Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67WfctBV8hV6BHjAlJ4rBlIddoU.roa
File: 67WfctBV8hV6BHjAlJ4rBlIddoU.roa (raw, json)
Hash identifier: zdbin4mDuti4u9ZqupuxIoybb1bXXjCruZBvJCkD+3s=
Subject key identifier: EB:B5:9F:72:D0:55:F2:15:7A:04:78:C0:94:9E:2B:06:52:1D:76:85
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E2E4D5B7B5B8E22F179D3945CEB6694E4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67WfctBV8hV6BHjAlJ4rBlIddoU.roa
Signing time: Mon 11 Mar 2024 16:16:45 +0000
ROA not before: Mon 11 Mar 2024 16:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 185.230.66.0/24 maxlen: 24
193.58.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:4d:5b:7b:5b:8e:22:f1:79:d3:94:5c:eb:66:94:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 11 16:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebb59f72d055f2157a0478c0949e2b06521d7685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:ac:32:0e:0e:23:a7:c1:e1:5b:bd:f5:11:
a5:2d:93:08:f0:d8:e3:75:3c:90:2d:a1:d9:03:2b:
9d:2a:64:9f:55:b3:fc:a9:b3:e0:6b:45:fb:00:0d:
88:6f:5b:ca:33:45:a7:60:88:4d:89:90:55:b5:0a:
bd:1c:d5:be:b2:09:15:e8:e9:47:7f:19:36:b6:d6:
17:60:c3:96:a9:a6:3b:bb:ad:06:c7:36:d0:43:b2:
c9:7a:75:6b:b4:ad:66:ec:25:71:4f:7e:3b:7d:e2:
e4:ef:dd:b4:dd:0b:70:93:43:68:d3:73:43:a4:67:
36:d9:f1:42:db:b6:77:37:5c:6b:6d:18:a1:b1:e8:
bf:52:6a:44:96:d2:cd:ee:3d:c9:1e:88:07:0c:0d:
41:6c:90:e9:07:f7:2c:5c:9d:43:2b:80:68:3d:7b:
3c:5f:9e:2c:ac:55:ee:a7:1c:73:c1:fa:fb:ef:5b:
be:d1:9a:30:19:47:40:12:81:ef:be:5f:e8:3b:b8:
66:a6:78:45:1e:52:9d:83:c3:2e:b6:76:31:e2:b3:
60:8e:14:b7:2e:c1:a5:f3:97:d7:1a:72:f0:ce:9e:
e5:9c:84:35:98:b5:23:53:85:61:5e:8e:70:1a:62:
a3:13:44:1e:72:6c:e9:1e:a6:42:5b:9a:0d:10:fc:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:9F:72:D0:55:F2:15:7A:04:78:C0:94:9E:2B:06:52:1D:76:85
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67WfctBV8hV6BHjAlJ4rBlIddoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.66.0/24
193.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:34:a0:a3:26:1a:58:3c:d1:bd:e4:81:ec:79:b9:bc:b6:47:
db:12:07:ca:40:75:f1:a5:22:df:c8:19:bb:fc:08:53:49:8a:
e7:95:6d:88:37:0d:36:b5:64:be:81:fa:4a:22:ea:41:b6:02:
6d:0c:b9:7c:a9:c1:05:3b:a5:36:aa:0e:36:40:16:f5:56:e2:
65:40:57:2c:e6:83:b1:26:2e:f6:33:5a:b7:95:2e:9f:b7:74:
c6:33:76:54:fb:00:59:15:c7:4d:db:51:7c:51:09:d3:0b:a5:
b9:0d:85:fc:3e:0c:a7:9c:26:5a:97:77:6b:40:8b:19:73:3e:
e6:6e:f3:1d:42:29:cc:df:37:64:08:a7:77:0f:8e:aa:9f:68:
0e:4f:f8:23:46:db:d4:ba:3e:54:69:51:06:01:31:97:f1:ac:
7d:c4:10:47:da:84:f5:4c:ce:cc:77:86:8d:b3:52:34:27:8a:
c1:c6:73:0e:4e:f7:7a:55:e2:88:d8:db:f8:9f:df:ce:6f:db:
70:e3:86:b2:a3:89:00:45:08:10:7f:c5:87:6c:a6:69:f7:ee:
65:e3:56:9e:f5:ea:a7:f1:3e:56:48:b6:41:6e:d7:9b:d0:12:
cb:ae:bc:ad:9f:f7:33:2b:57:4d:cc:3f:c0:8b:42:d7:3d:0b:
b8:ad:46:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY4uTVt7W44i8XnTlFzrZpTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMzExMTYxNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmI1OWY3MmQwNTVmMjE1N2EwNDc4YzA5NDllMmIwNjUyMWQ3Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCqsMg4OI6fB4Vu99RGlLZMI8Njj
dTyQLaHZAyudKmSfVbP8qbPga0X7AA2Ib1vKM0WnYIhNiZBVtQq9HNW+sgkV6OlH
fxk2ttYXYMOWqaY7u60GxzbQQ7LJenVrtK1m7CVxT347feLk79203Qtwk0No03ND
pGc22fFC27Z3N1xrbRihsei/UmpEltLN7j3JHogHDA1BbJDpB/csXJ1DK4BoPXs8
X54srFXupxxzwfr771u+0ZowGUdAEoHvvl/oO7hmpnhFHlKdg8MutnYx4rNgjhS3
LsGl85fXGnLwzp7lnIQ1mLUjU4VhXo5wGmKjE0QecmzpHqZCW5oNEPwgzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOu1n3LQVfIVegR4wJSeKwZSHXaFMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNjdXZmN0QlY4aFY2QkhqQWxKNHJCbElkZG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueZCAwQA
wTqTMA0GCSqGSIb3DQEBCwUAA4IBAQAMNKCjJhpYPNG95IHsebm8tkfbEgfKQHXx
pSLfyBm7/AhTSYrnlW2INw02tWS+gfpKIupBtgJtDLl8qcEFO6U2qg42QBb1VuJl
QFcs5oOxJi72M1q3lS6ft3TGM3ZU+wBZFcdN21F8UQnTC6W5DYX8PgynnCZal3dr
QIsZcz7mbvMdQinM3zdkCKd3D46qn2gOT/gjRtvUuj5UaVEGATGX8ax9xBBH2oT1
TM7Md4aNs1I0J4rBxnMOTvd6VeKI2Nv4n9/Ob9tw44ayo4kARQgQf8WHbKZp9+5l
41ae9eqn8T5WSLZBbteb0BLLrrytn/czK1dNzD/Ai0LXPQu4rUbC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org