Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BVxOW0JKJDulJOzFZQ4Z63l9Ht0.roa
File: BVxOW0JKJDulJOzFZQ4Z63l9Ht0.roa (raw, json)
Hash identifier: NRpTyD2CckI+tuOfO/HqOMiYxi8TYI84Zob95i87REk=
Subject key identifier: 05:5C:4E:5B:42:4A:24:3B:A5:24:EC:C5:65:0E:19:EB:79:7D:1E:DD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018746BCDB8128816E9205E2160A04A174A4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BVxOW0JKJDulJOzFZQ4Z63l9Ht0.roa
Signing time: Mon 03 Apr 2023 10:49:54 +0000
ROA not before: Mon 03 Apr 2023 10:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 09:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:bc:db:81:28:81:6e:92:05:e2:16:0a:04:a1:74:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 3 10:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=055c4e5b424a243ba524ecc5650e19eb797d1edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:f9:38:7e:72:f6:bb:6d:ba:59:66:8e:f3:
bc:c4:75:19:81:88:18:bc:17:bd:ad:9a:93:f4:55:
cd:b8:22:91:7e:ee:0b:98:2d:cd:b9:62:07:42:1f:
f3:69:c6:5a:e8:17:d9:37:7c:7f:31:8b:7e:bf:a9:
a9:74:12:47:43:90:2f:c2:b6:d0:67:63:50:67:9f:
4f:ce:b7:ba:f1:44:d5:8d:79:3d:87:cf:9a:0c:1f:
3d:42:81:3b:d0:97:6a:ec:05:33:db:81:d8:e7:24:
44:bf:95:50:20:1c:a8:2d:7a:a9:08:cb:68:cb:8f:
18:6a:ea:45:72:62:ac:eb:1e:6f:1e:17:de:72:86:
7b:cf:17:f6:f1:02:e2:14:d2:3c:0f:df:cb:af:47:
6c:f2:14:fa:72:f9:4a:5b:0e:0b:1f:20:40:63:bd:
b3:26:49:37:5d:d0:b6:de:8c:54:3f:0c:d4:b8:c8:
ee:2b:66:e3:d9:dc:04:de:fe:05:7d:33:8d:71:00:
2c:32:0b:f5:91:4a:99:7c:6a:90:ba:f1:8a:8d:f0:
0f:2e:fc:66:cb:8e:f2:21:2c:8f:e0:72:48:bd:b0:
11:b3:0f:af:e4:51:cd:e0:3b:b3:9c:1f:68:c6:16:
f6:7a:fa:30:c8:f1:7d:01:0f:b4:82:85:ad:f0:ea:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:4E:5B:42:4A:24:3B:A5:24:EC:C5:65:0E:19:EB:79:7D:1E:DD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BVxOW0JKJDulJOzFZQ4Z63l9Ht0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7c:47:0e:97:a2:8d:b4:d3:e3:ec:ae:0f:9a:0f:e9:12:f7:
16:34:02:4f:56:1d:b9:82:89:75:ad:a0:50:69:4b:aa:a2:e4:
8a:17:a1:02:a6:d4:7a:1c:b5:1d:8e:de:6e:de:6b:44:cd:b6:
85:1e:d8:c7:84:05:0c:93:c8:38:62:c7:d4:0f:c8:45:22:32:
6d:e2:df:6b:d1:21:10:5d:c5:0a:ca:fb:73:cd:cb:91:d2:76:
49:91:0f:f7:84:94:f8:8b:ad:4e:17:2c:cd:f1:02:15:1f:78:
f6:a3:46:07:d9:a5:06:4e:0b:4d:3f:77:07:62:05:24:b3:a7:
74:43:ca:2a:3c:7a:ed:0e:a0:55:b4:46:7f:4f:92:41:66:ba:
ca:a2:c0:43:cf:9c:15:7c:91:fb:07:ec:4a:93:f0:4a:99:a6:
ca:39:42:01:6a:ee:41:ff:54:5c:b7:6b:90:5c:47:dd:ff:66:
a2:77:5a:71:58:62:70:e7:ce:8d:6b:b9:3b:b2:7a:ef:bc:82:
b2:48:22:a1:d9:96:ae:39:a4:d0:1e:9c:02:e3:1e:c5:86:24:
14:f1:43:ca:b6:8f:c2:e0:48:6c:5d:e6:da:b2:f1:2c:fc:2f:
5e:25:a5:46:b0:78:e0:b0:7c:93:67:cb:65:44:80:b3:d0:f9:
40:ab:77:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdGvNuBKIFukgXiFgoEoXSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDAzMTA0OTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTVjNGU1YjQyNGEyNDNiYTUyNGVjYzU2NTBlMTllYjc5N2QxZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhj5OH5y9rttullmjvO8xHUZgYgY
vBe9rZqT9FXNuCKRfu4LmC3NuWIHQh/zacZa6BfZN3x/MYt+v6mpdBJHQ5AvwrbQ
Z2NQZ59Pzre68UTVjXk9h8+aDB89QoE70Jdq7AUz24HY5yREv5VQIByoLXqpCMto
y48YaupFcmKs6x5vHhfecoZ7zxf28QLiFNI8D9/Lr0ds8hT6cvlKWw4LHyBAY72z
Jkk3XdC23oxUPwzUuMjuK2bj2dwE3v4FfTONcQAsMgv1kUqZfGqQuvGKjfAPLvxm
y47yISyP4HJIvbARsw+v5FHN4DuznB9oxhb2evowyPF9AQ+0goWt8Oo0NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVcTltCSiQ7pSTsxWUOGet5fR7dMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQlZ4T1cwSktKRHVsSk96RlpRNFo2M2w5SHQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEAMA0G
CSqGSIb3DQEBCwUAA4IBAQCtfEcOl6KNtNPj7K4Pmg/pEvcWNAJPVh25gol1raBQ
aUuqouSKF6ECptR6HLUdjt5u3mtEzbaFHtjHhAUMk8g4YsfUD8hFIjJt4t9r0SEQ
XcUKyvtzzcuR0nZJkQ/3hJT4i61OFyzN8QIVH3j2o0YH2aUGTgtNP3cHYgUks6d0
Q8oqPHrtDqBVtEZ/T5JBZrrKosBDz5wVfJH7B+xKk/BKmabKOUIBau5B/1Rct2uQ
XEfd/2aid1pxWGJw586Na7k7snrvvIKySCKh2ZauOaTQHpwC4x7FhiQU8UPKto/C
4EhsXebasvEs/C9eJaVGsHjgsHyTZ8tlRICz0PlAq3eE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org