Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8T0NRqTmjpjDSj-xg3a_76JQZhw.roa
File: 8T0NRqTmjpjDSj-xg3a_76JQZhw.roa (raw, json)
Hash identifier: Bdh/CmT5geDUHLlB08lDaiVtwFK2Zi9KJBmYTJIi8Tk=
Subject key identifier: F1:3D:0D:46:A4:E6:8E:98:C3:4A:3F:B1:83:76:BF:EF:A2:50:66:1C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C8BD060B2F0A4CA6D782A26B1DD8AB5BC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8T0NRqTmjpjDSj-xg3a_76JQZhw.roa
Signing time: Thu 21 Dec 2023 09:58:58 +0000
ROA not before: Thu 21 Dec 2023 09:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:d0:60:b2:f0:a4:ca:6d:78:2a:26:b1:dd:8a:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 21 09:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13d0d46a4e68e98c34a3fb18376bfefa250661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:f5:af:ea:16:14:34:72:71:93:b0:3b:af:
98:21:b4:82:fe:44:de:b4:53:c3:84:f8:de:3d:df:
cc:34:87:88:38:33:a6:07:4b:e6:24:91:0e:5d:dd:
6e:95:53:70:e7:c4:e3:21:a2:83:72:78:bc:86:8f:
04:de:33:d8:d6:4f:8d:a8:36:ed:bd:11:b4:94:d3:
f1:d0:3b:37:e7:41:1a:b2:43:16:06:7a:76:19:88:
c6:f8:d0:13:7c:77:04:0d:c4:07:6e:06:e1:dd:43:
71:d6:b7:5b:ad:30:f8:6a:a2:37:55:ea:dc:07:12:
71:6b:87:25:38:69:cc:50:01:b4:09:47:95:49:99:
32:94:2b:a3:8e:4e:3a:0f:56:f5:59:8a:e7:e9:8e:
b1:72:3a:6b:16:75:8f:80:25:df:7b:d8:39:fa:7c:
ad:16:d7:9a:23:3c:f2:c3:b3:e0:dd:a0:9b:8c:26:
96:98:ee:70:de:ee:c7:7e:4f:11:1a:3f:a6:51:d4:
cf:b1:dc:e5:8a:5a:52:4d:08:41:92:94:21:22:55:
59:3c:f9:b8:bb:f3:12:0f:2f:60:c1:d0:ac:66:0e:
d6:ac:17:6f:17:a5:7e:81:e5:11:6a:5e:d6:df:eb:
06:a6:03:e9:ee:99:70:bc:06:e3:08:92:76:a8:c8:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3D:0D:46:A4:E6:8E:98:C3:4A:3F:B1:83:76:BF:EF:A2:50:66:1C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8T0NRqTmjpjDSj-xg3a_76JQZhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e9:e0:0c:4a:f8:23:1e:18:92:b0:f2:da:2f:87:73:3a:f5:
b5:2e:aa:e7:67:a5:6b:07:e5:1b:a0:1e:c6:3e:f9:9f:02:46:
8e:ed:41:72:d8:8a:4d:7b:a1:a5:27:de:7b:1d:7f:29:48:4a:
a3:98:5f:dc:d5:2e:53:d9:9c:84:1d:ff:2e:fa:84:cf:fd:0e:
fd:59:77:f5:1b:ce:5e:fc:6a:2a:98:62:3f:a9:cf:eb:89:cb:
fb:97:e7:24:d1:5e:91:02:a3:4a:dc:f6:ef:63:e5:3a:30:22:
0f:8c:48:d0:81:16:d2:ef:f6:00:56:48:bd:49:ad:b0:b9:55:
b1:bb:5f:b4:6a:61:1f:26:b5:b7:f2:c1:03:84:d5:fd:17:45:
54:60:42:dd:cb:e8:2a:03:ef:bf:7a:eb:01:06:48:cf:2e:98:
23:19:fe:91:81:88:34:33:88:af:1c:90:16:bf:8b:3a:37:d2:
9d:cc:7a:8d:15:ef:b0:73:9a:d0:73:8c:25:17:e7:b5:45:7b:
dc:9e:8f:c9:e6:3b:47:70:8d:36:8c:30:3c:39:01:77:f8:7f:
21:99:2a:af:0c:8a:bc:e3:ef:e4:01:93:23:0b:0c:b2:ab:5e:
c5:62:dc:17:cd:f9:d8:aa:0b:bc:b5:70:5f:93:90:d9:18:6e:
a3:48:79:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyL0GCy8KTKbXgqJrHdirW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMjIxMDk1ODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTNkMGQ0NmE0ZTY4ZTk4YzM0YTNmYjE4Mzc2YmZlZmEyNTA2NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyH1r+oWFDRycZOwO6+YIbSC/kTe
tFPDhPjePd/MNIeIODOmB0vmJJEOXd1ulVNw58TjIaKDcni8ho8E3jPY1k+NqDbt
vRG0lNPx0Ds350EaskMWBnp2GYjG+NATfHcEDcQHbgbh3UNx1rdbrTD4aqI3Verc
BxJxa4clOGnMUAG0CUeVSZkylCujjk46D1b1WYrn6Y6xcjprFnWPgCXfe9g5+nyt
FteaIzzyw7Pg3aCbjCaWmO5w3u7Hfk8RGj+mUdTPsdzlilpSTQhBkpQhIlVZPPm4
u/MSDy9gwdCsZg7WrBdvF6V+geURal7W3+sGpgPp7plwvAbjCJJ2qMitqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPE9DUak5o6Yw0o/sYN2v++iUGYcMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvOFQwTlJxVG1qcGpEU2oteGczYV83NkpRWmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEWMA0G
CSqGSIb3DQEBCwUAA4IBAQAb6eAMSvgjHhiSsPLaL4dzOvW1LqrnZ6VrB+UboB7G
PvmfAkaO7UFy2IpNe6GlJ957HX8pSEqjmF/c1S5T2ZyEHf8u+oTP/Q79WXf1G85e
/GoqmGI/qc/ricv7l+ck0V6RAqNK3PbvY+U6MCIPjEjQgRbS7/YAVki9Sa2wuVWx
u1+0amEfJrW38sEDhNX9F0VUYELdy+gqA++/eusBBkjPLpgjGf6RgYg0M4ivHJAW
v4s6N9KdzHqNFe+wc5rQc4wlF+e1RXvcno/J5jtHcI02jDA8OQF3+H8hmSqvDIq8
4+/kAZMjCwyyq17FYtwXzfnYqgu8tXBfk5DZGG6jSHlk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org