Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/DBojRbvQ1V58EV2Ea5WeRDYvJrA.roa
File: DBojRbvQ1V58EV2Ea5WeRDYvJrA.roa (raw, json)
Hash identifier: oJDth9p27DKI1721++Qp8LH2MYrhZq3Z+gK772vxfRo=
Subject key identifier: 0C:1A:23:45:BB:D0:D5:5E:7C:11:5D:84:6B:95:9E:44:36:2F:26:B0
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 018C5EDB67F4CD27DBD1E5D10C76FF1566D9
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/DBojRbvQ1V58EV2Ea5WeRDYvJrA.roa
Signing time: Tue 12 Dec 2023 16:28:06 +0000
ROA not before: Tue 12 Dec 2023 16:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206998
IP address blocks: 185.221.85.0/24 maxlen: 24
185.221.86.0/24 maxlen: 24
2a0d:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:db:67:f4:cd:27:db:d1:e5:d1:0c:76:ff:15:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Dec 12 16:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1a2345bbd0d55e7c115d846b959e44362f26b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:e4:e9:16:b5:5f:0f:54:cf:c3:8d:5a:11:
35:05:95:65:40:b7:6c:91:54:7c:e7:3c:5c:b1:a6:
00:cd:8d:90:bb:63:f3:15:72:26:b5:c0:99:21:9e:
f6:a2:32:ee:73:4b:25:d2:fc:d4:3a:b6:9d:47:b4:
4e:c6:1f:98:46:b5:64:25:e4:57:b0:f7:ba:1f:a2:
35:c8:25:f3:93:8f:80:69:40:20:9a:84:82:eb:bc:
46:17:96:cb:28:64:c3:7f:e3:1f:3e:8c:65:e6:1c:
79:58:96:55:60:fc:44:ed:fa:07:f9:07:cc:d3:4e:
33:9d:41:ea:a1:b5:4e:c7:f8:e2:f3:2b:4e:5b:a3:
06:bc:9c:c5:a8:c3:14:ab:2c:7f:74:8b:d9:69:7d:
f1:15:c4:75:7e:c5:a3:9f:e8:a8:aa:47:49:1c:3f:
29:66:2f:06:4e:db:49:20:11:6a:79:1b:64:f0:ec:
89:cf:cb:1f:9b:93:0f:a0:e3:7e:ac:df:8e:c7:ce:
7a:9b:29:4a:0e:c6:7a:25:20:93:ad:a7:84:1c:02:
15:1c:6c:14:66:90:7e:c6:f8:c6:b9:5b:16:94:1d:
2a:37:38:e9:3b:a4:be:c5:5a:e4:f7:35:f8:ad:09:
c1:bd:01:8b:d8:d5:64:cf:b0:8a:57:1f:87:88:1a:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:23:45:BB:D0:D5:5E:7C:11:5D:84:6B:95:9E:44:36:2F:26:B0
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/DBojRbvQ1V58EV2Ea5WeRDYvJrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.85.0-185.221.86.255
IPv6:
2a0d:8000::/48
Signature Algorithm: sha256WithRSAEncryption
b5:fa:6d:3d:75:c4:3f:3f:1d:8f:eb:aa:50:9d:66:3d:f9:16:
d9:96:42:94:5e:2a:6a:c8:56:d2:36:18:e8:74:8a:31:5c:f6:
e9:17:e1:5f:f3:6e:ee:e3:8a:b0:31:a6:25:c8:4c:ea:2a:25:
a0:2f:64:2e:e3:d1:d2:2b:bb:61:a4:91:70:5e:e7:25:17:cb:
56:44:ff:ff:68:ce:f6:66:54:2a:f4:35:8e:9a:4c:1b:a2:84:
b5:af:a6:34:f6:7e:45:e7:d3:6d:c8:77:5c:95:2c:b4:d5:b7:
07:60:ad:30:91:6a:e7:d4:1c:7d:5d:38:6d:2b:69:9e:6b:c2:
07:9e:8e:2a:59:fe:fa:af:92:47:57:22:f6:9c:b9:ef:e2:fa:
d8:17:ea:37:73:a6:cc:34:73:4b:eb:bc:0c:14:b3:f6:a3:5a:
8b:e1:85:a1:4a:69:d9:05:d4:7c:6d:47:5a:d3:5f:9f:6b:94:
53:74:b9:df:5b:20:fc:fe:dd:90:86:48:d5:1b:a3:79:63:5b:
ca:95:1d:c6:c1:3d:3f:44:b1:c0:f0:13:9a:2a:a2:87:7b:5d:
29:f4:b0:22:85:2f:d8:a3:80:6c:71:66:95:e2:dd:c4:28:38:
3f:3f:89:39:10:f0:96:57:9d:c3:ee:13:16:e7:ff:dd:cf:8a:
74:78:39:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxe22f0zSfb0eXRDHb/FWbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjMxMjEyMTYyODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzFhMjM0NWJiZDBkNTVlN2MxMTVkODQ2Yjk1OWU0NDM2MmYyNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjInk6Ra1Xw9Uz8ONWhE1BZVlQLds
kVR85zxcsaYAzY2Qu2PzFXImtcCZIZ72ojLuc0sl0vzUOradR7ROxh+YRrVkJeRX
sPe6H6I1yCXzk4+AaUAgmoSC67xGF5bLKGTDf+MfPoxl5hx5WJZVYPxE7foH+QfM
004znUHqobVOx/ji8ytOW6MGvJzFqMMUqyx/dIvZaX3xFcR1fsWjn+ioqkdJHD8p
Zi8GTttJIBFqeRtk8OyJz8sfm5MPoON+rN+Ox856mylKDsZ6JSCTraeEHAIVHGwU
ZpB+xvjGuVsWlB0qNzjpO6S+xVrk9zX4rQnBvQGL2NVkz7CKVx+HiBpPMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwaI0W70NVefBFdhGuVnkQ2LyawMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvREJvalJidlExVjU4RVYyRWE1V2VSRFl2SnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC53VUD
BAC53VYwDwQCAAIwCQMHACoNgAAAADANBgkqhkiG9w0BAQsFAAOCAQEAtfptPXXE
Pz8dj+uqUJ1mPfkW2ZZClF4qashW0jYY6HSKMVz26RfhX/Nu7uOKsDGmJchM6iol
oC9kLuPR0iu7YaSRcF7nJRfLVkT//2jO9mZUKvQ1jppMG6KEta+mNPZ+RefTbch3
XJUstNW3B2CtMJFq59QcfV04bStpnmvCB56OKln++q+SR1ci9py57+L62BfqN3Om
zDRzS+u8DBSz9qNai+GFoUpp2QXUfG1HWtNfn2uUU3S531sg/P7dkIZI1RujeWNb
ypUdxsE9P0SxwPATmiqih3tdKfSwIoUv2KOAbHFmleLdxCg4Pz+JORDwlledw+4T
Fuf/3c+KdHg5dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:34 2024 by rpki-client on console-ams.rpki-client.org