Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WFSKaq35SbN6dZ0a_Aaxxcx1qw.roa
File: 2WFSKaq35SbN6dZ0a_Aaxxcx1qw.roa (raw, json)
Hash identifier: AupGRuu49AAw140WLxGN93vKGLgsXKt0GSUj5SngWXI=
Subject key identifier: D9:61:52:29:AA:B7:E5:26:CD:E9:D6:74:6B:F0:1A:C7:17:31:D6:AC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01859593FF0E7CB04010A7E421E5F86C4029
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WFSKaq35SbN6dZ0a_Aaxxcx1qw.roa
Signing time: Mon 09 Jan 2023 08:09:42 +0000
ROA not before: Mon 09 Jan 2023 08:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209018
IP address blocks: 185.230.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 15:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:93:ff:0e:7c:b0:40:10:a7:e4:21:e5:f8:6c:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 08:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9615229aab7e526cde9d6746bf01ac71731d6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:37:2b:40:6c:99:03:d8:d7:f7:71:28:3e:
cc:3e:d7:46:f0:38:b9:0a:aa:92:1d:72:2a:55:f7:
02:d2:ca:1a:e9:07:cd:93:8a:0b:b8:77:66:f9:1b:
25:54:46:5a:f2:08:42:45:3e:82:99:a5:a2:e6:3a:
96:b3:56:cd:7e:c5:d0:6b:c4:87:8a:da:2a:11:a3:
fd:a8:4d:2e:16:c4:41:1e:40:49:42:9a:7f:0a:42:
91:30:97:00:5a:73:6b:39:86:5b:b0:58:ab:05:b3:
eb:a9:2a:a0:eb:4f:79:f9:0e:95:f1:2d:ad:20:98:
e3:01:30:54:06:e8:a6:b1:84:c7:34:be:eb:dc:f5:
21:d2:5e:32:11:86:79:7d:ff:86:06:40:db:86:99:
f5:8e:cf:df:c4:11:42:9a:9f:5b:fb:34:75:43:f8:
3a:9f:bc:ad:e9:f8:10:7f:29:74:bf:36:52:93:fd:
08:21:1d:07:f7:33:f3:7e:e9:92:f9:6f:a8:51:95:
7e:b0:0e:18:b4:ed:04:15:89:d2:f4:43:f0:31:95:
93:07:2e:d1:e7:18:a5:a2:18:25:3d:90:52:e0:0e:
94:72:03:8c:1c:25:2a:47:3b:20:c5:61:77:65:ac:
1d:f4:bc:fb:87:f1:50:a2:ff:fd:70:0d:9d:b6:d9:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:52:29:AA:B7:E5:26:CD:E9:D6:74:6B:F0:1A:C7:17:31:D6:AC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WFSKaq35SbN6dZ0a_Aaxxcx1qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:af:60:d9:4c:b5:f4:c2:8a:7d:ca:41:22:36:0d:36:54:ae:
55:c0:32:56:b3:c3:ad:5d:d9:9a:de:e1:38:23:8d:be:25:cd:
69:c7:70:1c:f0:43:2a:f9:95:d1:c1:01:67:cc:b3:da:a0:49:
e1:f9:4b:70:9f:1d:50:bd:76:c4:74:cf:06:b4:c9:b8:74:c3:
9c:f2:b9:c6:99:1d:8e:e3:c0:90:2e:61:06:cf:6e:7e:de:8d:
f7:d9:a6:00:ab:82:aa:d7:a3:7b:7e:9c:6f:cc:51:08:c4:bf:
19:de:59:5c:53:0b:8e:c9:4f:bb:55:91:55:d7:91:e0:b7:6a:
42:59:54:61:f9:8d:a5:28:47:6b:45:6a:92:b9:a7:ae:5c:a9:
90:7b:4a:6c:8c:bf:98:62:71:78:e1:fa:42:81:91:d2:72:c3:
53:6e:bf:33:38:32:98:32:76:2f:4b:e8:9a:bc:7e:28:6d:8b:
c6:82:70:00:8b:82:d5:c5:7e:13:3d:06:bf:93:3e:8c:71:d7:
4e:35:65:59:f2:d2:2b:d7:90:72:49:7b:82:ae:e6:62:32:7a:
30:f6:90:ca:a0:ff:cc:5a:e1:b2:59:24:6a:87:c5:9c:47:97:
89:20:24:6c:bc:94:cb:f6:fa:32:d6:e3:e7:c1:0f:7f:a0:fc:
48:f6:6f:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWVk/8OfLBAEKfkIeX4bEApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTA5MDgwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTYxNTIyOWFhYjdlNTI2Y2RlOWQ2NzQ2YmYwMWFjNzE3MzFkNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24M3K0BsmQPY1/dxKD7MPtdG8Di5
CqqSHXIqVfcC0soa6QfNk4oLuHdm+RslVEZa8ghCRT6CmaWi5jqWs1bNfsXQa8SH
itoqEaP9qE0uFsRBHkBJQpp/CkKRMJcAWnNrOYZbsFirBbPrqSqg6095+Q6V8S2t
IJjjATBUBuimsYTHNL7r3PUh0l4yEYZ5ff+GBkDbhpn1js/fxBFCmp9b+zR1Q/g6
n7yt6fgQfyl0vzZSk/0IIR0H9zPzfumS+W+oUZV+sA4YtO0EFYnS9EPwMZWTBy7R
5xilohglPZBS4A6UcgOMHCUqRzsgxWF3Zawd9Lz7h/FQov/9cA2dttnIdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlhUimqt+UmzenWdGvwGscXMdasMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMldGU0thcTM1U2JONmRaMGFfQWF4eGN4MXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueY0MA0G
CSqGSIb3DQEBCwUAA4IBAQB/r2DZTLX0wop9ykEiNg02VK5VwDJWs8OtXdma3uE4
I42+Jc1px3Ac8EMq+ZXRwQFnzLPaoEnh+Utwnx1QvXbEdM8GtMm4dMOc8rnGmR2O
48CQLmEGz25+3o332aYAq4Kq16N7fpxvzFEIxL8Z3llcUwuOyU+7VZFV15Hgt2pC
WVRh+Y2lKEdrRWqSuaeuXKmQe0psjL+YYnF44fpCgZHScsNTbr8zODKYMnYvS+ia
vH4obYvGgnAAi4LVxX4TPQa/kz6McddONWVZ8tIr15BySXuCruZiMnow9pDKoP/M
WuGyWSRqh8WcR5eJICRsvJTL9voy1uPnwQ9/oPxI9m83
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org