Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E8elsR0V3bxlyL_PvBnkt6YF2rs.roa
File: E8elsR0V3bxlyL_PvBnkt6YF2rs.roa (raw, json)
Hash identifier: Yjripxf5cauQBst0wBuqr0QTpl6a8bgqwfo42vqlwWU=
Subject key identifier: 13:C7:A5:B1:1D:15:DD:BC:65:C8:BF:CF:BC:19:E4:B7:A6:05:DA:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62D512093C76A65ADF6A21748F665
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E8elsR0V3bxlyL_PvBnkt6YF2rs.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.178.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 10:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2d:51:20:93:c7:6a:65:ad:f6:a2:17:48:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13c7a5b11d15ddbc65c8bfcfbc19e4b7a605dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:02:d2:3b:36:9c:f5:c6:57:f9:b4:0a:ec:
4e:f2:c2:5b:88:0f:c9:d1:c3:bc:b8:3f:9d:eb:84:
fd:72:80:dc:f2:fd:6a:51:6b:6e:9d:cb:26:25:d4:
fd:39:d1:b1:18:b3:63:ac:2d:a8:a4:2c:89:a3:a2:
2a:8f:86:60:71:e0:7a:00:2b:34:cb:f7:50:7a:17:
40:cd:9f:bb:96:61:2e:b4:df:61:22:b2:25:38:09:
e4:77:be:ec:93:7e:20:18:f4:87:b0:4b:37:50:25:
5f:25:06:34:b0:f6:a3:70:8c:5b:31:64:d0:c3:4b:
70:80:9f:cf:b8:20:06:40:2d:01:37:5a:8b:4c:8e:
6e:b4:89:43:bb:0d:0a:a4:c6:56:5c:ef:86:3a:fe:
37:b0:92:63:48:d1:8c:a3:ae:2d:6e:2f:49:f2:3f:
ba:94:c2:79:33:aa:ae:33:7e:05:d3:b1:4c:31:04:
e9:f7:7f:24:a3:f2:3e:ff:08:84:c7:22:64:a6:94:
2a:cf:2c:a7:44:64:ed:85:a2:d8:e5:8f:9a:1b:48:
12:4e:98:9f:17:68:d4:bc:7f:f2:20:67:84:b0:f6:
32:4f:9c:a6:0f:5e:7c:51:a3:81:22:02:7f:b8:4e:
e1:af:68:ca:98:d5:04:5a:c0:eb:c8:aa:8f:ad:be:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:A5:B1:1D:15:DD:BC:65:C8:BF:CF:BC:19:E4:B7:A6:05:DA:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E8elsR0V3bxlyL_PvBnkt6YF2rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
185.225.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0e:42:e6:47:d4:b9:73:65:3e:74:fd:fc:d3:f4:20:98:42:
47:64:df:0c:5e:90:86:66:9b:27:17:96:2b:ba:ab:f4:b5:01:
78:41:11:ac:ed:d8:85:6a:91:a2:41:02:f1:fe:53:af:07:a9:
58:8c:2c:66:32:30:93:f7:4c:ae:81:bd:fb:f8:af:48:b4:e2:
92:18:15:a5:ec:43:ce:cd:43:18:bc:ea:16:35:b0:84:46:fe:
3e:88:10:59:7f:72:ae:29:16:a2:e7:ac:7f:81:d5:eb:29:81:
5a:fe:9d:51:03:e3:34:4f:ca:07:24:6b:41:ff:48:bc:12:be:
57:1a:de:a1:f3:04:01:bc:d9:0a:5d:c0:bb:65:83:95:47:0c:
95:4d:80:db:ef:72:90:31:d9:64:25:4c:30:ab:fa:bc:80:7c:
be:a8:e8:05:af:5c:55:b5:41:bd:97:46:86:96:88:0f:30:5d:
2f:29:58:b7:10:be:1e:90:24:bf:34:3e:03:0d:49:36:b0:44:
f2:46:a4:43:e0:b1:d5:c0:9b:c7:67:0f:53:19:e0:c8:85:83:
9c:e1:9d:0a:cc:a7:3f:1b:ce:e2:83:57:2f:37:c9:72:4b:95:
1e:c7:a9:aa:c4:da:2e:a0:e3:df:fa:0a:d9:76:9e:71:f0:c6:
53:d7:09:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxti1RIJPHamWt9qIXSPZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M3YTViMTFkMTVkZGJjNjVjOGJmY2ZiYzE5ZTRiN2E2MDVkYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfwC0js2nPXGV/m0CuxO8sJbiA/J
0cO8uD+d64T9coDc8v1qUWtuncsmJdT9OdGxGLNjrC2opCyJo6Iqj4ZgceB6ACs0
y/dQehdAzZ+7lmEutN9hIrIlOAnkd77sk34gGPSHsEs3UCVfJQY0sPajcIxbMWTQ
w0twgJ/PuCAGQC0BN1qLTI5utIlDuw0KpMZWXO+GOv43sJJjSNGMo64tbi9J8j+6
lMJ5M6quM34F07FMMQTp938ko/I+/wiExyJkppQqzyynRGTthaLY5Y+aG0gSTpif
F2jUvH/yIGeEsPYyT5ymD158UaOBIgJ/uE7hr2jKmNUEWsDryKqPrb5mtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBPHpbEdFd28Zci/z7wZ5LemBdq7MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRThlbHNSMFYzYnhseUxfUHZCbmt0NllGMnJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucKyAwQA
ueECMA0GCSqGSIb3DQEBCwUAA4IBAQBBDkLmR9S5c2U+dP380/QgmEJHZN8MXpCG
ZpsnF5Yruqv0tQF4QRGs7diFapGiQQLx/lOvB6lYjCxmMjCT90yugb37+K9ItOKS
GBWl7EPOzUMYvOoWNbCERv4+iBBZf3KuKRai56x/gdXrKYFa/p1RA+M0T8oHJGtB
/0i8Er5XGt6h8wQBvNkKXcC7ZYOVRwyVTYDb73KQMdlkJUwwq/q8gHy+qOgFr1xV
tUG9l0aGlogPMF0vKVi3EL4ekCS/ND4DDUk2sETyRqRD4LHVwJvHZw9TGeDIhYOc
4Z0KzKc/G87ig1cvN8lyS5Uex6mqxNouoOPf+grZdp5x8MZT1wkG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org