Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yg3QGwW623PuzwYKrEEkoEzltPg.roa
File: Yg3QGwW623PuzwYKrEEkoEzltPg.roa (raw, json)
Hash identifier: 5BVfv315mE0XRFgux2n3t5qVlJ1irX87yQ4zcGio8Ig=
Subject key identifier: 62:0D:D0:1B:05:BA:DB:73:EE:CF:06:0A:AC:41:24:A0:4C:E5:B4:F8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027BC83C6D71BED17269670B496EFA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yg3QGwW623PuzwYKrEEkoEzltPg.roa
Signing time: Tue 02 Jan 2024 02:30:55 +0000
ROA not before: Tue 02 Jan 2024 02:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 185.220.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 10:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7b:c8:3c:6d:71:be:d1:72:69:67:0b:49:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=620dd01b05badb73eecf060aac4124a04ce5b4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:b3:21:4f:fc:07:e9:e8:4a:d2:e5:ba:e0:
8d:48:df:cc:e4:96:24:42:ad:14:6e:eb:73:b8:d0:
d5:27:75:e5:87:7a:21:d9:dc:02:e3:80:ba:f0:17:
d2:1d:39:fd:bf:eb:3a:56:c8:b2:7b:69:d7:a6:06:
95:cc:11:3c:8e:e6:c7:94:13:c9:7f:70:66:7e:64:
f0:c8:d2:2a:55:1b:b5:24:5c:01:b2:91:32:34:df:
af:04:28:8b:57:3a:6f:bc:93:41:b2:37:f6:a4:97:
18:f8:5a:e7:19:dc:01:42:80:98:e6:01:dd:21:51:
6b:c8:ec:17:eb:af:95:ce:70:c5:f4:a1:7c:4c:d6:
bf:78:ce:14:54:9b:b0:bd:a9:75:66:f8:f9:7d:bc:
9a:92:ef:82:ad:84:0a:bd:65:68:02:f5:60:4f:78:
00:2a:de:22:4f:1e:f8:88:94:e6:71:e1:fa:88:cc:
51:c8:32:ac:02:3c:89:a2:76:cb:33:95:24:fe:9d:
7e:90:0c:72:7a:8c:4c:b5:cd:ab:53:58:99:6a:f0:
34:02:02:7b:fe:02:22:fa:bd:6d:1d:cd:5c:58:9a:
7a:7a:53:ac:ff:72:49:fa:87:2c:4a:e0:6b:f7:19:
c4:ac:a7:4b:86:b4:cb:b7:b4:47:da:b1:c2:cc:10:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:D0:1B:05:BA:DB:73:EE:CF:06:0A:AC:41:24:A0:4C:E5:B4:F8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yg3QGwW623PuzwYKrEEkoEzltPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:4a:91:76:10:40:6e:08:98:9e:ec:11:0a:49:3d:91:c4:
73:ab:8f:58:4f:78:98:d8:9a:a6:3c:3f:80:8d:5c:68:7c:a5:
72:f7:c7:13:f0:7f:9f:d4:21:e4:5c:0c:10:d1:dc:89:3a:04:
c6:aa:e5:a4:cf:bf:7e:9a:e6:70:3a:e0:16:7d:dd:d0:36:17:
a9:69:58:ee:65:77:26:27:7b:5f:31:25:ea:e3:dc:c5:41:0f:
02:40:3f:c8:2c:2c:a3:c4:31:71:ce:74:13:9c:36:96:93:a5:
66:e7:c7:be:44:b2:d2:ac:b0:f3:fb:cd:3e:bc:63:cc:c7:3f:
24:4e:b5:50:e1:e5:07:60:00:f6:2e:65:9c:2a:9f:3f:86:fb:
17:cd:ad:4e:21:8e:31:89:7c:c7:ac:79:bb:bb:be:14:92:cb:
4e:b8:8e:53:69:ac:db:ed:d9:4f:18:67:f6:bd:a4:ee:e5:eb:
b3:f9:c9:64:ad:34:bc:4a:ed:8a:bb:5d:50:72:ff:5c:cf:41:
e8:d1:80:c5:b3:31:db:e8:18:c0:bb:46:6d:ab:c2:f7:2d:aa:
49:a2:fc:a2:37:ec:51:d4:53:b2:89:85:86:f0:10:97:e1:ad:
83:23:e1:04:d8:e3:06:a3:d2:80:53:f5:c8:65:4b:9e:69:c9:
a3:ee:10:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAnvIPG1xvtFyaWcLSW76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjBkZDAxYjA1YmFkYjczZWVjZjA2MGFhYzQxMjRhMDRjZTViNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk6zIU/8B+noStLluuCNSN/M5JYk
Qq0UbutzuNDVJ3Xlh3oh2dwC44C68BfSHTn9v+s6Vsiye2nXpgaVzBE8jubHlBPJ
f3BmfmTwyNIqVRu1JFwBspEyNN+vBCiLVzpvvJNBsjf2pJcY+FrnGdwBQoCY5gHd
IVFryOwX66+VznDF9KF8TNa/eM4UVJuwval1Zvj5fbyaku+CrYQKvWVoAvVgT3gA
Kt4iTx74iJTmceH6iMxRyDKsAjyJonbLM5Uk/p1+kAxyeoxMtc2rU1iZavA0AgJ7
/gIi+r1tHc1cWJp6elOs/3JJ+ocsSuBr9xnErKdLhrTLt7RH2rHCzBARowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIN0BsFuttz7s8GCqxBJKBM5bT4MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWWczUUd3VzYyM1B1endZS3JFRWtvRXpsdFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudz4MA0G
CSqGSIb3DQEBCwUAA4IBAQA2rEqRdhBAbgiYnuwRCkk9kcRzq49YT3iY2JqmPD+A
jVxofKVy98cT8H+f1CHkXAwQ0dyJOgTGquWkz79+muZwOuAWfd3QNhepaVjuZXcm
J3tfMSXq49zFQQ8CQD/ILCyjxDFxznQTnDaWk6Vm58e+RLLSrLDz+80+vGPMxz8k
TrVQ4eUHYAD2LmWcKp8/hvsXza1OIY4xiXzHrHm7u74UkstOuI5Taazb7dlPGGf2
vaTu5euz+clkrTS8Su2Ku11Qcv9cz0Ho0YDFszHb6BjAu0Ztq8L3LapJovyiN+xR
1FOyiYWG8BCX4a2DI+EE2OMGo9KAU/XIZUueacmj7hDy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org