Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ef7r1ArXr8rj7ykVg6pOjqEkhWk.roa
File: Ef7r1ArXr8rj7ykVg6pOjqEkhWk.roa (raw, json)
Hash identifier: YNZGrl6FMEIl1YstwiOGJX/X6K2Bb5hfMVd/ooYbJXU=
Subject key identifier: 11:FE:EB:D4:0A:D7:AF:CA:E3:EF:29:15:83:AA:4E:8E:A1:24:85:69
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019251EB03682D86BB9FE752082385452027
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ef7r1ArXr8rj7ykVg6pOjqEkhWk.roa
Signing time: Thu 03 Oct 2024 10:26:49 +0000
ROA not before: Thu 03 Oct 2024 10:26:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 185.223.80.0/24 maxlen: 24
194.76.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:eb:03:68:2d:86:bb:9f:e7:52:08:23:85:45:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 3 10:26:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11feebd40ad7afcae3ef291583aa4e8ea1248569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:c6:d9:65:41:ee:c3:7e:20:68:e0:e6:68:
43:07:9f:eb:f7:14:05:85:db:57:65:bb:f9:a9:08:
11:3f:7a:b8:f4:ef:c2:c9:c1:44:da:df:c3:83:43:
df:b5:33:96:7a:a2:0b:ff:2e:9b:c7:d8:d2:ac:a7:
6d:04:b3:09:4f:a1:54:f2:b0:83:90:ba:dc:c0:57:
c0:01:fe:4b:6a:5e:e4:9f:f8:b2:69:36:2f:52:6c:
74:28:0f:f7:30:4f:5b:12:f3:d2:63:36:95:ff:6f:
5f:d6:eb:68:22:dd:07:13:94:93:b3:04:dd:b2:27:
a3:76:3b:ca:16:ad:b9:62:f5:c6:2d:59:a5:36:8e:
f2:ab:28:52:df:c7:6a:3e:54:bb:09:2e:62:a2:5b:
fb:72:3f:54:05:d7:eb:a0:5c:f2:98:dc:3f:cb:95:
fe:3f:62:0d:fe:01:34:53:8b:bc:bc:12:0c:c2:30:
f4:2e:c5:73:af:5c:79:e2:d3:7e:84:54:c0:43:67:
58:a7:46:df:67:ca:24:e5:db:53:c2:5d:93:81:4a:
20:c1:8e:06:d3:a6:a6:e2:a2:a4:1a:f7:4b:5c:36:
75:59:e7:20:f3:a3:fc:66:ac:18:22:d5:78:60:a2:
99:24:bb:71:bf:03:40:07:ac:f5:df:27:61:91:da:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:EB:D4:0A:D7:AF:CA:E3:EF:29:15:83:AA:4E:8E:A1:24:85:69
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ef7r1ArXr8rj7ykVg6pOjqEkhWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.80.0/24
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:67:86:60:cc:d9:84:9b:2b:b6:d7:61:d1:42:8f:10:de:
ee:2a:61:2e:27:ac:ab:12:56:6b:2c:24:d5:03:59:c0:b6:b9:
9a:d6:eb:1a:58:cf:b5:e0:69:89:9c:33:a0:67:52:62:49:f9:
1d:ec:f5:e2:e0:ac:16:b0:df:96:97:f6:c7:bb:ce:23:13:c8:
99:f5:89:f1:34:c3:3f:b2:07:c0:f2:4d:6c:24:f2:5d:dc:bb:
92:fe:a5:df:ad:99:9e:74:97:39:b3:67:94:48:9f:27:05:a1:
ea:2f:80:5d:26:f1:d4:26:31:f2:9c:50:50:a5:a4:d0:bd:d3:
a0:b1:ef:15:37:c0:27:98:5d:b0:72:14:7d:74:95:56:67:8a:
f7:97:38:d9:91:46:a3:80:76:22:68:64:66:b7:f0:03:8f:dc:
cd:f1:e8:d0:a5:de:ff:1b:9c:cf:fa:05:ea:95:b0:0d:f2:26:
9e:1b:89:38:f7:ef:45:dd:84:07:22:2b:c7:76:14:be:74:42:
35:81:f8:04:1a:c3:bf:b8:80:be:1e:01:cc:9a:0e:7e:c3:8e:
36:b1:7e:52:ce:8e:dd:57:d7:64:33:f8:96:31:54:a8:ca:47:
bf:f9:3d:8d:94:97:40:9e:c3:43:1d:e9:e5:3e:6f:2b:9d:16:
2e:6a:3e:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJR6wNoLYa7n+dSCCOFRSAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQxMDAzMTAyNjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWZlZWJkNDBhZDdhZmNhZTNlZjI5MTU4M2FhNGU4ZWExMjQ4NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rXG2WVB7sN+IGjg5mhDB5/r9xQF
hdtXZbv5qQgRP3q49O/CycFE2t/Dg0PftTOWeqIL/y6bx9jSrKdtBLMJT6FU8rCD
kLrcwFfAAf5Lal7kn/iyaTYvUmx0KA/3ME9bEvPSYzaV/29f1utoIt0HE5STswTd
siejdjvKFq25YvXGLVmlNo7yqyhS38dqPlS7CS5iolv7cj9UBdfroFzymNw/y5X+
P2IN/gE0U4u8vBIMwjD0LsVzr1x54tN+hFTAQ2dYp0bfZ8ok5dtTwl2TgUogwY4G
06am4qKkGvdLXDZ1Wecg86P8ZqwYItV4YKKZJLtxvwNAB6z13ydhkdrxJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBH+69QK16/K4+8pFYOqTo6hJIVpMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRWY3cjFBclhyOHJqN3lrVmc2cE9qcUVraFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud9QAwQA
wkytMA0GCSqGSIb3DQEBCwUAA4IBAQAElGeGYMzZhJsrttdh0UKPEN7uKmEuJ6yr
ElZrLCTVA1nAtrma1usaWM+14GmJnDOgZ1JiSfkd7PXi4KwWsN+Wl/bHu84jE8iZ
9YnxNMM/sgfA8k1sJPJd3LuS/qXfrZmedJc5s2eUSJ8nBaHqL4BdJvHUJjHynFBQ
paTQvdOgse8VN8AnmF2wchR9dJVWZ4r3lzjZkUajgHYiaGRmt/ADj9zN8ejQpd7/
G5zP+gXqlbAN8iaeG4k49+9F3YQHIivHdhS+dEI1gfgEGsO/uIC+HgHMmg5+w442
sX5Szo7dV9dkM/iWMVSoyke/+T2NlJdAnsNDHenlPm8rnRYuaj4X
-----END CERTIFICATE-----
Generated at Thu Nov 14 20:03:55 2024 by rpki-client on console-ams.rpki-client.org