Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3gDdoEh12mK5CN9PzPQp06kG51g.roa
File: 3gDdoEh12mK5CN9PzPQp06kG51g.roa (raw, json)
Hash identifier: hHqyitmRVbNinkJXBHTuogoQiSBLeE4PiPxbEmqmv88=
Subject key identifier: DE:00:DD:A0:48:75:DA:62:B9:08:DF:4F:CC:F4:29:D3:A9:06:E7:58
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018577C7D1B4C9B40223A9D21C9B02EB83DD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3gDdoEh12mK5CN9PzPQp06kG51g.roa
Signing time: Tue 03 Jan 2023 13:17:42 +0000
ROA not before: Tue 03 Jan 2023 13:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.126.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 13:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:c7:d1:b4:c9:b4:02:23:a9:d2:1c:9b:02:eb:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 13:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de00dda04875da62b908df4fccf429d3a906e758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:a7:e6:11:47:3b:d9:74:26:29:1c:4a:3b:
3d:df:d6:4f:bb:e3:ed:81:e0:60:7c:11:f5:82:35:
24:df:b8:a5:3c:6a:f5:12:e1:65:45:6a:77:d3:7c:
99:20:34:55:69:dd:88:0d:e0:cb:2e:23:0e:46:8d:
d0:1f:b2:56:dc:2d:81:4a:1e:fc:c9:96:54:88:83:
2c:1c:ab:2d:c5:1b:23:86:9b:74:49:a5:84:d5:b8:
26:82:0d:9f:8a:74:12:cc:90:43:0d:f0:67:4e:87:
f9:63:66:5e:14:4c:d3:a5:cf:e4:2d:80:f2:63:6a:
25:5d:91:84:57:31:a0:8a:d3:8a:b4:35:06:e0:f0:
b3:90:11:b5:3b:23:f3:1f:14:a7:30:80:03:46:0b:
7e:80:ec:77:35:0b:67:c2:90:72:dd:a1:07:c1:53:
03:fa:b4:22:3e:1f:e8:33:18:08:5e:53:03:f5:0c:
32:2f:d9:c7:87:a1:52:79:4e:bf:ed:5c:4b:53:d5:
4a:20:cf:7a:18:23:64:ed:67:ec:06:7f:d3:c3:77:
93:09:3c:90:f4:7d:d3:8c:95:39:5d:31:2e:b0:bf:
b2:2b:c4:3c:2c:bf:b4:79:ad:ad:58:d3:01:c5:86:
fe:1b:34:35:d2:72:9f:75:f0:fe:1b:0b:a9:2a:04:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:DD:A0:48:75:DA:62:B9:08:DF:4F:CC:F4:29:D3:A9:06:E7:58
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3gDdoEh12mK5CN9PzPQp06kG51g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a6:1c:2c:fa:4f:28:f0:9d:36:10:d9:f4:7b:9b:df:f0:bf:
39:25:c1:7a:fa:f5:f3:5c:fe:9a:9b:13:5d:e6:58:01:e9:6a:
a0:85:bb:1d:d0:c8:45:e5:cf:1f:4b:c9:c6:3f:b4:10:28:03:
1b:b7:08:a4:8c:7b:f6:1e:9f:4b:12:6c:16:04:74:e2:25:ee:
85:b7:01:0d:03:8b:3e:17:f5:94:00:95:24:7a:2a:71:29:e4:
5a:96:5f:a4:e6:f3:6e:8d:09:eb:58:a4:86:76:13:a5:d1:8d:
67:51:91:6d:c0:57:43:3a:9a:8d:67:df:24:68:6f:c2:46:99:
e0:63:b6:d9:f1:2c:87:0d:8e:24:ff:f0:43:94:58:21:89:cd:
6a:69:fb:66:fd:72:5a:9e:56:69:86:a8:4e:eb:6d:28:46:a4:
df:16:d1:80:e8:a9:87:ab:37:63:a1:51:86:07:bf:a5:6b:ea:
38:55:52:72:ee:df:9a:d0:88:03:0c:c3:55:27:13:71:1c:a6:
18:77:1b:1c:2d:ad:06:79:90:5c:9e:2b:ac:6b:f6:b5:74:de:
ca:84:37:d3:ee:fd:31:1e:75:30:fd:89:76:40:b3:39:dd:2f:
a6:08:2a:df:d1:b6:95:f5:f0:23:56:d6:56:c7:43:bb:65:06:
dd:93:43:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV3x9G0ybQCI6nSHJsC64PdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAzMTMxNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTAwZGRhMDQ4NzVkYTYyYjkwOGRmNGZjY2Y0MjlkM2E5MDZlNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5un5hFHO9l0JikcSjs939ZPu+Pt
geBgfBH1gjUk37ilPGr1EuFlRWp303yZIDRVad2IDeDLLiMORo3QH7JW3C2BSh78
yZZUiIMsHKstxRsjhpt0SaWE1bgmgg2finQSzJBDDfBnTof5Y2ZeFEzTpc/kLYDy
Y2olXZGEVzGgitOKtDUG4PCzkBG1OyPzHxSnMIADRgt+gOx3NQtnwpBy3aEHwVMD
+rQiPh/oMxgIXlMD9QwyL9nHh6FSeU6/7VxLU9VKIM96GCNk7WfsBn/Tw3eTCTyQ
9H3TjJU5XTEusL+yK8Q8LL+0ea2tWNMBxYb+GzQ10nKfdfD+GwupKgSicwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4A3aBIddpiuQjfT8z0KdOpBudYMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvM2dEZG9FaDEybUs1Q045UHpQUXAwNmtHNTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX5QMA0G
CSqGSIb3DQEBCwUAA4IBAQBmphws+k8o8J02ENn0e5vf8L85JcF6+vXzXP6amxNd
5lgB6Wqghbsd0MhF5c8fS8nGP7QQKAMbtwikjHv2Hp9LEmwWBHTiJe6FtwENA4s+
F/WUAJUkeipxKeRall+k5vNujQnrWKSGdhOl0Y1nUZFtwFdDOpqNZ98kaG/CRpng
Y7bZ8SyHDY4k//BDlFghic1qaftm/XJanlZphqhO620oRqTfFtGA6KmHqzdjoVGG
B7+la+o4VVJy7t+a0IgDDMNVJxNxHKYYdxscLa0GeZBcniusa/a1dN7KhDfT7v0x
HnUw/Yl2QLM53S+mCCrf0baV9fAjVtZWx0O7ZQbdk0Mv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org