Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e4p81B2i43Ji5oz83fdl1BCunWk.roa
File: e4p81B2i43Ji5oz83fdl1BCunWk.roa (raw, json)
Hash identifier: du2pNvSCk73hgS3eI7jhp5XC2N+5lzjcwYudLAb8lUo=
Subject key identifier: 7B:8A:7C:D4:1D:A2:E3:72:62:E6:8C:FC:DD:F7:65:D4:10:AE:9D:69
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01858247D0899AE4A255A3F04AA86B8C69CB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e4p81B2i43Ji5oz83fdl1BCunWk.roa
Signing time: Thu 05 Jan 2023 14:13:42 +0000
ROA not before: Thu 05 Jan 2023 14:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 185.234.23.0/24 maxlen: 24
185.214.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:47:d0:89:9a:e4:a2:55:a3:f0:4a:a8:6b:8c:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 5 14:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8a7cd41da2e37262e68cfcddf765d410ae9d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:00:29:cd:41:77:e9:14:c8:b8:57:8c:03:
09:45:76:45:74:53:ba:4e:f8:a8:85:2a:7d:34:28:
d5:05:f0:31:33:18:32:f9:77:ca:13:f0:a3:48:21:
fe:5b:ff:a3:f6:72:f7:ef:e4:79:c8:ef:88:e4:02:
85:57:85:4b:37:a3:96:8a:e6:ec:6c:cb:79:41:83:
57:cc:ac:ec:29:fe:39:f9:30:f3:7c:b1:d3:2b:21:
7a:94:19:2e:4e:69:df:1e:ad:1e:b1:16:27:a2:d1:
bc:0e:88:5f:ac:ee:71:18:05:42:9e:ac:0a:5a:c6:
54:86:b3:8d:41:69:cc:24:b1:a4:80:55:8c:72:ab:
67:8c:a0:ca:86:27:a8:93:c6:fb:f7:a8:ea:e4:18:
96:b8:b3:a0:7f:e1:a3:8a:97:2f:37:12:09:f9:3c:
1d:a7:08:08:4d:3e:b0:01:ba:ed:fd:4a:b5:4e:3d:
3c:da:40:05:e6:a8:a2:b5:fd:73:fa:66:8d:85:4a:
c5:27:34:4a:ce:ba:33:a9:29:bf:48:4f:0c:18:c0:
11:ca:63:e0:e5:e5:ab:76:68:fa:64:86:7a:24:83:
5e:c2:2f:24:72:5b:31:c5:e8:08:63:d0:5c:ef:bc:
f3:97:d7:6f:ca:1d:d0:5a:34:8b:a9:b4:01:89:a8:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:7C:D4:1D:A2:E3:72:62:E6:8C:FC:DD:F7:65:D4:10:AE:9D:69
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e4p81B2i43Ji5oz83fdl1BCunWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.109.0/24
185.234.23.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b4:14:2d:eb:d6:d8:69:66:0c:ce:4d:9e:f6:55:2f:c1:44:
16:c9:34:3d:6a:4f:a6:9a:e5:12:e4:84:fd:3c:e6:b3:b9:c9:
21:b9:6a:7f:8b:ed:8f:34:a5:59:6b:18:e1:c5:bd:25:44:1b:
10:6d:c8:db:dd:d9:bc:0a:56:cf:4c:4e:78:a8:a0:40:5c:68:
17:95:89:21:d2:1c:b2:4a:47:a9:08:5d:ae:fe:9b:03:55:ae:
76:f0:9d:dd:99:a4:27:e3:71:a0:c3:7c:62:03:e0:9c:0e:9a:
86:05:9f:39:32:f1:d4:11:23:70:ee:6e:58:3d:c2:b2:1a:1b:
a9:87:bc:60:ea:17:29:ed:f1:7f:56:9a:46:eb:c1:26:df:b3:
34:44:e3:22:dd:ee:ed:58:c0:45:7f:1e:71:58:b4:42:95:3e:
50:0e:ff:ae:4e:2a:7f:cf:17:a9:03:a0:5e:eb:03:59:e4:25:
da:04:4c:f2:ab:b0:c0:7a:50:a1:1f:1a:a7:ed:54:a4:19:a3:
82:f4:29:11:b2:14:0d:ab:37:aa:1c:3d:c8:62:12:c2:9f:98:
24:4c:ca:df:7a:be:c1:a1:12:29:2a:5a:12:d4:49:59:ce:0c:
2c:44:c9:6b:2f:ed:d7:75:4d:d5:2f:8f:6f:c0:78:dc:e2:bc:
3e:80:c1:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWCR9CJmuSiVaPwSqhrjGnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTA1MTQxMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhhN2NkNDFkYTJlMzcyNjJlNjhjZmNkZGY3NjVkNDEwYWU5ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZIAKc1Bd+kUyLhXjAMJRXZFdFO6
TviohSp9NCjVBfAxMxgy+XfKE/CjSCH+W/+j9nL37+R5yO+I5AKFV4VLN6OWiubs
bMt5QYNXzKzsKf45+TDzfLHTKyF6lBkuTmnfHq0esRYnotG8DohfrO5xGAVCnqwK
WsZUhrONQWnMJLGkgFWMcqtnjKDKhieok8b796jq5BiWuLOgf+GjipcvNxIJ+Twd
pwgITT6wAbrt/Uq1Tj082kAF5qiitf1z+maNhUrFJzRKzrozqSm/SE8MGMARymPg
5eWrdmj6ZIZ6JINewi8kclsxxegIY9Bc77zzl9dvyh3QWjSLqbQBiajYewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHuKfNQdouNyYuaM/N33ZdQQrp1pMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZTRwODFCMmk0M0ppNW96ODNmZGwxQkN1bldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudZtAwQA
ueoXMA0GCSqGSIb3DQEBCwUAA4IBAQARtBQt69bYaWYMzk2e9lUvwUQWyTQ9ak+m
muUS5IT9POazuckhuWp/i+2PNKVZaxjhxb0lRBsQbcjb3dm8ClbPTE54qKBAXGgX
lYkh0hyySkepCF2u/psDVa528J3dmaQn43Ggw3xiA+CcDpqGBZ85MvHUESNw7m5Y
PcKyGhuph7xg6hcp7fF/VppG68Em37M0ROMi3e7tWMBFfx5xWLRClT5QDv+uTip/
zxepA6Be6wNZ5CXaBEzyq7DAelChHxqn7VSkGaOC9CkRshQNqzeqHD3IYhLCn5gk
TMrfer7BoRIpKloS1ElZzgwsRMlrL+3XdU3VL49vwHjc4rw+gMF8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org