Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/eaTGDtbOeIdOhiA7Laf7p7xaqio.roa
File: eaTGDtbOeIdOhiA7Laf7p7xaqio.roa (raw, json)
Hash identifier: D2IawU8Krk/q4OR+MY6MmQIF54S1rWbKSZOja1Ou390=
Subject key identifier: 79:A4:C6:0E:D6:CE:78:87:4E:86:20:3B:2D:A7:FB:A7:BC:5A:AA:2A
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01864F2EC5D6FDBAEE27930D779D9194DBF8
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/eaTGDtbOeIdOhiA7Laf7p7xaqio.roa
Signing time: Tue 14 Feb 2023 09:08:30 +0000
ROA not before: Tue 14 Feb 2023 09:08:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 185.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:2e:c5:d6:fd:ba:ee:27:93:0d:77:9d:91:94:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Feb 14 09:08:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a4c60ed6ce78874e86203b2da7fba7bc5aaa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:56:4d:c6:09:c4:0a:3d:82:ff:ff:e2:28:
ea:37:c8:66:3f:ad:a6:b1:8e:f7:73:61:00:4d:1a:
34:78:5f:94:48:a9:84:5b:d1:17:d4:d4:92:59:07:
9b:63:d7:09:ce:d0:e9:23:f8:ce:16:b5:38:07:95:
3e:71:76:4a:ee:a3:d8:ac:26:32:90:25:e5:f8:eb:
44:b1:b3:d4:2a:d2:f2:c0:6f:8e:95:00:48:e2:d4:
a9:6d:99:5a:2d:28:9c:8a:6e:36:6d:09:63:87:ab:
ed:c0:90:af:f5:70:62:76:e3:42:20:8d:64:cf:81:
3c:4a:59:f3:16:6e:45:5f:75:2e:ae:47:4b:31:3e:
7d:a8:0b:4c:37:1e:25:f4:a8:3d:2c:d0:81:64:ba:
99:74:84:a1:cf:10:80:d8:c2:9d:3c:95:4b:27:1b:
9e:3b:99:8f:d6:da:96:32:fe:86:51:2e:90:11:ba:
8f:ab:e2:3e:e2:c7:90:e0:36:83:60:55:5a:a2:20:
bb:88:b8:58:f2:2f:6e:5a:0b:4f:6f:a3:0b:04:ed:
c8:92:d2:88:d3:65:56:f2:9f:37:a1:2c:e1:6a:10:
08:9b:59:a5:4c:60:1f:d0:83:d1:c5:60:fa:ab:e0:
cb:f3:26:ab:cd:be:3b:bf:47:0b:5f:8b:dd:14:27:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:C6:0E:D6:CE:78:87:4E:86:20:3B:2D:A7:FB:A7:BC:5A:AA:2A
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/eaTGDtbOeIdOhiA7Laf7p7xaqio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:40:6f:c9:dc:31:4b:f0:41:3e:56:99:d6:3a:ed:4c:07:15:
94:d6:57:b2:53:25:23:fc:65:f3:9b:77:e4:4f:c5:37:02:56:
bc:bd:a3:21:8a:64:30:b5:b1:b5:78:10:f7:8c:61:22:52:cf:
40:e8:e3:5f:38:7d:c8:7d:75:22:64:ed:3b:bc:23:8a:34:05:
46:da:9b:99:df:3e:0a:28:1b:16:5f:a2:d6:db:79:89:f6:68:
97:28:cf:aa:d6:23:fb:9d:55:16:50:b8:36:06:e6:80:c0:04:
fa:a0:18:fa:76:7b:90:85:25:42:7e:fb:41:09:34:2a:b9:52:
7f:38:63:6b:66:39:fc:32:86:60:ba:67:cb:33:c8:ff:de:4e:
3d:3c:91:9b:f1:45:ff:aa:c5:d5:24:a7:73:ee:c2:60:cf:f2:
fc:3c:14:c2:6a:92:9a:86:f2:0e:2a:5b:9a:3d:f8:fd:3f:09:
44:1c:4a:fd:04:03:ac:11:9b:78:22:59:ed:75:b9:bf:c5:d7:
d0:98:44:19:db:fd:92:db:d9:5a:8a:26:f9:52:43:ce:0f:54:
c9:62:83:ae:8b:a8:6b:c5:49:ed:7f:fb:b8:ef:fe:bf:cf:41:
0c:d5:b1:ba:73:e1:69:fc:b0:3f:56:cd:f6:14:03:c9:34:00:
ee:66:e4:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZPLsXW/bruJ5MNd52RlNv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjMwMjE0MDkwODMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE0YzYwZWQ2Y2U3ODg3NGU4NjIwM2IyZGE3ZmJhN2JjNWFhYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3NWTcYJxAo9gv//4ijqN8hmP62m
sY73c2EATRo0eF+USKmEW9EX1NSSWQebY9cJztDpI/jOFrU4B5U+cXZK7qPYrCYy
kCXl+OtEsbPUKtLywG+OlQBI4tSpbZlaLSicim42bQljh6vtwJCv9XBiduNCII1k
z4E8SlnzFm5FX3UurkdLMT59qAtMNx4l9Kg9LNCBZLqZdIShzxCA2MKdPJVLJxue
O5mP1tqWMv6GUS6QEbqPq+I+4seQ4DaDYFVaoiC7iLhY8i9uWgtPb6MLBO3IktKI
02VW8p83oSzhahAIm1mlTGAf0IPRxWD6q+DL8yarzb47v0cLX4vdFCfY/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmkxg7WzniHToYgOy2n+6e8WqoqMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvZWFUR0R0Yk9lSWRPaGlBN0xhZjdwN3hhcWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf/FMA0G
CSqGSIb3DQEBCwUAA4IBAQC1QG/J3DFL8EE+VpnWOu1MBxWU1leyUyUj/GXzm3fk
T8U3Ala8vaMhimQwtbG1eBD3jGEiUs9A6ONfOH3IfXUiZO07vCOKNAVG2puZ3z4K
KBsWX6LW23mJ9miXKM+q1iP7nVUWULg2BuaAwAT6oBj6dnuQhSVCfvtBCTQquVJ/
OGNrZjn8MoZgumfLM8j/3k49PJGb8UX/qsXVJKdz7sJgz/L8PBTCapKahvIOKlua
Pfj9PwlEHEr9BAOsEZt4Ilntdbm/xdfQmEQZ2/2S29laiib5UkPOD1TJYoOui6hr
xUntf/u47/6/z0EM1bG6c+Fp/LA/Vs32FAPJNADuZuQf
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:48 2024 by rpki-client on console-ams.rpki-client.org