Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tfa59BctvnfoOdalGeHtcQJVUf0.roa
File: Tfa59BctvnfoOdalGeHtcQJVUf0.roa (raw, json)
Hash identifier: QBp063SIdF4YMLJKMCUBBou8eakBOG7ExI5HpX7pQ+g=
Subject key identifier: 4D:F6:B9:F4:17:2D:BE:77:E8:39:D6:A5:19:E1:ED:71:02:55:51:FD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187746995624373013A13638D492EDD1FD4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tfa59BctvnfoOdalGeHtcQJVUf0.roa
Signing time: Wed 12 Apr 2023 07:41:29 +0000
ROA not before: Wed 12 Apr 2023 07:41:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 185.199.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:69:95:62:43:73:01:3a:13:63:8d:49:2e:dd:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 12 07:41:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4df6b9f4172dbe77e839d6a519e1ed71025551fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:9a:0f:0d:7b:82:44:4b:2c:ff:22:66:57:
db:1d:fe:3a:a3:98:7f:7c:06:57:09:7b:92:38:d8:
12:d1:b5:55:2d:51:ec:59:db:0d:c6:72:f5:11:82:
6b:88:2a:b9:da:4b:09:87:d8:8b:7a:fa:1c:12:67:
70:dc:88:f6:5a:dd:26:49:d0:3e:7b:4a:eb:c5:86:
c6:c6:8d:dd:34:6e:1b:f4:51:63:3f:b4:93:21:3e:
0f:65:a3:c1:a0:ce:38:a8:74:e6:be:3c:4c:76:f8:
01:68:3d:f7:39:23:4f:13:72:dc:9e:54:a4:83:de:
95:a4:a8:bc:69:f1:cd:de:40:1b:22:47:3e:23:d0:
78:8e:29:fd:e3:8e:2b:ca:c0:18:6a:50:f9:d7:d6:
dc:a9:f6:e5:f5:e4:39:5f:9c:cf:1a:c9:bb:a0:6c:
d1:ae:6f:1f:41:46:4b:dd:5f:2d:a8:81:92:53:ce:
4b:7c:70:e9:20:4e:ea:87:db:3b:f8:81:39:31:9d:
c6:9f:b0:89:b8:8a:17:ab:c9:fc:ff:59:ea:3f:4a:
a8:ef:32:aa:9b:c5:92:b5:0d:cb:29:83:2a:c6:94:
aa:d0:16:55:d4:2c:22:1d:ee:5d:5f:83:ca:6c:7a:
33:1b:ec:fe:fa:80:80:dc:63:75:a6:f9:d6:d2:24:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:B9:F4:17:2D:BE:77:E8:39:D6:A5:19:E1:ED:71:02:55:51:FD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tfa59BctvnfoOdalGeHtcQJVUf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bc:d0:8d:f6:7e:13:4e:e5:9c:a9:a0:55:5e:11:81:5e:d9:
bb:a7:15:94:f0:ce:71:c8:53:c8:11:4b:c8:a2:b1:be:fc:68:
d0:8e:2b:e9:2f:f1:3d:67:8c:56:07:68:e9:43:08:8e:52:6c:
96:9a:f3:4b:31:bc:93:6f:1a:1a:79:37:ff:a0:85:2a:f9:8f:
49:ec:85:fc:6b:50:1c:a9:aa:81:5e:7d:93:61:c9:ac:a6:6b:
30:62:6c:6f:22:88:45:e3:d8:c1:1c:4d:8d:9c:a3:be:18:39:
86:57:24:f7:43:2f:61:51:c8:9c:57:ff:fc:14:4d:02:04:e4:
40:4a:b9:64:b2:45:e3:15:1d:20:b3:7d:0d:4a:12:00:8b:37:
68:b9:2e:50:f2:35:19:ba:49:83:8b:bf:c5:7e:68:d2:d2:55:
7c:0b:8e:80:bf:68:51:f4:75:ac:e2:fc:72:9f:6c:80:1f:f4:
6c:c1:f9:ad:68:ba:60:89:05:26:58:7a:cf:3e:df:d9:bc:fc:
29:7c:ea:e1:55:90:64:8c:4e:02:f3:5e:cc:05:0a:7a:b8:ee:
7b:21:b6:c4:39:39:38:ef:ee:91:5a:92:08:c2:98:12:28:a0:
3b:23:8e:5f:1a:32:6e:c1:23:df:ef:61:8b:8e:9c:47:69:cc:
0d:18:f0:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd0aZViQ3MBOhNjjUku3R/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDEyMDc0MTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGY2YjlmNDE3MmRiZTc3ZTgzOWQ2YTUxOWUxZWQ3MTAyNTU1MWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf+aDw17gkRLLP8iZlfbHf46o5h/
fAZXCXuSONgS0bVVLVHsWdsNxnL1EYJriCq52ksJh9iLevocEmdw3Ij2Wt0mSdA+
e0rrxYbGxo3dNG4b9FFjP7STIT4PZaPBoM44qHTmvjxMdvgBaD33OSNPE3LcnlSk
g96VpKi8afHN3kAbIkc+I9B4jin9444rysAYalD519bcqfbl9eQ5X5zPGsm7oGzR
rm8fQUZL3V8tqIGSU85LfHDpIE7qh9s7+IE5MZ3Gn7CJuIoXq8n8/1nqP0qo7zKq
m8WStQ3LKYMqxpSq0BZV1CwiHe5dX4PKbHozG+z++oCA3GN1pvnW0iTgdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE32ufQXLb536DnWpRnh7XECVVH9MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvVGZhNTlCY3R2bmZvT2RhbEdlSHRjUUpWVWYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucefMA0G
CSqGSIb3DQEBCwUAA4IBAQBHvNCN9n4TTuWcqaBVXhGBXtm7pxWU8M5xyFPIEUvI
orG+/GjQjivpL/E9Z4xWB2jpQwiOUmyWmvNLMbyTbxoaeTf/oIUq+Y9J7IX8a1Ac
qaqBXn2TYcmspmswYmxvIohF49jBHE2NnKO+GDmGVyT3Qy9hUcicV//8FE0CBORA
SrlkskXjFR0gs30NShIAizdouS5Q8jUZukmDi7/FfmjS0lV8C46Av2hR9HWs4vxy
n2yAH/RswfmtaLpgiQUmWHrPPt/ZvPwpfOrhVZBkjE4C817MBQp6uO57IbbEOTk4
7+6RWpIIwpgSKKA7I45fGjJuwSPf72GLjpxHacwNGPAh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org