Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X1NWhpMoMYBRPUcSv4P5AzuGGqI.roa
File: X1NWhpMoMYBRPUcSv4P5AzuGGqI.roa (raw, json)
Hash identifier: +lNKN7RgMwo+OVKap/9k+lyObZZEfWAT8wQpvfSO14Y=
Subject key identifier: 5F:53:56:86:93:28:31:80:51:3D:47:12:BF:83:F9:03:3B:86:1A:A2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B8A615440D4B685AE125A816E24CDC86A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X1NWhpMoMYBRPUcSv4P5AzuGGqI.roa
Signing time: Wed 01 Nov 2023 10:15:16 +0000
ROA not before: Wed 01 Nov 2023 10:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.255.126.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:61:54:40:d4:b6:85:ae:12:5a:81:6e:24:cd:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 10:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f53568693283180513d4712bf83f9033b861aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:1d:b3:76:07:de:5e:e9:38:59:7e:7b:ff:
64:7a:93:bb:9a:eb:75:bd:c2:55:8a:f8:f7:9e:f9:
81:26:04:12:d1:e7:f9:8c:d1:aa:04:8c:31:1d:fe:
52:63:75:b7:b4:bc:8e:69:05:25:59:a4:d4:97:d5:
17:da:11:9f:cf:25:7e:49:2a:e3:4f:55:df:9b:0c:
5d:a0:e8:10:1e:c1:c6:a0:22:13:e6:bc:13:e4:09:
17:6f:53:de:6a:15:5a:c4:48:b5:c0:09:67:d9:03:
9a:05:7c:3e:8c:ab:d7:5b:d8:bb:f1:78:e6:b0:bf:
64:cb:17:9c:d8:6b:ac:9c:d1:76:72:5f:18:77:28:
65:ec:1f:d4:34:6e:7c:94:48:f6:4b:4a:e3:45:6a:
ce:a7:42:99:2c:74:bc:e6:39:f1:84:77:1d:06:78:
fc:99:51:35:07:e1:2d:3f:40:ec:5a:4d:22:8a:bf:
ae:70:6f:0b:76:a9:59:0b:db:7d:2f:0f:1f:0a:ee:
18:23:7a:80:2e:f5:d8:33:d2:54:e8:2c:86:0c:91:
5c:78:47:0c:2f:fe:28:f9:49:72:71:ae:27:fb:ac:
5d:29:66:f4:85:68:b1:22:88:ce:df:d1:37:68:e2:
bc:43:ce:69:90:32:a6:40:5e:f6:6a:2c:79:59:4a:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:56:86:93:28:31:80:51:3D:47:12:BF:83:F9:03:3B:86:1A:A2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X1NWhpMoMYBRPUcSv4P5AzuGGqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
185.255.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a8:b2:af:af:08:19:6c:9a:6d:47:62:38:9d:db:c4:3c:3c:
ed:c2:4f:62:73:1e:5a:7b:cc:b2:d3:26:2f:3b:e1:ac:dd:13:
6f:d5:49:da:b4:9a:3a:39:96:47:45:01:dc:83:90:85:90:68:
df:cb:a4:35:d6:3c:08:1c:4e:21:31:57:6d:f2:77:5d:e9:ef:
f3:8c:22:2f:8d:86:c6:f1:02:02:c0:0e:d3:e5:1a:13:bd:36:
bd:b2:af:5c:f3:8b:da:99:e6:20:d1:7d:d3:88:0a:5b:9a:ba:
d2:ac:80:60:4f:30:b9:4c:1c:4a:8d:90:5e:9e:b1:81:58:e6:
ab:63:15:97:9c:bf:7c:83:33:0a:3b:52:7c:b3:bd:34:6a:82:
84:34:b4:63:ca:2c:3d:e8:57:05:27:e0:7e:66:dd:a3:3a:4a:
45:46:dc:3f:9e:9c:4d:b6:41:94:cb:64:c8:0e:86:ff:c9:91:
5c:af:77:e4:70:23:45:b8:d1:b4:d9:9c:99:09:a0:ea:f6:56:
62:10:ce:35:d3:99:c3:b8:81:49:7f:07:26:e0:c0:64:74:d6:
73:55:8a:8f:56:b3:2b:dd:d9:21:a5:1b:a3:6a:a0:ae:2f:7d:
58:19:4e:76:b4:ec:ab:7e:c0:d7:c1:43:41:8c:b4:10:93:45:
e1:c0:7e:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuKYVRA1LaFrhJagW4kzchqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMTAxMTAxNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjUzNTY4NjkzMjgzMTgwNTEzZDQ3MTJiZjgzZjkwMzNiODYxYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK0ds3YH3l7pOFl+e/9kepO7mut1
vcJVivj3nvmBJgQS0ef5jNGqBIwxHf5SY3W3tLyOaQUlWaTUl9UX2hGfzyV+SSrj
T1XfmwxdoOgQHsHGoCIT5rwT5AkXb1PeahVaxEi1wAln2QOaBXw+jKvXW9i78Xjm
sL9kyxec2GusnNF2cl8Ydyhl7B/UNG58lEj2S0rjRWrOp0KZLHS85jnxhHcdBnj8
mVE1B+EtP0DsWk0iir+ucG8LdqlZC9t9Lw8fCu4YI3qALvXYM9JU6CyGDJFceEcM
L/4o+Ulyca4n+6xdKWb0hWixIojO39E3aOK8Q85pkDKmQF72aix5WUqGOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF9TVoaTKDGAUT1HEr+D+QM7hhqiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWDFOV2hwTW9NWUJSUFVjU3Y0UDVBenVHR3FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucKyAwQA
uf9+MA0GCSqGSIb3DQEBCwUAA4IBAQCNqLKvrwgZbJptR2I4ndvEPDztwk9icx5a
e8yy0yYvO+Gs3RNv1UnatJo6OZZHRQHcg5CFkGjfy6Q11jwIHE4hMVdt8ndd6e/z
jCIvjYbG8QICwA7T5RoTvTa9sq9c84vameYg0X3TiApbmrrSrIBgTzC5TBxKjZBe
nrGBWOarYxWXnL98gzMKO1J8s700aoKENLRjyiw96FcFJ+B+Zt2jOkpFRtw/npxN
tkGUy2TIDob/yZFcr3fkcCNFuNG02ZyZCaDq9lZiEM4105nDuIFJfwcm4MBkdNZz
VYqPVrMr3dkhpRujaqCuL31YGU52tOyrfsDXwUNBjLQQk0XhwH6+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org