Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RQ_Htgw9Xy2TAwb4paTKDg0BKfM.roa
File: RQ_Htgw9Xy2TAwb4paTKDg0BKfM.roa (raw, json)
Hash identifier: 1+cYXl+4vyq9lSJ8SJexkYL0MS/wpDgshuoGt9/NiOI=
Subject key identifier: 45:0F:C7:B6:0C:3D:5F:2D:93:03:06:F8:A5:A4:CA:0E:0D:01:29:F3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4C90FC7DF0C4300FA3249E41FD3B5985
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RQ_Htgw9Xy2TAwb4paTKDg0BKfM.roa
Signing time: Thu 31 Aug 2023 17:08:04 +0000
ROA not before: Thu 31 Aug 2023 17:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 185.194.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 19:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:90:fc:7d:f0:c4:30:0f:a3:24:9e:41:fd:3b:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 31 17:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450fc7b60c3d5f2d930306f8a5a4ca0e0d0129f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:eb:8a:8d:e6:58:91:a0:56:30:19:47:db:
2c:16:04:07:0b:d7:fd:7e:a5:c2:df:e0:2e:d3:36:
0d:67:4d:a0:35:c5:00:4b:2b:6c:61:52:85:2e:47:
57:7e:b3:18:35:06:12:35:61:98:39:be:14:07:d8:
65:eb:93:0f:51:6b:92:cd:90:74:cb:10:fd:30:29:
78:11:51:23:fa:92:17:48:e4:34:a7:c5:03:30:d5:
e0:32:15:a7:63:d6:18:67:96:da:9e:95:9c:d3:2e:
38:1f:76:d7:c7:8a:30:52:e3:63:e4:7d:9f:79:de:
f6:6a:1c:4e:a4:b9:e4:f2:55:0e:57:89:68:4e:bb:
cf:7e:72:09:61:5d:08:bf:ca:05:fb:89:7b:48:f1:
7b:36:aa:30:80:c5:f0:cc:a1:d8:a7:1f:e6:ad:bf:
f3:64:5c:90:bc:87:54:3a:d5:7a:0a:5b:35:f3:ee:
8f:7b:27:75:84:0a:b2:f5:a3:7a:d4:c8:8e:0e:b2:
66:8d:59:e0:13:ec:cf:b9:43:23:86:b3:28:fc:53:
12:68:46:ed:49:bb:7a:d6:3b:48:a1:b7:9a:86:c9:
63:01:b4:59:61:14:3b:45:5b:b7:99:8d:31:c0:50:
92:0c:85:2a:ad:20:0b:a1:a2:3f:2b:f1:9f:81:4f:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:C7:B6:0C:3D:5F:2D:93:03:06:F8:A5:A4:CA:0E:0D:01:29:F3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RQ_Htgw9Xy2TAwb4paTKDg0BKfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:b0:ec:c1:98:4a:aa:8c:00:05:35:85:ea:de:0a:ab:5a:
7d:0d:81:7e:74:ab:f3:aa:72:cd:b4:0b:2b:09:57:f4:ba:70:
0c:fb:66:40:c1:2a:e3:92:f0:f7:73:f0:70:6c:c1:da:ba:8d:
25:68:f9:b0:b4:1a:76:f5:69:f8:c2:7f:52:fd:44:f2:bf:dc:
47:fe:2f:13:3a:77:32:20:39:e1:59:b1:7d:88:8d:6d:97:75:
c1:1d:9f:54:f5:e0:8d:ba:0c:55:87:71:77:ab:8b:c8:d2:36:
88:69:55:ce:27:3b:9d:0d:24:b8:5e:e9:9f:62:65:cd:59:90:
6f:d7:8c:28:50:c0:29:93:15:e3:51:42:9b:e0:5d:d1:f2:42:
62:41:28:ca:62:09:08:2b:7a:3b:bc:82:84:b7:b8:9c:98:de:
ba:cb:9f:aa:8e:0a:3e:c9:15:5f:d7:72:40:58:e0:b1:a1:dc:
84:33:d7:ed:df:38:46:9c:62:3e:f2:b7:84:92:4b:45:ef:1d:
8a:e9:3d:6c:97:aa:3f:22:9d:e4:4d:c5:c8:65:b6:32:bc:d0:
13:59:58:f5:dd:4b:d1:d5:b9:29:80:52:67:09:58:f9:95:94:
e3:ed:ec:7a:5f:01:08:07:45:ea:5c:92:46:16:79:96:a9:1b:
39:d6:b7:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpMkPx98MQwD6MknkH9O1mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwODMxMTcwODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBmYzdiNjBjM2Q1ZjJkOTMwMzA2ZjhhNWE0Y2EwZTBkMDEyOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQrrio3mWJGgVjAZR9ssFgQHC9f9
fqXC3+Au0zYNZ02gNcUASytsYVKFLkdXfrMYNQYSNWGYOb4UB9hl65MPUWuSzZB0
yxD9MCl4EVEj+pIXSOQ0p8UDMNXgMhWnY9YYZ5banpWc0y44H3bXx4owUuNj5H2f
ed72ahxOpLnk8lUOV4loTrvPfnIJYV0Iv8oF+4l7SPF7NqowgMXwzKHYpx/mrb/z
ZFyQvIdUOtV6Cls18+6Peyd1hAqy9aN61MiODrJmjVngE+zPuUMjhrMo/FMSaEbt
Sbt61jtIobeahsljAbRZYRQ7RVu3mY0xwFCSDIUqrSALoaI/K/GfgU+G5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUPx7YMPV8tkwMG+KWkyg4NASnzMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUlFfSHRndzlYeTJUQXdiNHBhVEtEZzBCS2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKxMA0G
CSqGSIb3DQEBCwUAA4IBAQBnhbDswZhKqowABTWF6t4Kq1p9DYF+dKvzqnLNtAsr
CVf0unAM+2ZAwSrjkvD3c/BwbMHauo0laPmwtBp29Wn4wn9S/UTyv9xH/i8TOncy
IDnhWbF9iI1tl3XBHZ9U9eCNugxVh3F3q4vI0jaIaVXOJzudDSS4XumfYmXNWZBv
14woUMApkxXjUUKb4F3R8kJiQSjKYgkIK3o7vIKEt7icmN66y5+qjgo+yRVf13JA
WOCxodyEM9ft3zhGnGI+8reEkktF7x2K6T1sl6o/Ip3kTcXIZbYyvNATWVj13UvR
1bkpgFJnCVj5lZTj7ex6XwEIB0XqXJJGFnmWqRs51rfn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org