Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8vJki68nP0akVcSL70bluv3xBeI.roa
File: 8vJki68nP0akVcSL70bluv3xBeI.roa (raw, json)
Hash identifier: yZflh/Jka2zVV9FKQDyOA6FUotJuffHxgfYps5ovEJU=
Subject key identifier: F2:F2:64:8B:AF:27:3F:46:A4:55:C4:8B:EF:46:E5:BA:FD:F1:05:E2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191E58ADF14679082E12867B3C444E48708
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8vJki68nP0akVcSL70bluv3xBeI.roa
Signing time: Thu 12 Sep 2024 09:22:49 +0000
ROA not before: Thu 12 Sep 2024 09:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141892
IP address blocks: 185.228.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 09:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:8a:df:14:67:90:82:e1:28:67:b3:c4:44:e4:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 12 09:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2f2648baf273f46a455c48bef46e5bafdf105e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:60:8f:f2:0f:2c:94:df:5d:7d:87:ae:83:
5d:4b:65:9f:a9:c5:a9:e0:d1:57:11:1d:a2:59:91:
51:1a:f9:4e:a8:44:49:38:13:f9:ed:51:f6:38:98:
1a:ba:72:35:18:ac:d2:79:05:fe:3d:d4:48:eb:9b:
e5:c8:2b:f2:9a:01:11:47:16:b0:67:35:92:d9:f0:
81:af:47:e3:f4:ea:c7:8a:46:49:65:34:eb:4b:02:
c0:2a:d0:3d:26:d6:1e:35:8b:db:98:3e:6a:5d:80:
59:d9:2c:f2:d0:d8:8e:1a:e1:bb:51:ad:8c:cd:2e:
c0:b9:dc:3b:07:40:74:5e:57:05:b0:41:47:0d:65:
69:54:c8:76:09:f8:4c:e9:14:1d:4a:d6:a2:6e:22:
65:9c:e3:d3:eb:c9:f9:3c:cd:cf:ec:0b:23:a3:ab:
5f:bc:17:41:6c:f1:d0:47:ce:ac:35:e7:43:f5:b8:
21:6f:27:b8:34:68:88:b6:66:cc:c1:43:d6:ed:d6:
c9:5e:91:61:c7:f5:7f:5f:d0:25:94:99:5b:e3:3d:
18:a4:1f:d5:0c:54:8b:f1:7a:8b:bc:bf:63:71:92:
4f:cb:16:2f:9b:d2:2a:e4:07:22:d0:2e:6b:5e:32:
c0:cc:5e:92:bd:04:e9:d0:05:2b:51:96:38:64:1a:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:64:8B:AF:27:3F:46:A4:55:C4:8B:EF:46:E5:BA:FD:F1:05:E2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8vJki68nP0akVcSL70bluv3xBeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
08:75:b8:12:7f:93:8f:5a:3c:d2:c8:54:de:94:d0:64:44:05:
cc:f3:41:52:43:33:9b:23:b1:93:f1:fb:2e:8f:9b:f4:e9:e0:
51:16:f4:3e:4b:b3:11:db:82:25:27:db:e5:94:b8:29:11:44:
40:6b:e2:a8:8b:ce:14:a0:d1:83:6e:56:0f:82:a3:41:3f:a6:
5e:2c:52:38:f8:0f:1b:2e:b7:65:9c:e0:49:46:b2:bb:7d:47:
aa:71:d9:10:6c:74:a8:b0:8b:d4:ff:a4:01:d5:d2:75:fe:35:
49:25:ed:68:6e:d9:78:72:be:58:4f:6d:3b:da:59:eb:ca:57:
8d:ac:35:39:99:00:3d:b2:5e:41:37:d4:a9:b9:c6:da:17:c9:
87:b0:54:9f:ca:21:f9:dc:40:03:16:83:fb:a3:24:2e:f6:47:
19:4e:b3:cd:47:96:ad:7e:66:40:5f:75:f6:bb:ea:20:c9:d0:
9e:33:34:1f:63:a3:96:9d:7d:f3:02:aa:51:63:2c:34:74:b6:
71:99:da:2c:87:ad:92:54:cf:b6:e8:c3:8b:34:a9:87:62:d5:
b1:f3:36:b7:d9:ea:a9:24:77:3c:93:16:47:dc:88:68:4e:fa:
1f:bc:66:29:65:3e:48:f6:58:a7:21:aa:67:92:92:9a:39:27:
fa:81:b8:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHlit8UZ5CC4Shns8RE5IcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwOTEyMDkyMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmYyNjQ4YmFmMjczZjQ2YTQ1NWM0OGJlZjQ2ZTViYWZkZjEwNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4xgj/IPLJTfXX2HroNdS2WfqcWp
4NFXER2iWZFRGvlOqERJOBP57VH2OJgaunI1GKzSeQX+PdRI65vlyCvymgERRxaw
ZzWS2fCBr0fj9OrHikZJZTTrSwLAKtA9JtYeNYvbmD5qXYBZ2Szy0NiOGuG7Ua2M
zS7Audw7B0B0XlcFsEFHDWVpVMh2CfhM6RQdStaibiJlnOPT68n5PM3P7Asjo6tf
vBdBbPHQR86sNedD9bghbye4NGiItmbMwUPW7dbJXpFhx/V/X9AllJlb4z0YpB/V
DFSL8XqLvL9jcZJPyxYvm9Iq5Aci0C5rXjLAzF6SvQTp0AUrUZY4ZBrD2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLyZIuvJz9GpFXEi+9G5br98QXiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvOHZKa2k2OG5QMGFrVmNTTDcwYmx1djN4QmVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueRLMA0G
CSqGSIb3DQEBCwUAA4IBAQAIdbgSf5OPWjzSyFTelNBkRAXM80FSQzObI7GT8fsu
j5v06eBRFvQ+S7MR24IlJ9vllLgpEURAa+Koi84UoNGDblYPgqNBP6ZeLFI4+A8b
LrdlnOBJRrK7fUeqcdkQbHSosIvU/6QB1dJ1/jVJJe1obtl4cr5YT2072lnryleN
rDU5mQA9sl5BN9SpucbaF8mHsFSfyiH53EADFoP7oyQu9kcZTrPNR5atfmZAX3X2
u+ogydCeMzQfY6OWnX3zAqpRYyw0dLZxmdosh62SVM+26MOLNKmHYtWx8za32eqp
JHc8kxZH3IhoTvofvGYpZT5I9linIapnkpKaOSf6gbj4
-----END CERTIFICATE-----
Generated at Mon Sep 30 11:06:50 2024 by rpki-client on console-ams.rpki-client.org