Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X9PE5qcpiw89l0Km3du01Enl51U.roa
File: X9PE5qcpiw89l0Km3du01Enl51U.roa (raw, json)
Hash identifier: jZ8K7tPl89Y6kAst9pYA48V5WGk+NGbN7Yc42Ui65GA=
Subject key identifier: 5F:D3:C4:E6:A7:29:8B:0F:3D:97:42:A6:DD:DB:B4:D4:49:E5:E7:55
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B6492D3A59838AAF6887633938A226
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X9PE5qcpiw89l0Km3du01Enl51U.roa
Signing time: Mon 02 Jan 2023 09:00:49 +0000
ROA not before: Mon 02 Jan 2023 09:00:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 10:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:49:2d:3a:59:83:8a:af:68:87:63:39:38:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd3c4e6a7298b0f3d9742a6dddbb4d449e5e755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:02:b8:1f:ac:6c:ab:50:1c:31:ba:0e:87:
6b:ac:05:42:77:98:b7:bf:f9:5d:8e:84:5d:cc:a5:
03:ff:d3:53:b2:63:9b:03:57:b0:49:ea:4a:91:9e:
a0:4f:e2:73:94:fb:c5:36:23:a7:49:28:ec:d3:39:
05:11:fd:68:73:e4:cc:4c:b6:37:a3:c5:00:dc:9f:
12:48:78:42:63:0e:a7:e0:55:9d:c1:ae:54:4b:43:
d6:2d:35:cf:22:5d:03:07:d3:f8:29:a2:18:3f:80:
07:48:7a:33:17:68:f4:78:d7:38:d6:e8:4c:52:3d:
a1:1f:f6:31:a1:0c:07:53:55:c0:a3:2e:17:08:ef:
b5:92:22:54:02:c9:ac:56:0b:e1:04:26:0a:8f:95:
ba:09:d3:5a:4e:ed:09:4c:ef:34:ce:68:08:62:34:
b1:12:48:6f:f1:43:39:d8:8f:89:1f:fe:38:24:67:
c0:c1:9a:9a:f6:3f:3f:31:2b:e2:b3:68:4f:66:c8:
5a:0a:45:3a:54:8d:95:32:37:c8:3c:ef:ba:23:4c:
f2:21:63:c7:c3:c7:91:bb:fa:0a:61:5d:64:13:b2:
76:bb:80:ed:81:23:be:85:da:cc:60:66:20:a9:ac:
46:0b:0d:82:11:a0:db:82:52:59:bd:f3:d2:2d:51:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:C4:E6:A7:29:8B:0F:3D:97:42:A6:DD:DB:B4:D4:49:E5:E7:55
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X9PE5qcpiw89l0Km3du01Enl51U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
Signature Algorithm: sha256WithRSAEncryption
42:13:59:c5:bd:9a:9a:f5:1a:9a:43:cc:35:8e:30:74:fe:27:
45:b1:a6:1e:6a:1f:a2:7a:40:e1:7c:58:57:1f:4f:26:dc:c6:
4c:6b:88:cd:25:cd:c9:4b:b9:87:e5:34:55:39:db:9d:72:e0:
3b:98:c4:e3:a5:9a:fc:b4:67:00:76:f0:18:03:9a:8e:49:67:
4d:a3:db:93:1a:a5:97:f7:4e:22:b2:34:5b:4b:80:7d:d6:33:
c2:95:67:60:31:0a:07:53:83:ce:81:f8:ea:79:61:22:a1:67:
4e:76:50:bd:36:b1:44:4f:4a:be:6a:0b:70:7e:e8:b6:d0:40:
33:81:91:a1:3b:c4:39:44:a3:e2:21:f3:c5:f0:09:79:07:0c:
d1:53:56:4e:97:36:51:d3:aa:a9:2e:12:4e:5e:aa:fd:0b:45:
20:02:3f:8d:75:b9:e7:d1:3d:11:cc:e1:a8:a8:59:27:b1:d4:
e2:cb:23:3f:ec:25:c2:2d:04:b4:6e:75:b9:35:3e:bd:77:84:
48:87:70:78:14:e8:95:57:1a:65:1f:b9:0a:cc:f6:65:9b:c5:
0f:5d:64:ba:d0:ce:27:1c:07:41:e1:58:87:28:7e:bd:bb:1b:
28:d9:c6:e6:a5:d8:b6:d4:d8:ea:2f:f0:ac:fb:f1:23:ba:1e:
25:16:b7:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxtkktOlmDiq9oh2M5OKImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQzYzRlNmE3Mjk4YjBmM2Q5NzQyYTZkZGRiYjRkNDQ5ZTVlNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ICuB+sbKtQHDG6DodrrAVCd5i3
v/ldjoRdzKUD/9NTsmObA1ewSepKkZ6gT+JzlPvFNiOnSSjs0zkFEf1oc+TMTLY3
o8UA3J8SSHhCYw6n4FWdwa5US0PWLTXPIl0DB9P4KaIYP4AHSHozF2j0eNc41uhM
Uj2hH/YxoQwHU1XAoy4XCO+1kiJUAsmsVgvhBCYKj5W6CdNaTu0JTO80zmgIYjSx
Ekhv8UM52I+JH/44JGfAwZqa9j8/MSvis2hPZshaCkU6VI2VMjfIPO+6I0zyIWPH
w8eRu/oKYV1kE7J2u4DtgSO+hdrMYGYgqaxGCw2CEaDbglJZvfPSLVFBMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/TxOanKYsPPZdCpt3btNRJ5edVMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWDlQRTVxY3Bpdzg5bDBLbTNkdTAxRW5sNTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc74MA0G
CSqGSIb3DQEBCwUAA4IBAQBCE1nFvZqa9RqaQ8w1jjB0/idFsaYeah+iekDhfFhX
H08m3MZMa4jNJc3JS7mH5TRVOdudcuA7mMTjpZr8tGcAdvAYA5qOSWdNo9uTGqWX
904isjRbS4B91jPClWdgMQoHU4POgfjqeWEioWdOdlC9NrFET0q+agtwfui20EAz
gZGhO8Q5RKPiIfPF8Al5BwzRU1ZOlzZR06qpLhJOXqr9C0UgAj+Ndbnn0T0RzOGo
qFknsdTiyyM/7CXCLQS0bnW5NT69d4RIh3B4FOiVVxplH7kKzPZlm8UPXWS60M4n
HAdB4ViHKH69uxso2cbmpdi21NjqL/Cs+/Ejuh4lFrdz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org