Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/b8tYbpytr6T8wCBxCQONRtKtO7w.roa
File: b8tYbpytr6T8wCBxCQONRtKtO7w.roa (raw, json)
Hash identifier: B8xHscfg5r7DV4aimWBnzK2r2D8T8oW21vY4gSh3kzo=
Subject key identifier: 6F:CB:58:6E:9C:AD:AF:A4:FC:C0:20:71:09:03:8D:46:D2:AD:3B:BC
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018AAE4B60A86ADFD1FF1220224E2B4DFDC2
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/b8tYbpytr6T8wCBxCQONRtKtO7w.roa
Signing time: Tue 19 Sep 2023 16:34:50 +0000
ROA not before: Tue 19 Sep 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.255.56.0/23 maxlen: 24
91.229.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 10:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:4b:60:a8:6a:df:d1:ff:12:20:22:4e:2b:4d:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 19 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fcb586e9cadafa4fcc0207109038d46d2ad3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:ed:0f:29:02:40:89:f3:fe:c3:c1:d5:7f:
42:d8:00:38:94:2d:97:9d:de:85:7e:c9:07:e2:6d:
1d:eb:75:44:0c:97:75:d5:20:cf:09:9c:a9:3b:7e:
27:db:de:e2:2f:42:2c:0e:63:4f:7f:07:e4:a1:f2:
ae:d9:ff:90:24:96:00:af:7d:b1:11:55:15:33:f2:
77:bc:10:d1:c8:9f:4f:fd:ac:49:d2:92:aa:0a:cb:
6e:0f:14:5c:37:51:2d:d0:65:a7:2a:35:27:1e:69:
06:48:ec:b3:b6:2d:4c:cc:48:07:34:10:79:83:79:
22:8c:9a:b7:ca:5d:be:c1:11:89:a6:83:16:8a:85:
e3:a5:b9:ee:d9:43:a3:67:fc:a4:da:6d:c6:4d:73:
dc:e1:75:16:9b:fa:f5:2b:53:c5:bb:59:62:bc:1a:
9f:3c:1a:a4:9e:cc:03:fb:a6:6c:e8:0b:9e:5d:ed:
65:09:3b:bd:fc:d9:85:50:a7:4f:d2:0a:26:89:a7:
e3:68:0c:30:53:7b:48:3a:60:5e:9f:e3:2c:93:37:
89:53:ef:b3:1e:97:d9:47:c6:92:6b:0e:f0:6e:bb:
b4:fb:d5:f3:77:82:de:4f:6b:92:f2:52:1e:d4:47:
b7:1c:36:40:dc:18:f9:5a:97:c2:1a:ce:db:a7:e6:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:58:6E:9C:AD:AF:A4:FC:C0:20:71:09:03:8D:46:D2:AD:3B:BC
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/b8tYbpytr6T8wCBxCQONRtKtO7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:97:db:cc:94:2b:85:44:16:8b:c1:87:11:8c:b1:e4:d6:dc:
6d:6f:61:3a:05:f2:64:75:a7:7a:ae:b3:92:2e:f0:75:24:fd:
28:4a:04:d0:cb:f0:a0:aa:eb:f0:91:9f:f7:64:a0:33:a0:47:
46:5b:25:31:50:48:27:14:30:70:0b:58:7e:a1:b6:f5:53:e3:
04:e6:47:e8:21:d8:1d:5d:d2:ae:d5:e8:f5:af:1d:e8:64:7f:
51:43:c8:b6:81:6a:b9:94:ee:bd:e8:98:9d:89:a4:5d:cf:9d:
91:6c:a2:c2:2a:2b:04:e5:59:4a:cd:3d:b0:cf:84:74:c3:9b:
69:a3:93:2f:3f:4a:66:a0:c7:6b:37:ef:63:70:20:b9:d9:82:
21:84:65:57:ed:b8:ba:87:91:73:9e:23:d7:01:80:c3:3b:d2:
cd:74:96:c9:e3:86:74:2c:94:dd:71:8f:4e:c6:ba:27:da:31:
42:f0:bc:9b:94:d1:79:34:96:93:5c:25:70:a5:5b:0c:96:21:
76:44:b2:ed:fb:42:6a:2d:f9:07:45:41:a3:bd:ca:ab:95:93:
bd:ef:61:fb:b8:df:ae:5f:ac:a4:40:30:6e:eb:c6:49:d6:75:
ce:70:d5:df:cc:fe:2d:38:a3:ec:94:0c:69:77:86:fe:7b:c3:
92:2f:e4:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYquS2Coat/R/xIgIk4rTf3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwOTE5MTYzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmNiNTg2ZTljYWRhZmE0ZmNjMDIwNzEwOTAzOGQ0NmQyYWQzYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwztDykCQInz/sPB1X9C2AA4lC2X
nd6FfskH4m0d63VEDJd11SDPCZypO34n297iL0IsDmNPfwfkofKu2f+QJJYAr32x
EVUVM/J3vBDRyJ9P/axJ0pKqCstuDxRcN1Et0GWnKjUnHmkGSOyzti1MzEgHNBB5
g3kijJq3yl2+wRGJpoMWioXjpbnu2UOjZ/yk2m3GTXPc4XUWm/r1K1PFu1livBqf
PBqknswD+6Zs6AueXe1lCTu9/NmFUKdP0gomiafjaAwwU3tIOmBen+MskzeJU++z
HpfZR8aSaw7wbru0+9Xzd4LeT2uS8lIe1Ee3HDZA3Bj5WpfCGs7bp+bV5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/LWG6cra+k/MAgcQkDjUbSrTu8MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvYjh0WWJweXRyNlQ4d0NCeENRT05SdEt0Tzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+WGAwQB
uf84MA0GCSqGSIb3DQEBCwUAA4IBAQDAl9vMlCuFRBaLwYcRjLHk1txtb2E6BfJk
dad6rrOSLvB1JP0oSgTQy/CgquvwkZ/3ZKAzoEdGWyUxUEgnFDBwC1h+obb1U+ME
5kfoIdgdXdKu1ej1rx3oZH9RQ8i2gWq5lO696JidiaRdz52RbKLCKisE5VlKzT2w
z4R0w5tpo5MvP0pmoMdrN+9jcCC52YIhhGVX7bi6h5FzniPXAYDDO9LNdJbJ44Z0
LJTdcY9Oxron2jFC8LyblNF5NJaTXCVwpVsMliF2RLLt+0JqLfkHRUGjvcqrlZO9
72H7uN+uX6ykQDBu68ZJ1nXOcNXfzP4tOKPslAxpd4b+e8OSL+R6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org