Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXev3xbOiohQPDtZ-WOgiSw3IzA.roa
File: OXev3xbOiohQPDtZ-WOgiSw3IzA.roa (raw, json)
Hash identifier: epH4K+obL9AkRpAGGlvqLWRG9rBGJZiy9PfIUrbQioQ=
Subject key identifier: 39:77:AF:DF:16:CE:8A:88:50:3C:3B:59:F9:63:A0:89:2C:37:23:30
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B9C3D79426554B2544768578AAD8F353B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXev3xbOiohQPDtZ-WOgiSw3IzA.roa
Signing time: Sat 04 Nov 2023 21:29:16 +0000
ROA not before: Sat 04 Nov 2023 21:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.222.29.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 23:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:3d:79:42:65:54:b2:54:47:68:57:8a:ad:8f:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 4 21:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3977afdf16ce8a88503c3b59f963a0892c372330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:cb:3d:18:b0:b8:01:61:2f:dd:e5:0f:74:
fd:3a:4b:e5:30:1e:5d:92:e1:98:43:9d:bb:a6:13:
8c:0b:83:97:d0:90:f4:b0:bd:41:72:96:fb:4f:52:
9d:6e:85:2b:22:b8:1c:29:cb:b0:9c:4c:50:79:2d:
87:02:d9:91:08:e8:c4:9c:6d:28:38:ff:4a:dd:c3:
41:c3:60:c2:cc:81:ec:d2:1b:88:9e:dc:b4:ae:87:
d7:2c:c9:f8:16:fd:cf:c4:6d:23:b1:33:6e:3d:39:
3a:c2:da:50:cb:7b:67:b8:0d:cf:ae:db:8a:67:a8:
20:71:fd:ce:20:3e:8f:5f:f7:82:c6:2d:74:1f:f2:
69:70:88:01:9f:d6:50:63:67:8d:7e:3a:eb:b4:1a:
b7:fd:5f:b8:59:f9:3e:ab:2b:9d:fd:d8:e0:7c:62:
23:44:72:5b:93:f0:72:32:2b:16:da:82:3a:a1:1f:
e8:70:00:50:40:72:78:52:06:81:03:75:f2:04:6d:
e6:99:20:1f:0a:61:23:2e:38:4a:5c:80:55:4a:8b:
c9:f0:59:0d:24:9b:8d:27:50:21:a2:00:b2:c3:67:
e2:eb:01:4d:0f:13:65:6d:80:d1:16:7f:45:f5:93:
b7:55:7a:5f:9a:23:37:2e:de:0a:6c:23:c6:15:e8:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:AF:DF:16:CE:8A:88:50:3C:3B:59:F9:63:A0:89:2C:37:23:30
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXev3xbOiohQPDtZ-WOgiSw3IzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.73.0/24
185.218.101.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8f:b2:d0:2b:bb:5b:eb:cd:fa:aa:85:dc:08:b1:a4:98:1c:
6b:f2:83:f9:26:b6:b3:2a:29:6e:e5:f5:a1:e6:92:1b:45:5b:
9b:70:02:59:00:df:32:bd:ba:fa:1b:f1:8c:35:f8:41:a2:b9:
1e:a7:72:5e:cd:44:82:f6:4f:d1:a3:40:af:9b:37:1b:1a:98:
f9:c1:59:a6:40:cf:dc:6e:1f:ef:1f:37:65:53:88:c9:fa:d5:
2a:62:25:02:43:d4:7d:9c:43:37:31:fd:42:f6:de:14:a4:d8:
e9:22:c9:1d:cf:9c:13:14:d5:9d:35:77:24:be:56:00:b7:e8:
30:a2:93:1b:ad:01:2f:ea:28:de:6b:eb:e6:17:a3:c2:76:16:
34:6f:6a:a1:50:25:b0:53:fc:99:bd:1b:85:87:da:32:c8:79:
3f:89:4a:8c:5f:16:8b:a9:f2:42:84:a8:31:23:b6:a4:3c:a5:
ce:f9:e8:18:8a:df:6d:0e:e5:a3:76:80:e4:94:7e:28:fe:d4:
69:25:b9:9e:92:09:91:6c:3f:d6:5b:d9:47:46:6c:0b:9a:ff:
06:86:0b:80:5b:87:78:aa:e8:3d:8d:a3:ff:1d:63:4b:fb:01:
0b:ab:de:27:5e:4e:e6:4f:54:c7:75:f0:1d:ba:8e:5f:07:cf:
4f:04:8e:a5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYucPXlCZVSyVEdoV4qtjzU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMTA0MjEyOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTc3YWZkZjE2Y2U4YTg4NTAzYzNiNTlmOTYzYTA4OTJjMzcyMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBTLPRiwuAFhL93lD3T9OkvlMB5d
kuGYQ527phOMC4OX0JD0sL1Bcpb7T1KdboUrIrgcKcuwnExQeS2HAtmRCOjEnG0o
OP9K3cNBw2DCzIHs0huInty0rofXLMn4Fv3PxG0jsTNuPTk6wtpQy3tnuA3PrtuK
Z6ggcf3OID6PX/eCxi10H/JpcIgBn9ZQY2eNfjrrtBq3/V+4Wfk+qyud/djgfGIj
RHJbk/ByMisW2oI6oR/ocABQQHJ4UgaBA3XyBG3mmSAfCmEjLjhKXIBVSovJ8FkN
JJuNJ1AhogCyw2fi6wFNDxNlbYDRFn9F9ZO3VXpfmiM3Lt4KbCPGFehNKQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDl3r98WzoqIUDw7WfljoIksNyMwMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvT1hldjN4Yk9pb2hRUER0Wi1XT2dpU3czSXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAucKxAwQA
udFJAwQAudplAwQAud4dAwQAufZwAwQAwTqSMA0GCSqGSIb3DQEBCwUAA4IBAQBg
j7LQK7tb6836qoXcCLGkmBxr8oP5JrazKilu5fWh5pIbRVubcAJZAN8yvbr6G/GM
NfhBorkep3JezUSC9k/Ro0CvmzcbGpj5wVmmQM/cbh/vHzdlU4jJ+tUqYiUCQ9R9
nEM3Mf1C9t4UpNjpIskdz5wTFNWdNXckvlYAt+gwopMbrQEv6ijea+vmF6PCdhY0
b2qhUCWwU/yZvRuFh9oyyHk/iUqMXxaLqfJChKgxI7akPKXO+egYit9tDuWjdoDk
lH4o/tRpJbmekgmRbD/WW9lHRmwLmv8GhguAW4d4qug9jaP/HWNL+wELq94nXk7m
T1THdfAduo5fB89PBI6l
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org