Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bj5kccHBnVdVCra_GjXL07PKh1s.roa
File: Bj5kccHBnVdVCra_GjXL07PKh1s.roa (raw, json)
Hash identifier: IcAg5vL2nksGS+UsO4JT6v8KNTM/9FfVnnPoCZvl5w4=
Subject key identifier: 06:3E:64:71:C1:C1:9D:57:55:0A:B6:BF:1A:35:CB:D3:B3:CA:87:5B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CAC2163AE181229481D51497ADC281101
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bj5kccHBnVdVCra_GjXL07PKh1s.roa
Signing time: Wed 27 Dec 2023 16:35:18 +0000
ROA not before: Wed 27 Dec 2023 16:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:21:63:ae:18:12:29:48:1d:51:49:7a:dc:28:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 27 16:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063e6471c1c19d57550ab6bf1a35cbd3b3ca875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:2b:b1:50:01:86:c2:3c:fc:b2:e4:71:f7:
0f:bf:ed:12:c1:ee:31:70:38:55:e1:b7:b8:9d:ff:
ef:af:c4:a8:e7:7f:32:f0:5b:40:c4:c7:c3:5e:fd:
f2:d8:3e:84:18:a8:e7:36:f2:f0:28:f1:4d:cb:a0:
9f:1c:e7:b6:44:2a:4d:f2:1d:67:51:79:a7:ae:68:
41:9d:9e:d7:3c:9a:db:f9:e6:d8:f0:db:fe:bc:64:
ab:40:1a:6f:10:cf:0d:87:d1:bf:15:87:bd:cb:ca:
dd:c1:65:aa:77:ef:f6:aa:a4:d2:92:d8:9d:7b:70:
63:d6:f7:ca:99:f3:6a:20:61:c4:4a:fa:c7:b8:81:
aa:44:6e:87:67:8c:ff:6b:09:21:02:7b:18:92:f0:
d6:74:8c:11:fa:ad:79:dc:c3:3b:59:d4:5d:31:ae:
44:12:58:ec:ac:9b:a0:b9:43:3f:5c:4f:e6:d6:fc:
c2:b9:53:35:20:44:f0:29:e5:9f:85:cd:8c:ec:e3:
77:92:b1:9b:4b:d3:3a:0e:f2:f2:98:18:2f:49:87:
8c:71:74:78:22:3f:9e:f0:1e:6a:61:b0:61:7c:f6:
b0:7c:1a:ce:a2:21:66:56:02:43:00:cc:00:76:5c:
6f:9f:16:93:09:8a:63:68:87:74:de:4d:50:cc:44:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:64:71:C1:C1:9D:57:55:0A:B6:BF:1A:35:CB:D3:B3:CA:87:5B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bj5kccHBnVdVCra_GjXL07PKh1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c5:03:ce:63:ff:01:1c:1c:d8:80:98:52:0d:d9:aa:a7:c7:
69:11:d6:f6:c8:03:5a:ac:6b:89:cf:85:22:ab:20:c4:f1:41:
b2:58:0a:3e:bc:85:b2:b0:19:64:9a:e4:84:d0:a8:8e:11:43:
a7:d8:b9:07:bf:21:d2:d0:0a:5d:94:3d:14:25:f4:22:20:56:
ff:56:f8:03:7f:c7:0e:0d:af:68:cd:93:8f:40:45:f3:68:9c:
6f:e7:d6:fe:4e:0c:a0:00:13:64:5e:f7:ba:92:0f:57:cc:10:
d5:57:0c:72:62:b7:76:29:01:b8:95:1e:2a:f5:3d:3a:fc:41:
69:e2:e0:61:dc:d8:00:c7:60:d2:67:64:e2:3b:10:55:7f:8a:
49:4c:6e:32:6e:1f:2a:4e:d9:18:25:9c:12:6a:9c:7f:51:e1:
bf:ce:3a:8c:78:5b:5a:76:ef:93:70:e0:b4:3f:65:6d:bb:2b:
11:ab:39:4c:55:fa:a8:f5:4b:b3:fd:95:b0:11:d4:df:64:2f:
9d:6d:04:db:b0:85:cc:43:76:37:14:e4:ad:40:cc:44:52:cb:
c1:ba:23:fb:46:5b:b4:7e:07:38:d0:e7:44:02:5c:f4:6b:ce:
40:64:36:eb:52:36:6d:69:69:b3:2e:10:f5:e4:78:60:ba:1e:
8d:8d:6d:52
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYysIWOuGBIpSB1RSXrcKBEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMjI3MTYzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjNlNjQ3MWMxYzE5ZDU3NTUwYWI2YmYxYTM1Y2JkM2IzY2E4NzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBwrsVABhsI8/LLkcfcPv+0Swe4x
cDhV4be4nf/vr8So538y8FtAxMfDXv3y2D6EGKjnNvLwKPFNy6CfHOe2RCpN8h1n
UXmnrmhBnZ7XPJrb+ebY8Nv+vGSrQBpvEM8Nh9G/FYe9y8rdwWWqd+/2qqTSktid
e3Bj1vfKmfNqIGHESvrHuIGqRG6HZ4z/awkhAnsYkvDWdIwR+q153MM7WdRdMa5E
EljsrJuguUM/XE/m1vzCuVM1IETwKeWfhc2M7ON3krGbS9M6DvLymBgvSYeMcXR4
Ij+e8B5qYbBhfPawfBrOoiFmVgJDAMwAdlxvnxaTCYpjaId03k1QzESK2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAY+ZHHBwZ1XVQq2vxo1y9OzyodbMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQmo1a2NjSEJuVmRWQ3JhX0dqWEwwN1BLaDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuc76AwQA
ud9OMA0GCSqGSIb3DQEBCwUAA4IBAQAaxQPOY/8BHBzYgJhSDdmqp8dpEdb2yANa
rGuJz4UiqyDE8UGyWAo+vIWysBlkmuSE0KiOEUOn2LkHvyHS0ApdlD0UJfQiIFb/
VvgDf8cODa9ozZOPQEXzaJxv59b+TgygABNkXve6kg9XzBDVVwxyYrd2KQG4lR4q
9T06/EFp4uBh3NgAx2DSZ2TiOxBVf4pJTG4ybh8qTtkYJZwSapx/UeG/zjqMeFta
du+TcOC0P2VtuysRqzlMVfqo9Uuz/ZWwEdTfZC+dbQTbsIXMQ3Y3FOStQMxEUsvB
uiP7Rlu0fgc40OdEAlz0a85AZDbrUjZtaWmzLhD15Hhguh6NjW1S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org