Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jORbzJZSZ0iszHTxjo5TCPfBI0Y.roa
File: jORbzJZSZ0iszHTxjo5TCPfBI0Y.roa (raw, json)
Hash identifier: HKGVG9cpqvusYFpCQvEWqpyPYVsCZH/vjI53rI51h68=
Subject key identifier: 8C:E4:5B:CC:96:52:67:48:AC:CC:74:F1:8E:8E:53:08:F7:C1:23:46
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64ECE2D66B181E473DC8C1923271B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jORbzJZSZ0iszHTxjo5TCPfBI0Y.roa
Signing time: Mon 02 Jan 2023 09:00:51 +0000
ROA not before: Mon 02 Jan 2023 09:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 271537
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:4e:ce:2d:66:b1:81:e4:73:dc:8c:19:23:27:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ce45bcc96526748accc74f18e8e5308f7c12346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:19:85:b2:1d:60:0e:e4:fd:64:9b:86:46:
ba:77:dc:51:9e:c9:d9:72:f5:4b:7e:c5:67:61:e2:
c4:77:d8:95:ed:cb:76:fa:6b:f3:c6:53:62:aa:d2:
28:6a:3c:c7:67:87:d1:5e:05:8f:7e:59:76:39:c4:
f6:50:ea:9c:c4:e7:b9:35:33:31:e5:88:84:7f:0a:
cc:c6:ad:af:64:ca:b1:ed:27:dd:b4:92:dc:8c:a5:
25:01:42:f8:23:a2:fa:cc:d8:6f:22:4c:c3:55:5d:
14:d0:03:9c:c7:7b:2f:c1:14:a2:0c:6d:07:84:37:
48:c8:be:46:9d:5a:53:f0:3f:94:07:71:81:1f:68:
9b:16:73:ae:ea:cc:f9:2e:6e:f0:a4:50:55:26:4f:
e1:8a:e1:80:48:cb:0c:02:55:2c:f2:dd:94:2f:53:
84:1c:75:b2:27:79:a5:f1:6e:66:71:67:ae:e7:9b:
3e:ac:7e:0a:20:9e:25:87:48:c6:b0:0a:4d:1b:dd:
14:ca:8c:fd:87:cd:6d:03:ff:b8:b1:4d:f7:a7:73:
71:97:8f:4f:ef:31:00:85:35:1f:0a:aa:99:65:2a:
e3:aa:6d:67:c7:a9:99:5a:95:18:c0:f0:16:b4:63:
18:55:c2:e1:47:4d:86:54:ce:c9:d8:c2:99:b5:c6:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:5B:CC:96:52:67:48:AC:CC:74:F1:8E:8E:53:08:F7:C1:23:46
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jORbzJZSZ0iszHTxjo5TCPfBI0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
92:77:ef:be:48:ca:38:80:ba:75:ec:dd:3b:51:37:7f:60:3c:
13:c5:2c:5d:9f:a1:9c:48:e5:a0:e9:0f:39:90:17:bf:76:3c:
f0:08:4c:35:3b:7a:ad:2d:03:7e:d2:e7:93:05:48:7d:98:84:
42:3f:00:5d:b8:48:11:03:59:76:b9:a2:79:6a:5d:10:ac:7a:
74:3a:83:0a:40:67:69:31:6c:6e:9a:20:45:14:67:9a:be:1d:
30:10:1b:05:45:18:f8:d6:6e:da:58:f6:81:51:aa:bf:bd:17:
b4:01:ce:99:a0:ac:c1:bb:9e:54:25:33:2b:29:a5:cc:9b:f8:
51:78:e3:51:73:fe:97:9c:6f:d4:c5:c9:f7:d8:c7:42:48:62:
02:dd:c9:4a:68:e8:19:da:42:bd:b7:fd:62:05:f5:64:8d:fe:
50:0a:18:5c:4e:31:2c:c6:6d:9c:13:b9:66:23:f7:9b:36:79:
fd:70:ff:b9:fa:33:dd:fb:f4:98:af:71:b2:8c:ab:e1:05:85:
c7:e8:3d:bc:b4:6d:1d:41:88:06:a5:80:e6:72:e2:4b:4a:a3:
0a:19:06:7b:30:0b:74:91:89:8d:b6:79:46:1b:06:25:73:18:
bf:ff:3f:73:6c:7f:5b:04:18:a7:f4:d9:42:c2:6e:32:f1:b4:
c4:19:ca:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxtk7OLWaxgeRz3IwZIycbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2U0NWJjYzk2NTI2NzQ4YWNjYzc0ZjE4ZThlNTMwOGY3YzEyMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFsZhbIdYA7k/WSbhka6d9xRnsnZ
cvVLfsVnYeLEd9iV7ct2+mvzxlNiqtIoajzHZ4fRXgWPfll2OcT2UOqcxOe5NTMx
5YiEfwrMxq2vZMqx7SfdtJLcjKUlAUL4I6L6zNhvIkzDVV0U0AOcx3svwRSiDG0H
hDdIyL5GnVpT8D+UB3GBH2ibFnOu6sz5Lm7wpFBVJk/hiuGASMsMAlUs8t2UL1OE
HHWyJ3ml8W5mcWeu55s+rH4KIJ4lh0jGsApNG90Uyoz9h81tA/+4sU33p3Nxl49P
7zEAhTUfCqqZZSrjqm1nx6mZWpUYwPAWtGMYVcLhR02GVM7J2MKZtcbrewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzkW8yWUmdIrMx08Y6OUwj3wSNGMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvak9SYnpKWlNaMGlzekhUeGpvNVRDUGZCSTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueY1MA0G
CSqGSIb3DQEBCwUAA4IBAQCSd+++SMo4gLp17N07UTd/YDwTxSxdn6GcSOWg6Q85
kBe/djzwCEw1O3qtLQN+0ueTBUh9mIRCPwBduEgRA1l2uaJ5al0QrHp0OoMKQGdp
MWxumiBFFGeavh0wEBsFRRj41m7aWPaBUaq/vRe0Ac6ZoKzBu55UJTMrKaXMm/hR
eONRc/6XnG/Uxcn32MdCSGIC3clKaOgZ2kK9t/1iBfVkjf5QChhcTjEsxm2cE7lm
I/ebNnn9cP+5+jPd+/SYr3GyjKvhBYXH6D28tG0dQYgGpYDmcuJLSqMKGQZ7MAt0
kYmNtnlGGwYlcxi//z9zbH9bBBin9NlCwm4y8bTEGcqe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org