Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H8W6JWPgHWK9Th7iA0xIN_Gcjcc.roa
File: H8W6JWPgHWK9Th7iA0xIN_Gcjcc.roa (raw, json)
Hash identifier: jnk8wIRS49xgENiG3SaA9ZeiGwo4+mpGJ0m6sNtc6Zo=
Subject key identifier: 1F:C5:BA:25:63:E0:1D:62:BD:4E:1E:E2:03:4C:48:37:F1:9C:8D:C7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64D071AEA51C43C75E3B4D6F3F4BC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H8W6JWPgHWK9Th7iA0xIN_Gcjcc.roa
Signing time: Mon 02 Jan 2023 09:00:50 +0000
ROA not before: Mon 02 Jan 2023 09:00:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212861
IP address blocks: 185.197.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 10:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:4d:07:1a:ea:51:c4:3c:75:e3:b4:d6:f3:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fc5ba2563e01d62bd4e1ee2034c4837f19c8dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:c0:ba:7b:e6:8c:ce:e7:f9:0e:11:90:78:
4f:27:f5:69:e3:0b:71:c0:c5:96:0b:62:13:a1:25:
32:0a:e9:65:7e:89:94:20:47:3e:0b:a0:66:2e:d4:
b7:b7:79:ae:44:1e:14:a2:91:f0:de:84:2f:01:ad:
eb:8c:e3:5f:8d:a5:f3:43:b4:74:82:43:2a:73:2b:
61:ef:35:9b:96:97:82:49:45:75:25:9b:df:b9:c2:
f3:a1:74:fc:35:f8:44:d2:27:97:25:2c:96:94:d4:
c2:eb:63:be:c5:80:bc:6c:37:3c:82:27:b2:0b:af:
2b:7e:00:76:fc:ef:c3:f3:fb:e0:ae:bf:29:45:8d:
50:e5:1e:d6:ff:5b:25:79:8f:a3:e0:7e:bf:4c:09:
36:3b:40:a9:c2:53:86:43:b2:e1:70:7d:06:ce:c4:
7d:2e:02:46:10:98:b3:eb:62:5a:1a:fe:c1:26:3c:
87:c9:8e:b2:d8:7a:ad:61:bb:0d:6c:81:c3:cf:55:
55:57:8d:3e:39:7b:13:f4:78:12:c5:b4:72:74:6e:
04:01:1c:e1:aa:61:cb:0d:93:e0:a2:aa:b4:9c:13:
a5:8e:3c:92:ed:1a:a0:71:ec:9d:37:b1:42:8c:34:
b8:d2:51:af:06:a6:23:f5:6b:2e:21:ea:15:11:65:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:BA:25:63:E0:1D:62:BD:4E:1E:E2:03:4C:48:37:F1:9C:8D:C7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H8W6JWPgHWK9Th7iA0xIN_Gcjcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.216.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5c:8a:a9:19:fb:01:89:b0:91:e6:be:2b:d9:be:10:21:82:
2b:3c:bd:89:68:a8:c7:c2:97:e0:ed:80:ac:c0:26:99:ea:aa:
5b:69:90:50:7b:c3:2d:94:65:7c:b5:bf:e8:92:6e:16:a3:75:
6e:45:1f:5e:af:ee:07:7a:53:a3:64:1b:94:b8:ee:bb:4e:37:
65:94:3f:a2:5f:14:d3:1e:8f:33:cb:2e:bb:d8:9f:58:e4:1c:
4e:e8:b9:8b:67:7c:d7:17:cf:e6:b2:8a:55:28:e7:8a:50:c2:
94:37:d1:2e:8f:17:c8:c2:56:a3:20:3f:87:dd:8c:18:ed:c4:
0b:63:33:a0:56:de:c2:11:00:e9:ff:ab:b7:91:58:91:56:d5:
f5:0c:51:9d:b6:7a:80:70:1d:b1:ae:87:bc:e9:35:e8:be:53:
0c:b3:af:db:d1:e2:5f:c7:51:9c:eb:87:77:7c:a3:6e:17:6e:
95:25:6f:ad:c0:ed:a2:d0:f0:1e:64:e2:8b:dc:7c:37:bf:52:
46:06:2c:ba:0b:47:09:e6:db:33:1b:39:fb:da:30:28:4d:6e:
fa:36:cf:bd:04:4c:6f:1f:5f:1a:39:c4:3e:30:45:67:07:29:
ed:27:20:6c:46:10:87:d9:08:f6:a8:dd:c7:0d:9d:1b:8f:3b:
64:87:84:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxtk0HGupRxDx147TW8/S8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmM1YmEyNTYzZTAxZDYyYmQ0ZTFlZTIwMzRjNDgzN2YxOWM4ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDjAunvmjM7n+Q4RkHhPJ/Vp4wtx
wMWWC2IToSUyCullfomUIEc+C6BmLtS3t3muRB4UopHw3oQvAa3rjONfjaXzQ7R0
gkMqcyth7zWblpeCSUV1JZvfucLzoXT8NfhE0ieXJSyWlNTC62O+xYC8bDc8giey
C68rfgB2/O/D8/vgrr8pRY1Q5R7W/1sleY+j4H6/TAk2O0CpwlOGQ7LhcH0GzsR9
LgJGEJiz62JaGv7BJjyHyY6y2HqtYbsNbIHDz1VVV40+OXsT9HgSxbRydG4EARzh
qmHLDZPgoqq0nBOljjyS7RqgceydN7FCjDS40lGvBqYj9WsuIeoVEWWSfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/FuiVj4B1ivU4e4gNMSDfxnI3HMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSDhXNkpXUGdIV0s5VGg3aUEweElOX0djamNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucXYMA0G
CSqGSIb3DQEBCwUAA4IBAQAxXIqpGfsBibCR5r4r2b4QIYIrPL2JaKjHwpfg7YCs
wCaZ6qpbaZBQe8MtlGV8tb/okm4Wo3VuRR9er+4HelOjZBuUuO67TjdllD+iXxTT
Ho8zyy672J9Y5BxO6LmLZ3zXF8/msopVKOeKUMKUN9EujxfIwlajID+H3YwY7cQL
YzOgVt7CEQDp/6u3kViRVtX1DFGdtnqAcB2xroe86TXovlMMs6/b0eJfx1Gc64d3
fKNuF26VJW+twO2i0PAeZOKL3Hw3v1JGBiy6C0cJ5tszGzn72jAoTW76Ns+9BExv
H18aOcQ+MEVnByntJyBsRhCH2Qj2qN3HDZ0bjztkh4Tx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org