Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YvH2iSjO1Y7S8xQpl-qT07Ci8cQ.roa
File: YvH2iSjO1Y7S8xQpl-qT07Ci8cQ.roa (raw, json)
Hash identifier: jBP6fqCb9VAh0uHVt3q+D7dujf85xjz/9x37m6Pqso0=
Subject key identifier: 62:F1:F6:89:28:CE:D5:8E:D2:F3:14:29:97:EA:93:D3:B0:A2:F1:C4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189BADB8F1B43B7FB7FA25BEFDF701E8BFB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YvH2iSjO1Y7S8xQpl-qT07Ci8cQ.roa
Signing time: Thu 03 Aug 2023 10:04:58 +0000
ROA not before: Thu 03 Aug 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197649
IP address blocks: 185.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:db:8f:1b:43:b7:fb:7f:a2:5b:ef:df:70:1e:8b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 3 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62f1f68928ced58ed2f3142997ea93d3b0a2f1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:72:ef:f3:90:3d:21:fe:31:4a:62:4e:14:
92:1e:14:8a:7e:fa:6d:cb:b1:92:03:98:db:d1:90:
b5:64:18:f2:6a:36:22:f1:43:d6:85:e1:81:a1:1c:
8b:7e:68:52:25:c6:ef:53:b8:26:3a:47:bd:cf:84:
30:09:3a:99:21:d8:a2:0f:c0:76:44:c3:3f:15:45:
f8:4d:75:0c:47:d9:8e:89:6e:d4:65:d3:38:af:ef:
c6:6e:ad:4e:42:08:cd:16:55:1d:83:a1:0b:f4:ea:
c5:fb:f3:5e:7d:47:e3:f2:3f:21:3b:58:4b:47:04:
ff:b5:9c:0a:4c:5f:91:99:1f:a0:37:af:91:70:ba:
ec:80:b9:af:98:bf:8f:d0:6d:c7:f2:32:c3:9b:24:
7a:90:1e:6f:ac:a9:8d:0d:1e:a6:fa:1b:23:44:4b:
63:09:0d:da:eb:9d:0f:68:24:8e:2f:35:04:06:fc:
f0:d7:a4:72:75:67:8d:2b:ce:61:f7:9e:63:4c:b3:
c9:1e:29:6b:49:5c:ab:33:ed:5f:8d:0f:3f:c0:1d:
14:eb:de:22:ff:e5:08:3a:34:5f:ae:b1:ac:e4:43:
a0:fb:9c:3e:b5:fc:1d:72:70:00:a2:f4:cf:d2:6a:
60:eb:0e:f8:14:e0:a6:d7:13:6b:26:3a:99:2b:d8:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:F6:89:28:CE:D5:8E:D2:F3:14:29:97:EA:93:D3:B0:A2:F1:C4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YvH2iSjO1Y7S8xQpl-qT07Ci8cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f5:b7:75:3c:f3:48:28:4f:93:4c:c0:07:da:8d:78:65:57:
a9:0c:7d:bd:36:88:21:82:25:c0:18:ce:18:7d:2c:2d:0a:38:
cd:38:cd:7b:9e:c6:13:da:41:80:b1:53:5a:c1:52:20:a6:c5:
bb:6f:c4:9c:5e:01:9c:9f:33:0a:0b:42:e1:5f:d4:b1:91:fb:
46:2c:f8:31:bc:fb:32:da:c9:62:71:18:97:5f:a2:f9:f5:17:
1d:15:eb:98:41:97:7b:c1:d6:15:7b:b0:b7:37:ce:ae:3b:a3:
63:f0:86:e4:e6:91:1d:e3:3a:ca:96:8b:7e:dc:bc:f3:19:2c:
51:31:31:c7:92:3f:4c:b8:a9:15:53:25:89:08:e5:f9:8b:f0:
86:3c:c1:49:7d:3e:2f:21:c9:5b:8a:aa:31:42:b8:57:81:5f:
85:ac:d0:04:6a:6c:fd:21:39:d2:35:5c:0a:48:ac:a6:71:e9:
60:64:2e:56:63:ca:fa:db:d6:e6:01:b5:b7:8a:94:13:2b:18:
8e:0d:be:47:31:ae:af:e4:db:e7:82:e5:98:9e:d5:a1:fa:cd:
36:fd:c2:06:07:ac:bd:96:d2:9b:49:e8:e5:88:fb:01:a6:d4:
06:6a:4b:b1:04:b0:6a:23:50:27:f1:d1:4e:11:1c:b3:32:19:
43:aa:1f:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm6248bQ7f7f6Jb799wHov7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwODAzMTAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmYxZjY4OTI4Y2VkNThlZDJmMzE0Mjk5N2VhOTNkM2IwYTJmMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xly7/OQPSH+MUpiThSSHhSKfvpt
y7GSA5jb0ZC1ZBjyajYi8UPWheGBoRyLfmhSJcbvU7gmOke9z4QwCTqZIdiiD8B2
RMM/FUX4TXUMR9mOiW7UZdM4r+/Gbq1OQgjNFlUdg6EL9OrF+/NefUfj8j8hO1hL
RwT/tZwKTF+RmR+gN6+RcLrsgLmvmL+P0G3H8jLDmyR6kB5vrKmNDR6m+hsjREtj
CQ3a650PaCSOLzUEBvzw16RydWeNK85h955jTLPJHilrSVyrM+1fjQ8/wB0U694i
/+UIOjRfrrGs5EOg+5w+tfwdcnAAovTP0mpg6w74FOCm1xNrJjqZK9gWxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLx9okoztWO0vMUKZfqk9OwovHEMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWXZIMmlTak8xWTdTOHhRcGwtcVQwN0NpOGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZlMA0G
CSqGSIb3DQEBCwUAA4IBAQCP9bd1PPNIKE+TTMAH2o14ZVepDH29NoghgiXAGM4Y
fSwtCjjNOM17nsYT2kGAsVNawVIgpsW7b8ScXgGcnzMKC0LhX9SxkftGLPgxvPsy
2slicRiXX6L59RcdFeuYQZd7wdYVe7C3N86uO6Nj8Ibk5pEd4zrKlot+3LzzGSxR
MTHHkj9MuKkVUyWJCOX5i/CGPMFJfT4vIclbiqoxQrhXgV+FrNAEamz9ITnSNVwK
SKymcelgZC5WY8r629bmAbW3ipQTKxiODb5HMa6v5NvnguWYntWh+s02/cIGB6y9
ltKbSejliPsBptQGakuxBLBqI1An8dFOERyzMhlDqh9D
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org