Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/2vX0wFP1CET6DeeMH2WkjH2lKIU.roa
File: 2vX0wFP1CET6DeeMH2WkjH2lKIU.roa (raw, json)
Hash identifier: 0Fei7f/0BSAztX7QxR5zG4sTFqT/19VRH4SP9Jd4rrs=
Subject key identifier: DA:F5:F4:C0:53:F5:08:44:FA:0D:E7:8C:1F:65:A4:8C:7D:A5:28:85
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 01857227E982F15ADA0A3E66E20452085AA4
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/2vX0wFP1CET6DeeMH2WkjH2lKIU.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56509
IP address blocks: 185.217.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e9:82:f1:5a:da:0a:3e:66:e2:04:52:08:5a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf5f4c053f50844fa0de78c1f65a48c7da52885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:87:c1:bd:50:7b:17:3e:1b:1a:20:b1:71:
57:19:17:4f:86:9e:9a:01:b9:d6:1a:34:f9:30:f8:
15:0f:6d:bd:c2:78:cd:57:81:85:21:17:d8:81:7a:
eb:ba:20:a0:cf:f7:a9:e8:a2:0c:6a:2b:69:d3:62:
99:49:5e:8e:7c:0a:60:a2:1c:c8:e5:0e:97:56:89:
92:90:a8:cc:14:cd:d1:25:4b:53:bf:92:69:fd:27:
5b:98:7b:fb:ed:d7:41:c2:b1:31:84:6d:54:03:f0:
bc:8b:b1:5a:7a:9a:e5:1d:5f:ff:a0:02:0b:89:ff:
4f:59:1b:21:17:6a:60:01:11:7b:5d:b8:af:2c:5f:
9d:20:6a:ba:c3:92:78:e7:8f:bf:7b:3b:e0:e5:04:
14:7f:0c:38:6e:b9:7e:da:f8:e3:1e:13:07:12:f8:
b0:54:61:ce:87:bc:b2:a8:b3:57:0b:c2:37:fa:1f:
85:bd:ba:c9:24:8c:9f:d6:01:cf:5d:e7:83:c6:3e:
66:73:5e:81:69:83:4f:60:d5:ff:3c:a5:23:a5:93:
6c:7c:1c:07:cd:dc:ff:e9:c5:65:84:bd:67:e8:fe:
87:d0:c5:cb:bd:7c:3a:f4:26:78:f5:30:95:28:74:
85:36:af:15:a2:a8:df:59:c4:50:4f:48:cd:9b:9c:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:F4:C0:53:F5:08:44:FA:0D:E7:8C:1F:65:A4:8C:7D:A5:28:85
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/2vX0wFP1CET6DeeMH2WkjH2lKIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:f0:e3:01:e5:9b:9f:5b:5c:70:05:81:2a:ef:ae:23:78:
b6:83:0d:59:f2:c3:81:53:57:de:fe:9c:b0:60:43:56:56:3f:
0a:7f:a1:a5:be:3b:fb:be:9f:b5:ca:09:11:b8:4e:17:e1:20:
6e:a3:ba:ed:54:7c:39:f8:1c:7c:5f:2f:73:cd:20:64:42:a5:
ad:62:74:4d:55:d2:ed:69:5d:6b:ea:7d:a0:98:54:ce:25:7b:
1e:04:41:25:c4:3a:41:e0:52:1a:60:b1:0b:e0:af:e2:e1:9e:
04:98:5b:f0:83:09:04:98:5f:72:1f:0c:35:ac:61:7e:ea:66:
31:0c:81:b7:34:7c:c7:c7:e0:7f:88:12:6f:11:3f:8f:02:7d:
92:2e:93:d6:50:db:ba:93:81:d4:ee:02:97:e1:12:13:6b:4d:
c5:28:1e:43:cb:6b:44:fc:8e:14:79:4a:b4:db:88:25:75:cf:
a6:0e:3a:5c:97:77:89:84:14:c2:ae:7f:c7:ce:7a:e6:e9:99:
f4:ec:e0:a7:02:9d:de:72:34:83:f0:5a:f6:14:a3:8e:fa:cd:
68:79:67:56:cd:f6:8c:4e:8b:3f:25:81:37:c3:2d:d2:b1:63:
4b:32:58:50:b1:20:e4:85:6e:0f:29:2f:e0:c4:9b:6c:67:15:
6d:0d:0c:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ+mC8VraCj5m4gRSCFqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjQ1ODU3NmJhMjM5MjFkZDc5MmRjMDA1MmY4ZjgyODY3
ZDYyN2IwHhcNMjMwMTAyMTEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWY1ZjRjMDUzZjUwODQ0ZmEwZGU3OGMxZjY1YTQ4YzdkYTUyODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDqHwb1Qexc+GxogsXFXGRdPhp6a
AbnWGjT5MPgVD229wnjNV4GFIRfYgXrruiCgz/ep6KIMaitp02KZSV6OfApgohzI
5Q6XVomSkKjMFM3RJUtTv5Jp/SdbmHv77ddBwrExhG1UA/C8i7FaeprlHV//oAIL
if9PWRshF2pgARF7XbivLF+dIGq6w5J454+/ezvg5QQUfww4brl+2vjjHhMHEviw
VGHOh7yyqLNXC8I3+h+FvbrJJIyf1gHPXeeDxj5mc16BaYNPYNX/PKUjpZNsfBwH
zdz/6cVlhL1n6P6H0MXLvXw69CZ49TCVKHSFNq8VoqjfWcRQT0jNm5wX6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNr19MBT9QhE+g3njB9lpIx9pSiFMB8GA1UdIwQY
MBaAFLVkWFdrojkh3XktwAUvj4KGfWJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUt
MWEyM2UxNWYzYjg0LzEvMnZYMHdGUDFDRVQ2RGVlTUgyV2tqSDJsS0lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUtMWEyM2UxNWYzYjg0
LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudmkMA0G
CSqGSIb3DQEBCwUAA4IBAQA7dfDjAeWbn1tccAWBKu+uI3i2gw1Z8sOBU1fe/pyw
YENWVj8Kf6Glvjv7vp+1ygkRuE4X4SBuo7rtVHw5+Bx8Xy9zzSBkQqWtYnRNVdLt
aV1r6n2gmFTOJXseBEElxDpB4FIaYLEL4K/i4Z4EmFvwgwkEmF9yHww1rGF+6mYx
DIG3NHzHx+B/iBJvET+PAn2SLpPWUNu6k4HU7gKX4RITa03FKB5Dy2tE/I4UeUq0
24gldc+mDjpcl3eJhBTCrn/Hznrm6Zn07OCnAp3ecjSD8Fr2FKOO+s1oeWdWzfaM
Tos/JYE3wy3SsWNLMlhQsSDkhW4PKS/gxJtsZxVtDQyE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:18 2024 by rpki-client on console-fra.rpki-client.org