:13:de:ee:53:29:a3:cd:16:58:6b:f1:fc:08:
ec:d0:f7:9d:1e:4d:5d:90:9c:47:76:32:ad:40:25:
59:2e:ee:fc:9c:d9:a4:10:30:18:82:61:38:cc:1a:
cc:3b:ba:70:a2:dd:d5:0d:56:79:cf:a3:10:2b:f4:
3d:bb:cc:ce:6b:32:67:57:9b:d9:42:ff:68:85:cf:
84:95:f6:79:ce:2f:97:59:e4:6e:99:58:df:eb:d1:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:A4:24:4B:82:D2:5B:15:5B:4B:38:DD:77:81:7F:36:53:F9:18
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
86:4a:99:7b:d4:fe:0c:89:e2:ec:1c:54:7c:c3:5d:2f:bb:c2:
7e:9c:b6:68:57:d3:6c:a2:12:a1:ab:a6:f8:e2:d0:19:20:76:
9d:a4:93:9e:2f:dd:c5:55:a2:40:db:f8:1d:60:00:5f:ea:6b:
53:14:76:ad:7d:fc:91:2e:c1:47:b1:a7:64:f2:86:29:d5:51:
cd:b9:0a:9a:56:e8:93:84:47:d3:30:9c:37:16:49:0a:0e:39:
84:7c:fd:c8:1f:06:61:08:50:12:3f:d6:3c:6b:3d:b7:ef:27:
66:a8:58:a0:9f:f2:06:4e:22:ef:85:93:14:14:b8:bf:60:8d:
26:b3:b5:62:14:94:4c:ac:4c:f8:26:b1:44:aa:d0:4e:3e:51:
21:c6:d0:7e:46:c0:6f:a3:9b:95:fd:40:b1:08:28:19:41:ed:
5c:34:6f:ea:70:60:54:dd:62:eb:3e:03:dc:74:ee:b0:ae:80:
e9:18:7e:86:19:61:73:43:37:cb:f6:fd:79:5e:8d:3c:24:9e:
ef:9d:5a:dd:04:cb:4e:49:99:a0:e2:d5:af:28:7a:5c:40:32:
93:36:f2:a8:c3:ce:07:5c:da:d3:3b:b1:d7:d7:27:d9:fe:d8:
d7:b9:48:6f:6f:c1:88:a6:1f:db:27:15:69:cd:c5:92:36:8d:
52:09:fe:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqMoJpdI+u2zggpXaMuNe9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjMwOTEzMDM0MDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDdkYTQyNDRiODJkMjViMTU1YjRiMzhkZDc3ODE3ZjM2NTNmOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhajcWi8FmP1P0T+qC/fjaRnOGhx4
XZyMQcHCVU9Z5Q+6y3b97uUvNe8Zh620l/HOymTvYzTqlOqrHmiS2NuxhsgQrn2W
V061t+76cqP4mcgYWGDh/Hea9fhznA07q5PRveeRanQrcUoEl0nr08Mp1FNWpzuj
CYcUBg0eOajpPCIPKNHcR0rbfixoC9qLFE7yqxYGXyNSXFoWR6f2heYxBXpJCgn9
XxPe7lMpo80WWGvx/Ajs0PedHk1dkJxHdjKtQCVZLu78nNmkEDAYgmE4zBrMO7pw
ot3VDVZ5z6MQK/Q9u8zOazJnV5vZQv9ohc+ElfZ5zi+XWeRumVjf69Fk4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDR9pCRLgtJbFVtLON13gX82U/kYMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvTkgya0pFdUMwbHNWVzBzNDNYZUJmelpULVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudySMA0G
CSqGSIb3DQEBCwUAA4IBAQCGSpl71P4MieLsHFR8w10vu8J+nLZoV9NsohKhq6b4
4tAZIHadpJOeL93FVaJA2/gdYABf6mtTFHatffyRLsFHsadk8oYp1VHNuQqaVuiT
hEfTMJw3FkkKDjmEfP3IHwZhCFASP9Y8az237ydmqFign/IGTiLvhZMUFLi/YI0m
s7ViFJRMrEz4JrFEqtBOPlEhxtB+RsBvo5uV/UCxCCgZQe1cNG/qcGBU3WLrPgPc
dO6wroDpGH6GGWFzQzfL9v15Xo08JJ7vnVrdBMtOSZmg4tWvKHpcQDKTNvKow84H
XNrTO7HX1yfZ/tjXuUhvb8GIph/bJxVpzcWSNo1SCf4k
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org