Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5O6Mh1AOeG780TXI3CnnYyiLRV0.roa
File: 5O6Mh1AOeG780TXI3CnnYyiLRV0.roa (raw, json)
Hash identifier: 3bTuo8heyVKpMKO0u45fpGTJrwjXqsa11AOTgtHtyus=
Subject key identifier: E4:EE:8C:87:50:0E:78:6E:FC:D1:35:C8:DC:29:E7:63:28:8B:45:5D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01870365FA04DF53761C3D0E72869DC57B83
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5O6Mh1AOeG780TXI3CnnYyiLRV0.roa
Signing time: Tue 21 Mar 2023 09:00:27 +0000
ROA not before: Tue 21 Mar 2023 09:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Apr 2023 17:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:65:fa:04:df:53:76:1c:3d:0e:72:86:9d:c5:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 21 09:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ee8c87500e786efcd135c8dc29e763288b455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:23:9f:61:16:fd:0f:c0:6d:6b:a8:a0:60:
c4:1b:81:f2:3d:5f:da:47:38:63:f5:64:f3:ab:7c:
43:dd:14:0c:6d:3d:9d:1b:bc:20:eb:a5:8f:26:aa:
ca:51:98:4e:8a:02:e5:12:f1:59:59:13:88:70:16:
dd:00:c7:cf:f9:42:c6:e1:8a:0a:89:a3:4a:08:66:
8d:67:d0:69:20:68:d0:8a:64:18:ed:02:41:b9:c2:
23:14:17:ec:b1:1c:4c:c1:02:c6:d9:06:4a:d7:37:
43:f8:46:42:26:20:64:56:03:fd:48:f1:02:22:69:
bc:6d:7a:05:bf:a4:76:fb:66:53:40:9c:67:eb:f6:
a0:f0:08:c9:31:e4:a7:96:47:62:1e:f6:25:e4:0c:
53:d2:98:8d:64:22:67:a9:b1:33:7c:4a:fe:f3:39:
01:35:c1:e6:90:da:3f:0d:f2:06:4d:f5:27:ff:f1:
1c:29:a5:7a:ba:ef:cd:6e:08:fe:af:f9:6f:b2:05:
59:65:1e:8e:5e:a6:19:5c:b3:f4:c1:b9:49:7e:8b:
6c:54:0d:45:f1:87:ed:18:c8:58:9d:cb:8b:9f:55:
10:f9:ec:9e:74:b3:57:03:7b:0a:cd:2c:24:ab:72:
3e:a2:57:0a:b7:7d:8f:41:09:1e:c7:e1:b0:ee:20:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:8C:87:50:0E:78:6E:FC:D1:35:C8:DC:29:E7:63:28:8B:45:5D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5O6Mh1AOeG780TXI3CnnYyiLRV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
94:70:07:f4:80:5f:09:58:b4:8c:a4:9d:77:02:fa:41:9f:ce:
a1:31:c6:e5:f3:45:91:3f:30:4d:f8:4f:09:71:fd:d5:ec:f2:
5e:a8:71:77:d3:c7:e8:b0:19:a4:8a:8a:20:ed:55:62:98:28:
b3:2d:3f:a7:73:01:54:ff:f7:31:6a:a4:22:fe:cb:65:93:c6:
69:09:55:f2:f1:f9:26:c7:8d:e2:eb:68:59:bb:5d:c4:12:2a:
de:bd:4b:f9:01:d3:fe:5b:da:32:32:17:3f:48:04:1d:18:fd:
b8:a4:9b:0a:79:6e:c0:8b:90:66:ff:9f:f9:b0:17:6d:3a:0a:
ba:1e:d7:29:ff:41:93:09:fc:b5:ae:70:21:51:7d:f7:55:5c:
79:10:7c:bb:ff:b7:51:c1:4f:93:e4:33:22:fe:2f:b0:dc:ef:
ef:ce:ea:94:f6:be:19:3a:36:f3:ee:fb:f4:c0:69:7b:0d:5d:
b7:3a:d6:42:8d:45:99:f6:ea:f2:91:aa:b7:12:19:8d:a8:82:
a6:9c:27:e3:88:b7:64:9f:4c:b1:8a:bf:20:6d:f2:6f:86:e3:
4e:17:be:94:94:dc:62:cc:11:57:6b:67:4b:99:e4:82:ac:05:
87:9d:fe:84:67:a9:67:44:5c:91:b4:09:cb:40:6e:4b:47:99:
dd:a2:00:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcDZfoE31N2HD0OcoadxXuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMzIxMDkwMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGVlOGM4NzUwMGU3ODZlZmNkMTM1YzhkYzI5ZTc2MzI4OGI0NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLgjn2EW/Q/AbWuooGDEG4HyPV/a
Rzhj9WTzq3xD3RQMbT2dG7wg66WPJqrKUZhOigLlEvFZWROIcBbdAMfP+ULG4YoK
iaNKCGaNZ9BpIGjQimQY7QJBucIjFBfssRxMwQLG2QZK1zdD+EZCJiBkVgP9SPEC
Imm8bXoFv6R2+2ZTQJxn6/ag8AjJMeSnlkdiHvYl5AxT0piNZCJnqbEzfEr+8zkB
NcHmkNo/DfIGTfUn//EcKaV6uu/Nbgj+r/lvsgVZZR6OXqYZXLP0wblJfotsVA1F
8YftGMhYncuLn1UQ+eyedLNXA3sKzSwkq3I+olcKt32PQQkex+Gw7iBYAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTujIdQDnhu/NE1yNwp52Moi0VdMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNU82TWgxQU9lRzc4MFRYSTNDbm5ZeWlMUlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEWMA0G
CSqGSIb3DQEBCwUAA4IBAQCUcAf0gF8JWLSMpJ13AvpBn86hMcbl80WRPzBN+E8J
cf3V7PJeqHF308fosBmkioog7VVimCizLT+ncwFU//cxaqQi/stlk8ZpCVXy8fkm
x43i62hZu13EEirevUv5AdP+W9oyMhc/SAQdGP24pJsKeW7Ai5Bm/5/5sBdtOgq6
Htcp/0GTCfy1rnAhUX33VVx5EHy7/7dRwU+T5DMi/i+w3O/vzuqU9r4ZOjbz7vv0
wGl7DV23OtZCjUWZ9urykaq3EhmNqIKmnCfjiLdkn0yxir8gbfJvhuNOF76UlNxi
zBFXa2dLmeSCrAWHnf6EZ6lnRFyRtAnLQG5LR5ndogA3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org