Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H-XDRNtGoC_BUgg1BS5bBe8SfAo.roa
File: H-XDRNtGoC_BUgg1BS5bBe8SfAo.roa (raw, json)
Hash identifier: xZhsrHFvyAD5M6KkFwei7VbU/vbd/cKGjCWw+Ifpb/0=
Subject key identifier: 1F:E5:C3:44:DB:46:A0:2F:C1:52:08:35:05:2E:5B:05:EF:12:7C:0A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A55246BAB3DFE5243AE6927B031E4DEAB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H-XDRNtGoC_BUgg1BS5bBe8SfAo.roa
Signing time: Sat 02 Sep 2023 09:06:04 +0000
ROA not before: Sat 02 Sep 2023 09:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 185.214.102.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:55:24:6b:ab:3d:fe:52:43:ae:69:27:b0:31:e4:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 09:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fe5c344db46a02fc1520835052e5b05ef127c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:be:23:67:dc:8a:8b:e9:31:78:84:51:01:
0d:c6:16:81:cc:cc:98:6f:0d:dc:36:23:8f:e5:76:
7e:f9:3f:ae:0c:d5:d1:dd:9f:3e:86:41:4c:08:10:
e7:c9:5f:92:af:67:a2:6c:37:a5:ab:4c:ee:56:76:
e7:92:68:62:76:b0:16:5b:62:48:a2:eb:99:93:79:
36:9e:e9:2a:7f:30:ef:83:67:3e:4d:a2:49:93:d3:
33:cd:e4:51:37:bf:0c:f9:e2:cf:d4:78:74:1f:f1:
0c:14:f6:53:5b:a7:8d:4c:34:1e:a2:e8:88:b2:1b:
67:7f:8c:66:ab:d4:80:b9:2b:27:13:3a:d9:1c:51:
bf:17:4d:87:cc:88:e8:d7:98:f8:27:e1:67:10:22:
b2:fd:92:62:cc:60:89:86:d9:b3:ee:e3:1d:f2:63:
89:20:b1:50:8c:0a:02:84:04:f0:dd:3c:0c:19:03:
a4:85:8e:78:40:d9:c4:fc:e5:e7:56:9a:f8:ea:44:
5a:07:df:18:3f:e0:a4:f8:d6:bb:01:81:1e:61:f3:
59:0e:dc:a2:ac:64:df:71:53:69:f3:9f:c4:33:9d:
45:72:03:70:c3:56:a7:ba:d8:89:9a:cb:ef:b0:04:
77:f4:76:02:43:30:5d:5e:1f:b1:fd:7e:07:30:7f:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:C3:44:DB:46:A0:2F:C1:52:08:35:05:2E:5B:05:EF:12:7C:0A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H-XDRNtGoC_BUgg1BS5bBe8SfAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.102.0/24
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7a:e3:47:a9:9c:83:c2:58:fb:d7:bb:22:06:9c:8e:8f:ab:
2a:a3:33:98:69:76:d7:16:8a:94:57:03:f0:33:32:11:43:d9:
79:b0:70:00:e1:5b:d7:84:e7:98:e1:27:4c:ed:0e:f7:ac:f3:
41:cc:30:37:0f:dd:d4:06:db:89:e0:b2:ad:a7:db:a3:e0:ea:
8e:8a:36:13:27:e5:ad:08:b1:c7:0d:8f:ac:df:3b:fb:2a:b0:
c6:bf:a7:e5:9f:48:04:b3:67:31:2f:84:a7:b9:77:82:36:17:
a2:c6:5b:2d:bf:96:ef:87:75:7c:58:e3:f9:5c:cf:1d:71:2d:
50:23:79:25:37:a4:d6:2b:56:97:82:a5:f3:e2:62:09:11:32:
83:db:05:ad:f1:33:bf:4a:67:1b:c5:a4:33:7b:82:65:38:b8:
3e:9d:b7:4c:f3:5a:84:1b:78:70:9e:20:d7:55:42:02:99:ef:
46:4a:d7:81:5b:51:35:cb:f8:ac:76:41:5a:d3:6a:8f:f6:0e:
89:b0:57:bd:90:84:10:04:d8:b5:04:ad:3a:eb:a7:86:b9:c1:
82:70:05:89:e7:08:31:20:d6:74:4d:23:f7:6c:e6:8c:73:b2:
05:eb:42:bb:85:d5:73:eb:b6:49:1e:11:42:5e:2b:61:90:66:
36:e9:2d:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpVJGurPf5SQ65pJ7Ax5N6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTAyMDkwNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmU1YzM0NGRiNDZhMDJmYzE1MjA4MzUwNTJlNWIwNWVmMTI3YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfO+I2fciovpMXiEUQENxhaBzMyY
bw3cNiOP5XZ++T+uDNXR3Z8+hkFMCBDnyV+Sr2eibDelq0zuVnbnkmhidrAWW2JI
ouuZk3k2nukqfzDvg2c+TaJJk9MzzeRRN78M+eLP1Hh0H/EMFPZTW6eNTDQeouiI
shtnf4xmq9SAuSsnEzrZHFG/F02HzIjo15j4J+FnECKy/ZJizGCJhtmz7uMd8mOJ
ILFQjAoChATw3TwMGQOkhY54QNnE/OXnVpr46kRaB98YP+Ck+Na7AYEeYfNZDtyi
rGTfcVNp85/EM51FcgNww1anutiJmsvvsAR39HYCQzBdXh+x/X4HMH+euQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB/lw0TbRqAvwVIINQUuWwXvEnwKMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSC1YRFJOdEdvQ19CVWdnMUJTNWJCZThTZkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudZmAwQA
ueEAMA0GCSqGSIb3DQEBCwUAA4IBAQBQeuNHqZyDwlj717siBpyOj6sqozOYaXbX
FoqUVwPwMzIRQ9l5sHAA4VvXhOeY4SdM7Q73rPNBzDA3D93UBtuJ4LKtp9uj4OqO
ijYTJ+WtCLHHDY+s3zv7KrDGv6fln0gEs2cxL4SnuXeCNheixlstv5bvh3V8WOP5
XM8dcS1QI3klN6TWK1aXgqXz4mIJETKD2wWt8TO/SmcbxaQze4JlOLg+nbdM81qE
G3hwniDXVUICme9GSteBW1E1y/isdkFa02qP9g6JsFe9kIQQBNi1BK0666eGucGC
cAWJ5wgxINZ0TSP3bOaMc7IF60K7hdVz67ZJHhFCXithkGY26S2j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org