Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f8cka2h-cjfZa5JcnA54TULzbD4.roa
File: f8cka2h-cjfZa5JcnA54TULzbD4.roa (raw, json)
Hash identifier: 8kxjYs9Y9o7EEwmL3FxeLWPdIMWhKQ0nzurSfIC0fM4=
Subject key identifier: 7F:C7:24:6B:68:7E:72:37:D9:6B:92:5C:9C:0E:78:4D:42:F3:6C:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DE22197AC3B7864E154FA71908A07483C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f8cka2h-cjfZa5JcnA54TULzbD4.roa
Signing time: Sun 25 Feb 2024 21:17:48 +0000
ROA not before: Sun 25 Feb 2024 21:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.230.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:21:97:ac:3b:78:64:e1:54:fa:71:90:8a:07:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 25 21:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fc7246b687e7237d96b925c9c0e784d42f36c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:b7:26:a0:db:2f:7c:0c:0b:f8:05:75:ea:
be:85:e6:ed:78:ab:d8:14:4b:84:ba:1e:68:e5:65:
4c:72:26:e9:81:fe:eb:b7:9d:49:4d:a8:40:ab:0f:
da:25:9b:11:ef:24:21:d5:d5:88:ce:bd:90:5c:3d:
42:bc:14:22:a7:41:36:09:28:ae:4c:0e:8e:0b:32:
63:17:49:e5:15:bd:87:0b:4e:8c:03:93:c8:3d:34:
6f:2c:7a:d7:d7:1c:f7:3d:48:7a:aa:3b:3b:4c:2a:
54:d1:be:39:8c:b9:45:5d:bd:49:0d:b9:fc:28:e3:
4f:f1:93:c6:ff:8d:49:23:f1:a3:3c:0b:10:5b:cc:
f8:2d:b8:f6:bd:86:12:31:9a:25:7a:bf:f6:00:6e:
24:40:bf:88:d8:6f:db:86:f2:5b:1d:88:c2:7e:06:
77:18:d2:71:21:b5:99:1e:29:fe:d4:a9:94:fc:7d:
4b:85:5a:82:e5:cb:9a:85:87:f7:76:b8:ea:39:45:
d2:4e:18:5c:04:76:f0:8e:3a:9b:4f:a5:c6:c3:10:
15:f4:79:e5:8b:9a:2d:c0:4a:36:18:7a:d0:03:ee:
b4:06:37:79:d1:ea:ac:43:16:01:b0:d0:17:a3:0f:
8d:db:50:fc:bf:c1:2e:63:ed:b9:41:bb:53:3b:6e:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:24:6B:68:7E:72:37:D9:6B:92:5C:9C:0E:78:4D:42:F3:6C:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f8cka2h-cjfZa5JcnA54TULzbD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:83:00:9d:21:d0:36:02:95:ba:89:0f:0e:10:09:a3:23:ec:
04:59:7a:35:b4:2a:cc:93:6a:38:9d:d8:3f:44:88:09:07:22:
91:5e:08:57:0b:e6:90:34:ec:e0:01:53:ff:a2:93:42:59:c3:
73:6c:5f:ac:1c:37:3c:cf:f6:f1:08:9c:f5:66:19:d7:59:58:
ee:1b:b8:ae:c9:ae:8c:64:2f:ae:dc:64:11:19:71:22:ee:6f:
0a:fc:c1:de:66:2a:d4:a2:a2:f2:c0:17:06:7b:bd:86:71:27:
c8:b2:db:1b:31:c8:1e:5e:5b:86:0b:9a:55:92:f9:43:88:a8:
3e:0d:01:8f:cc:d0:78:5d:6c:7c:0c:a0:9f:e5:a0:ea:a4:83:
8d:aa:4f:f1:7d:f0:9a:44:b6:e0:62:4b:09:d3:93:c0:df:ef:
65:b1:bb:d0:ed:e3:8c:8c:6b:72:1f:96:c6:a5:03:a6:7e:88:
d9:98:22:8e:87:f9:7d:83:30:6c:54:4d:3a:4a:89:9c:73:c1:
ae:31:e1:2e:e0:9f:e4:4f:4f:b6:72:04:7a:b1:2c:21:d5:d2:
34:c9:bf:31:d9:7a:c8:c1:de:4a:2c:c4:32:48:82:37:a7:92:
2e:b4:38:e6:08:a0:3c:c4:4f:be:dd:21:94:f6:86:72:48:6d:
8a:aa:4a:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3iIZesO3hk4VT6cZCKB0g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMjI1MjExNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmM3MjQ2YjY4N2U3MjM3ZDk2YjkyNWM5YzBlNzg0ZDQyZjM2YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEe3JqDbL3wMC/gFdeq+hebteKvY
FEuEuh5o5WVMcibpgf7rt51JTahAqw/aJZsR7yQh1dWIzr2QXD1CvBQip0E2CSiu
TA6OCzJjF0nlFb2HC06MA5PIPTRvLHrX1xz3PUh6qjs7TCpU0b45jLlFXb1JDbn8
KONP8ZPG/41JI/GjPAsQW8z4Lbj2vYYSMZoler/2AG4kQL+I2G/bhvJbHYjCfgZ3
GNJxIbWZHin+1KmU/H1LhVqC5cuahYf3drjqOUXSThhcBHbwjjqbT6XGwxAV9Hnl
i5otwEo2GHrQA+60Bjd50eqsQxYBsNAXow+N21D8v8EuY+25QbtTO27bOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/HJGtofnI32WuSXJwOeE1C82w+MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZjhja2EyaC1jamZaYTVKY25BNTRUVUx6YkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueZBMA0G
CSqGSIb3DQEBCwUAA4IBAQC7gwCdIdA2ApW6iQ8OEAmjI+wEWXo1tCrMk2o4ndg/
RIgJByKRXghXC+aQNOzgAVP/opNCWcNzbF+sHDc8z/bxCJz1ZhnXWVjuG7iuya6M
ZC+u3GQRGXEi7m8K/MHeZirUoqLywBcGe72GcSfIstsbMcgeXluGC5pVkvlDiKg+
DQGPzNB4XWx8DKCf5aDqpIONqk/xffCaRLbgYksJ05PA3+9lsbvQ7eOMjGtyH5bG
pQOmfojZmCKOh/l9gzBsVE06Somcc8GuMeEu4J/kT0+2cgR6sSwh1dI0yb8x2XrI
wd5KLMQySII3p5IutDjmCKA8xE++3SGU9oZySG2Kqkrf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org