Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ylICeZnTVEFyYzBi0s5Q1hGXpc.roa
File: 1ylICeZnTVEFyYzBi0s5Q1hGXpc.roa (raw, json)
Hash identifier: /l8S24iqHCIOmDntMBjmGgvijFrePzkUtIV7a029Hyo=
Subject key identifier: D7:29:48:09:E6:67:4D:51:05:C9:8C:C1:8B:4B:39:43:58:46:5E:97
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802792809D29C45A489BEC0F0A5D365
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ylICeZnTVEFyYzBi0s5Q1hGXpc.roa
Signing time: Tue 02 Jan 2024 02:30:54 +0000
ROA not before: Tue 02 Jan 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 185.227.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:79:28:09:d2:9c:45:a4:89:be:c0:f0:a5:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7294809e6674d5105c98cc18b4b394358465e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:b2:85:c5:c9:4e:9e:5f:5e:fa:84:42:a8:
45:2a:c9:0f:1a:21:3c:3a:22:64:e2:37:ee:d4:f8:
94:c4:de:85:3c:00:68:85:aa:55:9a:f3:73:ee:07:
64:34:e5:72:f0:2f:78:1b:e0:24:fb:48:ac:06:8b:
b3:2c:e0:eb:f6:8e:ca:f4:c6:7d:fe:22:af:22:45:
35:8b:ef:37:3d:5e:a1:ae:8c:8f:58:28:3f:58:8d:
29:47:df:7b:47:8c:41:af:85:33:04:4a:d4:9f:0d:
98:f7:1d:f9:e0:d0:73:ea:2a:5d:3f:3f:1a:d9:b3:
df:39:38:23:49:b1:f8:ed:1f:fa:a2:c0:e1:a0:05:
61:86:cf:b4:1a:b9:31:20:47:02:bc:a5:27:0b:6a:
d0:08:54:2c:16:99:f1:05:a7:79:4c:d3:75:5c:19:
f7:77:cc:90:b4:cf:b1:f9:b8:1f:44:df:8d:20:e4:
0e:fd:19:b3:3f:ea:de:50:1f:33:42:a9:a0:6b:a5:
50:cd:63:62:b4:9d:e2:7c:e1:72:95:3a:1e:d0:5a:
0f:eb:33:58:5b:9f:fc:d0:20:d6:4e:a0:e0:11:d0:
fe:20:56:a6:92:2d:40:6d:57:53:9b:cc:3b:eb:0e:
da:89:ca:07:9d:76:d1:21:3c:26:97:dd:a3:4c:4d:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:48:09:E6:67:4D:51:05:C9:8C:C1:8B:4B:39:43:58:46:5E:97
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ylICeZnTVEFyYzBi0s5Q1hGXpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3c:cc:a6:1e:3e:1a:94:28:64:5f:25:9c:65:4e:71:ac:5e:
3f:dc:e3:b4:1e:38:dc:3f:dc:74:f6:a5:40:b4:3f:52:c7:ec:
d2:86:8e:e8:e5:36:77:d2:21:f7:b7:e3:b8:84:94:1e:19:f4:
4c:f3:e5:41:e1:87:8e:9d:12:8d:15:1d:44:e4:70:e5:8a:ca:
4c:24:99:55:b6:d3:98:38:6e:84:6c:5b:0e:6c:51:85:81:e3:
50:68:7d:d3:cb:ba:0a:97:14:87:de:37:68:b3:2f:82:13:9a:
98:e0:37:5d:21:d9:2e:99:f4:c0:07:e5:a2:5d:fd:b6:7c:14:
a0:b6:0b:85:50:4f:58:0b:41:e4:df:6f:96:e1:64:92:67:a2:
72:3d:b2:75:f2:61:b3:81:44:84:2c:3a:60:7e:1b:43:b4:50:
47:03:06:c5:fa:94:f1:02:6b:19:52:7f:58:6a:90:3c:5e:1a:
d8:f6:38:74:a1:67:bd:bc:e5:c1:0f:f8:14:31:e8:e5:fd:b3:
d8:5a:6d:45:80:4b:96:a9:91:2d:9d:c2:51:4b:61:4e:8a:3f:
61:67:d8:5b:7d:5d:bd:f6:be:b5:94:13:83:39:25:ce:6c:48:
1e:bc:c1:92:67:98:9c:46:07:18:8f:03:e0:69:01:08:b1:8d:
01:8c:26:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAnkoCdKcRaSJvsDwpdNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzI5NDgwOWU2Njc0ZDUxMDVjOThjYzE4YjRiMzk0MzU4NDY1ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2yhcXJTp5fXvqEQqhFKskPGiE8
OiJk4jfu1PiUxN6FPABohapVmvNz7gdkNOVy8C94G+Ak+0isBouzLODr9o7K9MZ9
/iKvIkU1i+83PV6hroyPWCg/WI0pR997R4xBr4UzBErUnw2Y9x354NBz6ipdPz8a
2bPfOTgjSbH47R/6osDhoAVhhs+0GrkxIEcCvKUnC2rQCFQsFpnxBad5TNN1XBn3
d8yQtM+x+bgfRN+NIOQO/RmzP+reUB8zQqmga6VQzWNitJ3ifOFylToe0FoP6zNY
W5/80CDWTqDgEdD+IFamki1AbVdTm8w76w7aicoHnXbRITwml92jTE2U2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcpSAnmZ01RBcmMwYtLOUNYRl6XMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMXlsSUNlWm5UVkVGeVl6QmkwczVRMWhHWHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueOTMA0G
CSqGSIb3DQEBCwUAA4IBAQAfPMymHj4alChkXyWcZU5xrF4/3OO0HjjcP9x09qVA
tD9Sx+zSho7o5TZ30iH3t+O4hJQeGfRM8+VB4YeOnRKNFR1E5HDlispMJJlVttOY
OG6EbFsObFGFgeNQaH3Ty7oKlxSH3jdosy+CE5qY4DddIdkumfTAB+WiXf22fBSg
tguFUE9YC0Hk32+W4WSSZ6JyPbJ18mGzgUSELDpgfhtDtFBHAwbF+pTxAmsZUn9Y
apA8XhrY9jh0oWe9vOXBD/gUMejl/bPYWm1FgEuWqZEtncJRS2FOij9hZ9hbfV29
9r61lBODOSXObEgevMGSZ5icRgcYjwPgaQEIsY0BjCYi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org