Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/69EUjSajpm9Qr-W5VP5MtjQIIuI.roa
File: 69EUjSajpm9Qr-W5VP5MtjQIIuI.roa (raw, json)
Hash identifier: BlN2Z2hJTDK1QxpMRg4em6Wr6fR9bdsHHYnDiDGv4tA=
Subject key identifier: EB:D1:14:8D:26:A3:A6:6F:50:AF:E5:B9:54:FE:4C:B6:34:08:22:E2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AF0EE6D8EE083FFD54D280FC86062801D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/69EUjSajpm9Qr-W5VP5MtjQIIuI.roa
Signing time: Mon 02 Oct 2023 15:07:51 +0000
ROA not before: Mon 02 Oct 2023 15:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.218.103.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.214.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 10:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:ee:6d:8e:e0:83:ff:d5:4d:28:0f:c8:60:62:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 2 15:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebd1148d26a3a66f50afe5b954fe4cb6340822e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:83:6c:0d:09:c7:e3:82:aa:30:2c:7b:e9:
56:79:bd:24:fe:12:26:01:4d:29:fd:e8:cb:30:5c:
cb:9f:18:7c:fe:2d:ed:2c:2d:fb:08:dd:1d:e9:86:
34:64:88:6e:5c:c7:8f:e8:38:f6:0c:d0:fa:06:01:
eb:75:8f:9a:6c:a6:c6:b5:e3:fa:b4:c5:ed:fd:ce:
66:aa:b3:4b:d7:a4:73:d8:36:c9:9b:83:3f:2a:92:
41:d9:66:3a:b4:2b:80:c7:ac:af:b8:db:fe:6a:f2:
77:62:9b:00:6e:86:a2:21:c0:f9:96:47:b9:05:7e:
63:2c:d8:a9:fd:54:29:f8:e6:01:a4:cd:f7:30:a5:
e6:ad:77:3f:fe:11:b1:13:36:91:b2:d6:5c:53:26:
b1:3c:14:b7:29:d1:78:75:f6:38:36:b3:57:3e:0c:
52:b0:4f:43:7d:37:8c:7a:e9:54:64:87:d6:f0:96:
e2:70:67:5d:80:6c:e3:46:5b:d1:cf:da:22:44:55:
70:d3:db:3e:8c:1c:2f:da:0a:77:70:17:eb:e2:1f:
28:cb:a2:c8:52:f6:b7:69:b3:49:1b:5c:f2:3f:44:
b3:03:e4:91:29:b2:29:85:81:0a:82:47:0d:b6:dc:
fb:83:18:78:8b:ed:cd:75:18:9e:7a:46:dd:12:2b:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:14:8D:26:A3:A6:6F:50:AF:E5:B9:54:FE:4C:B6:34:08:22:E2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/69EUjSajpm9Qr-W5VP5MtjQIIuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.100.0/24
185.218.101.0/24
185.218.103.0/24
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d4:ea:72:79:24:5f:de:bf:71:da:65:f3:18:ed:42:14:a2:
ca:08:74:60:a3:69:51:c2:0e:a0:fb:67:02:12:fd:f5:28:da:
69:69:cc:da:34:ee:f8:25:f4:86:47:9d:eb:e1:8b:5f:de:04:
b5:ec:8c:7b:6c:9c:9f:ac:19:23:50:9d:65:f9:bd:57:41:67:
43:40:42:e7:0e:0a:da:6f:e9:3d:34:e3:f5:c1:12:8f:5e:d5:
a3:0e:4a:a0:ad:1f:9b:61:5e:fa:29:14:0a:40:cf:95:7c:7f:
f9:78:ae:c1:0b:62:80:f6:dc:bf:ae:c9:21:92:df:cd:b8:b7:
c7:f4:ca:b9:57:f1:43:4c:7d:6b:aa:42:f2:58:47:d8:12:7e:
28:4b:d9:63:83:ef:e6:72:9b:85:bb:10:a0:ba:4b:81:9c:0a:
4d:10:c3:06:ab:4a:1c:a0:5e:22:35:cc:d3:ca:ff:b7:e2:1d:
fd:22:cc:a5:c9:19:7b:a6:23:ef:d4:b5:a8:fe:98:b0:84:e6:
ae:d1:12:24:55:45:48:2b:8c:6d:2e:7a:59:f2:61:2c:55:8a:
a5:5c:d6:91:9c:84:0b:25:d4:f9:c4:db:67:da:9e:e9:37:cc:
73:c0:ee:93:40:d2:1f:f6:30:a7:d6:d1:c6:11:ac:81:8f:89:
a3:72:b0:57
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYrw7m2O4IP/1U0oD8hgYoAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMDAyMTUwNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmQxMTQ4ZDI2YTNhNjZmNTBhZmU1Yjk1NGZlNGNiNjM0MDgyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHeDbA0Jx+OCqjAse+lWeb0k/hIm
AU0p/ejLMFzLnxh8/i3tLC37CN0d6YY0ZIhuXMeP6Dj2DND6BgHrdY+abKbGteP6
tMXt/c5mqrNL16Rz2DbJm4M/KpJB2WY6tCuAx6yvuNv+avJ3YpsAboaiIcD5lke5
BX5jLNip/VQp+OYBpM33MKXmrXc//hGxEzaRstZcUyaxPBS3KdF4dfY4NrNXPgxS
sE9DfTeMeulUZIfW8JbicGddgGzjRlvRz9oiRFVw09s+jBwv2gp3cBfr4h8oy6LI
Uva3abNJG1zyP0SzA+SRKbIphYEKgkcNttz7gxh4i+3NdRieekbdEit80QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOvRFI0mo6ZvUK/luVT+TLY0CCLiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNjlFVWpTYWpwbTlRci1XNVZQNU10alFJSXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAudZkAwQA
udplAwQAudpnAwQAudz4MA0GCSqGSIb3DQEBCwUAA4IBAQDC1OpyeSRf3r9x2mXz
GO1CFKLKCHRgo2lRwg6g+2cCEv31KNppaczaNO74JfSGR53r4Ytf3gS17Ix7bJyf
rBkjUJ1l+b1XQWdDQELnDgrab+k9NOP1wRKPXtWjDkqgrR+bYV76KRQKQM+VfH/5
eK7BC2KA9ty/rskhkt/NuLfH9Mq5V/FDTH1rqkLyWEfYEn4oS9ljg+/mcpuFuxCg
ukuBnApNEMMGq0ocoF4iNczTyv+34h39IsylyRl7piPv1LWo/piwhOau0RIkVUVI
K4xtLnpZ8mEsVYqlXNaRnIQLJdT5xNtn2p7pN8xzwO6TQNIf9jCn1tHGEayBj4mj
crBX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org