Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7LAItx-KinXNYp21PkhqNcfdM0.roa
File: R7LAItx-KinXNYp21PkhqNcfdM0.roa (raw, json)
Hash identifier: bHiZNZfd6jtiHbUEzCwHc+nXNzkJCiUg3yoY4Xkg6Ic=
Subject key identifier: 47:B2:C0:22:DC:7E:2A:29:D7:35:8A:76:D4:F9:21:A8:D7:1F:74:CD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B04B441E30F2E6C4D2CD11D6E77210B66
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7LAItx-KinXNYp21PkhqNcfdM0.roa
Signing time: Fri 06 Oct 2023 11:16:43 +0000
ROA not before: Fri 06 Oct 2023 11:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197795
IP address blocks: 185.230.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 11:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:b4:41:e3:0f:2e:6c:4d:2c:d1:1d:6e:77:21:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 6 11:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b2c022dc7e2a29d7358a76d4f921a8d71f74cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:6b:af:e7:50:b3:39:ab:09:04:1c:67:b5:
82:e8:8a:1b:11:07:b8:b0:27:ee:21:28:41:e2:79:
df:78:0c:e9:4a:12:17:89:19:31:9f:85:26:cf:dc:
71:6a:d5:13:e4:31:bf:62:3a:1d:b1:87:68:19:e9:
3d:31:77:7f:76:27:62:81:cd:bf:e1:06:09:8f:81:
62:be:60:5e:09:f4:e2:58:e6:3d:83:67:5d:22:cf:
7c:4c:c7:35:4f:7c:22:7a:3c:5f:6d:e4:68:3e:c0:
2b:87:5f:a7:00:84:0f:d5:ef:c0:04:1e:ed:bd:a3:
d4:5e:2e:d7:00:cd:59:c3:e8:68:99:93:e1:6c:e1:
1f:0d:82:f7:ba:f2:70:e8:a2:15:82:bc:ca:62:66:
60:75:20:50:77:e0:9a:2e:49:d4:af:3b:e6:75:a7:
fd:95:1b:90:7d:76:94:90:a8:b9:27:c4:4c:ef:c2:
50:eb:6f:10:96:6e:39:dc:7d:2e:2d:ae:e5:75:ef:
18:0f:15:a8:38:8d:25:51:0c:e1:f8:8e:45:b0:f9:
88:a7:ac:f5:a6:2c:fc:cb:d0:b3:ef:c5:8b:45:55:
83:c7:77:0c:9f:6a:d3:8c:d9:1e:41:cc:a6:c7:36:
3b:e2:7b:8c:3a:97:cc:d4:0c:2a:27:d8:18:b2:d2:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:C0:22:DC:7E:2A:29:D7:35:8A:76:D4:F9:21:A8:D7:1F:74:CD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7LAItx-KinXNYp21PkhqNcfdM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
62:43:77:3c:3d:58:08:60:dc:65:60:70:63:46:9c:8f:65:51:
e1:15:42:cc:76:13:d7:d8:3e:ce:0f:bb:24:05:72:cc:fb:25:
d0:60:f6:15:c6:85:2c:43:2d:e8:b2:3f:bb:a8:f3:d8:32:f2:
ea:ea:5f:9e:9f:09:dc:bb:49:f8:a2:14:e5:c1:21:69:14:39:
ac:93:e3:ed:3b:ff:da:af:f3:5d:70:cc:41:e7:fc:3a:89:8e:
6c:c8:d2:32:fd:54:d0:3f:f3:e8:f5:c9:92:70:b4:df:fd:3f:
48:f7:b3:18:8e:14:93:a2:26:08:91:00:e4:cd:c9:57:6d:22:
1c:9f:37:20:3a:7c:69:4b:12:fb:ec:b8:52:4c:68:35:8e:b3:
66:21:7b:b6:00:4d:13:e2:15:89:c3:18:b4:46:36:7f:ce:9b:
7e:21:25:1d:6e:4f:0e:22:97:62:f9:e2:42:b5:2c:f4:24:04:
63:0f:06:41:82:1e:ea:52:be:75:f1:72:05:7b:9b:a1:bf:d2:
9b:53:de:fa:07:82:3c:49:30:b4:20:f3:fb:70:6c:bb:4a:e9:
fd:b7:69:f8:ee:89:a8:6a:9c:04:62:da:02:56:2e:f3:52:1b:
d2:f6:f3:d9:ab:de:25:6f:b3:ac:d7:9b:83:f5:67:83:a4:84:
e1:f3:58:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsEtEHjDy5sTSzRHW53IQtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMDA2MTExNjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2IyYzAyMmRjN2UyYTI5ZDczNThhNzZkNGY5MjFhOGQ3MWY3NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp9rr+dQszmrCQQcZ7WC6IobEQe4
sCfuIShB4nnfeAzpShIXiRkxn4Umz9xxatUT5DG/YjodsYdoGek9MXd/didigc2/
4QYJj4FivmBeCfTiWOY9g2ddIs98TMc1T3wiejxfbeRoPsArh1+nAIQP1e/ABB7t
vaPUXi7XAM1Zw+homZPhbOEfDYL3uvJw6KIVgrzKYmZgdSBQd+CaLknUrzvmdaf9
lRuQfXaUkKi5J8RM78JQ628Qlm453H0uLa7lde8YDxWoOI0lUQzh+I5FsPmIp6z1
piz8y9Cz78WLRVWDx3cMn2rTjNkeQcymxzY74nuMOpfM1AwqJ9gYstJe+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeywCLcfiop1zWKdtT5IajXH3TNMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUjdMQUl0eC1LaW5YTllwMjFQa2hxTmNmZE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueY0MA0G
CSqGSIb3DQEBCwUAA4IBAQBiQ3c8PVgIYNxlYHBjRpyPZVHhFULMdhPX2D7OD7sk
BXLM+yXQYPYVxoUsQy3osj+7qPPYMvLq6l+enwncu0n4ohTlwSFpFDmsk+PtO//a
r/NdcMxB5/w6iY5syNIy/VTQP/Po9cmScLTf/T9I97MYjhSToiYIkQDkzclXbSIc
nzcgOnxpSxL77LhSTGg1jrNmIXu2AE0T4hWJwxi0RjZ/zpt+ISUdbk8OIpdi+eJC
tSz0JARjDwZBgh7qUr518XIFe5uhv9KbU976B4I8STC0IPP7cGy7Sun9t2n47omo
apwEYtoCVi7zUhvS9vPZq94lb7Os15uD9WeDpITh81jJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org