Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/2xUGBeviTp8STox8HAUEqKra5eU.roa
File: 2xUGBeviTp8STox8HAUEqKra5eU.roa (raw, json)
Hash identifier: RwOjuIaLFODeuP7DajxESNGGzWFeXELRYT+wWE0pERc=
Subject key identifier: DB:15:06:05:EB:E2:4E:9F:12:4E:8C:7C:1C:05:04:A8:AA:DA:E5:E5
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 0188754712D961B710671B9451EEB0BCC18C
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/2xUGBeviTp8STox8HAUEqKra5eU.roa
Signing time: Thu 01 Jun 2023 04:46:11 +0000
ROA not before: Thu 01 Jun 2023 04:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.248.164.0/23 maxlen: 23
185.248.167.0/24 maxlen: 24
2a0d:ed80:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 30 Oct 2023 13:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:47:12:d9:61:b7:10:67:1b:94:51:ee:b0:bc:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Jun 1 04:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db150605ebe24e9f124e8c7c1c0504a8aadae5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:b7:72:2a:81:c0:b8:5c:2f:2c:49:c2:69:
e0:92:e4:89:68:65:37:71:80:a1:0e:e2:37:86:4b:
49:e4:46:bb:9d:63:91:a7:14:23:d4:7c:b1:18:a3:
15:63:12:6f:93:b1:6a:36:0c:a0:6e:f2:0f:15:f6:
62:18:90:61:42:ab:ac:34:74:dc:06:49:df:1b:15:
19:60:19:c5:54:12:c7:80:f2:79:fe:a0:3f:ba:66:
e7:bd:1c:18:a7:8c:04:b1:73:be:97:dd:3b:2f:92:
97:00:bc:15:d2:68:f1:d7:a4:a9:0a:93:22:9d:15:
0c:f0:4a:5a:50:d6:05:bd:63:93:9e:9f:b3:0c:c4:
49:7b:ef:3c:d2:1d:59:2d:12:3d:3b:26:b1:0f:b9:
44:ed:b2:8a:8e:84:09:02:4c:61:8a:67:57:b1:a4:
cf:b2:53:72:23:f0:af:5b:cb:4d:af:00:f9:72:89:
35:ba:7f:d7:04:17:0a:41:ae:84:04:15:b4:d6:c8:
cc:f9:7c:fd:de:be:e3:9b:1c:6a:99:6e:7a:5e:34:
c8:1f:80:fb:a9:14:39:93:1f:56:5f:21:6e:d0:28:
85:7f:86:93:8f:7a:a8:10:10:a7:45:bd:25:9e:8b:
b4:12:8d:21:b4:34:d9:0f:90:fa:55:6b:06:c6:c1:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:06:05:EB:E2:4E:9F:12:4E:8C:7C:1C:05:04:A8:AA:DA:E5:E5
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/2xUGBeviTp8STox8HAUEqKra5eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.164.0/23
185.248.167.0/24
IPv6:
2a0d:ed80:300::/40
Signature Algorithm: sha256WithRSAEncryption
9a:65:b3:79:78:4e:0e:4b:67:35:e7:39:26:b7:de:a2:36:7b:
0a:8e:f2:ba:94:12:61:7d:e8:69:4c:50:9a:08:aa:ab:99:68:
6c:07:75:9e:b1:95:53:b6:0d:07:d4:36:a2:9f:65:d0:76:54:
35:08:28:c1:c5:ca:93:6d:ab:4b:40:ca:bf:80:34:28:04:66:
ff:8a:9f:d4:8e:a5:44:3d:27:e6:cd:34:e9:15:f9:a9:40:de:
c5:a0:7c:30:7c:fa:ea:76:c9:02:b8:6c:e6:48:f6:bd:eb:a9:
b3:32:2e:46:80:0b:5c:f1:f1:b0:af:33:42:18:50:6f:d2:18:
ee:85:ae:96:09:9d:53:1e:8b:3e:23:c0:e4:3e:36:54:a8:b9:
97:03:0a:0d:fd:ec:85:68:c7:ad:3f:93:12:43:63:b9:af:a5:
20:3e:49:c5:9d:f1:16:db:42:36:b8:cc:77:1d:d8:e8:5d:dd:
a3:4d:4c:d9:35:36:58:be:08:c5:f3:50:7c:c4:d1:c2:ad:86:
da:8c:1c:40:07:57:17:d7:1d:44:7b:2d:ed:9c:58:6c:b4:7a:
a3:68:25:47:8b:3b:c1:57:ef:5d:e0:cc:76:85:1a:78:c9:9a:
57:93:72:f1:26:fc:ef:5c:53:d4:fc:80:12:8e:3e:f6:86:1e:
c9:36:6e:93
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYh1RxLZYbcQZxuUUe6wvMGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy
M2FkYzAwHhcNMjMwNjAxMDQ0NjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjE1MDYwNWViZTI0ZTlmMTI0ZThjN2MxYzA1MDRhOGFhZGFlNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUa3ciqBwLhcLyxJwmngkuSJaGU3
cYChDuI3hktJ5Ea7nWORpxQj1HyxGKMVYxJvk7FqNgygbvIPFfZiGJBhQqusNHTc
BknfGxUZYBnFVBLHgPJ5/qA/umbnvRwYp4wEsXO+l907L5KXALwV0mjx16SpCpMi
nRUM8EpaUNYFvWOTnp+zDMRJe+880h1ZLRI9OyaxD7lE7bKKjoQJAkxhimdXsaTP
slNyI/CvW8tNrwD5cok1un/XBBcKQa6EBBW01sjM+Xz93r7jmxxqmW56XjTIH4D7
qRQ5kx9WXyFu0CiFf4aTj3qoEBCnRb0lnou0Eo0htDTZD5D6VWsGxsENCQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFNsVBgXr4k6fEk6MfBwFBKiq2uXlMB8GA1UdIwQY
MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt
ODAyYjYzNzZmNzQzLzEvMnhVR0JldmlUcDhTVG94OEhBVUVxS3JhNWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz
LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBufikAwQA
ufinMA4EAgACMAgDBgAqDe2AAzANBgkqhkiG9w0BAQsFAAOCAQEAmmWzeXhODktn
Nec5JrfeojZ7Co7yupQSYX3oaUxQmgiqq5lobAd1nrGVU7YNB9Q2op9l0HZUNQgo
wcXKk22rS0DKv4A0KARm/4qf1I6lRD0n5s006RX5qUDexaB8MHz66nbJArhs5kj2
veupszIuRoALXPHxsK8zQhhQb9IY7oWulgmdUx6LPiPA5D42VKi5lwMKDf3shWjH
rT+TEkNjua+lID5JxZ3xFttCNrjMdx3Y6F3do01M2TU2WL4IxfNQfMTRwq2G2owc
QAdXF9cdRHst7ZxYbLR6o2glR4s7wVfvXeDMdoUaeMmaV5Ny8Sb871xT1PyAEo4+
9oYeyTZukw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:47 2024 by rpki-client on console-ams.rpki-client.org