Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8LU-Ol-mipI3TuvxntMBtXakJE.roa
File: n8LU-Ol-mipI3TuvxntMBtXakJE.roa (raw, json)
Hash identifier: vTh+iUIvL8XZkTcvmMLUasnP/uTuxleb4sGILJOuhEE=
Subject key identifier: 9F:C2:D4:F8:E9:7E:9A:2A:48:DD:3B:AF:C6:7B:4C:06:D5:DA:90:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018586BC8E1925EC66751B46A51AC5888232
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8LU-Ol-mipI3TuvxntMBtXakJE.roa
Signing time: Fri 06 Jan 2023 10:59:42 +0000
ROA not before: Fri 06 Jan 2023 10:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.58.145.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 10:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:bc:8e:19:25:ec:66:75:1b:46:a5:1a:c5:88:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 6 10:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc2d4f8e97e9a2a48dd3bafc67b4c06d5da9091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:b4:34:1b:ee:4f:0a:7f:ab:e4:81:02:ab:
2e:1a:9d:fb:1c:3e:2e:43:cd:fc:0a:8a:4c:68:6b:
87:59:e6:70:c2:23:6a:4b:e6:42:62:7a:b7:b8:73:
ba:5b:e1:81:5c:e6:bc:d6:2f:75:ad:c9:05:b7:06:
45:da:c1:e9:f9:a4:18:9e:e5:f2:56:e3:54:a8:d0:
a7:eb:00:88:37:72:07:6c:03:da:7d:d7:e0:6a:f4:
3a:b2:88:ad:2d:db:de:7e:8f:a7:64:6c:01:50:2c:
90:36:c0:27:01:da:ef:2b:56:66:48:ea:9d:e7:ba:
e4:7f:18:5d:95:47:39:b5:aa:a7:11:2f:be:6b:f3:
8e:4d:a7:57:bb:cf:d5:5b:15:10:2e:f4:ca:1f:57:
3f:0a:a1:07:e5:39:89:51:70:b2:f5:ec:83:9e:f0:
2a:31:b7:3a:34:a0:a1:80:9f:a3:18:02:c4:58:a4:
cc:ba:11:5c:59:bf:ef:e2:ec:d4:53:6e:13:ff:d4:
cd:05:8f:de:9c:da:da:34:07:4e:11:b3:ca:75:98:
f4:62:5f:75:a3:a9:c5:41:25:d8:10:d3:1f:cb:e5:
7f:b6:62:40:f3:59:12:e3:54:bc:e1:53:42:d0:13:
9b:92:60:cf:40:01:63:66:d4:7f:70:0d:29:10:c4:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:D4:F8:E9:7E:9A:2A:48:DD:3B:AF:C6:7B:4C:06:D5:DA:90:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8LU-Ol-mipI3TuvxntMBtXakJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.204.0/24
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5e:08:9d:b0:7d:35:99:61:fd:9d:2a:8c:1d:eb:ec:f2:79:
51:e1:56:90:6b:4f:f1:02:b1:c9:6f:cf:0e:78:48:a8:f2:f2:
1c:51:87:36:30:90:46:90:77:df:ec:50:17:11:43:3e:82:f2:
bd:ec:e3:32:93:3f:22:2f:70:ba:12:7c:11:60:c4:aa:7a:d0:
b2:20:a5:52:df:ef:be:47:e8:ab:d6:5f:e9:82:51:88:af:19:
05:03:3e:14:3e:94:13:10:2d:65:a0:e6:72:4d:ed:71:d6:27:
89:e3:31:1a:6f:fa:35:2c:6f:16:7c:7d:a5:09:2a:fe:47:30:
8d:ce:be:47:49:83:4c:7e:88:b9:80:ee:83:6f:a6:01:65:74:
e4:47:8a:39:c5:13:b6:a4:a2:bc:09:a6:3d:84:18:54:1c:90:
34:38:62:a1:2d:b9:8c:d4:19:e0:d1:59:63:eb:b2:b5:4f:10:
2a:3f:9a:6c:29:65:cb:36:fe:ae:e5:a7:6a:c2:f1:ae:4e:c2:
5a:19:07:0c:67:da:0c:70:39:99:08:13:9c:33:f9:55:99:13:
db:e1:09:dc:fc:34:4b:90:fc:ff:cb:e5:93:9c:47:83:1a:0e:
65:db:6d:b5:82:0a:3e:f9:05:ee:b9:d1:59:06:51:96:08:5f:
91:19:54:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWGvI4ZJexmdRtGpRrFiIIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTA2MTA1OTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMyZDRmOGU5N2U5YTJhNDhkZDNiYWZjNjdiNGMwNmQ1ZGE5MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE+0NBvuTwp/q+SBAqsuGp37HD4u
Q838CopMaGuHWeZwwiNqS+ZCYnq3uHO6W+GBXOa81i91rckFtwZF2sHp+aQYnuXy
VuNUqNCn6wCIN3IHbAPafdfgavQ6soitLdvefo+nZGwBUCyQNsAnAdrvK1ZmSOqd
57rkfxhdlUc5taqnES++a/OOTadXu8/VWxUQLvTKH1c/CqEH5TmJUXCy9eyDnvAq
Mbc6NKChgJ+jGALEWKTMuhFcWb/v4uzUU24T/9TNBY/enNraNAdOEbPKdZj0Yl91
o6nFQSXYENMfy+V/tmJA81kS41S84VNC0BObkmDPQAFjZtR/cA0pEMSn8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ/C1PjpfpoqSN07r8Z7TAbV2pCRMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvbjhMVS1PbC1taXBJM1R1dnhudE1CdFhha0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSTMAwQA
wTqRMA0GCSqGSIb3DQEBCwUAA4IBAQAZXgidsH01mWH9nSqMHevs8nlR4VaQa0/x
ArHJb88OeEio8vIcUYc2MJBGkHff7FAXEUM+gvK97OMykz8iL3C6EnwRYMSqetCy
IKVS3+++R+ir1l/pglGIrxkFAz4UPpQTEC1loOZyTe1x1ieJ4zEab/o1LG8WfH2l
CSr+RzCNzr5HSYNMfoi5gO6Db6YBZXTkR4o5xRO2pKK8CaY9hBhUHJA0OGKhLbmM
1Bng0Vlj67K1TxAqP5psKWXLNv6u5adqwvGuTsJaGQcMZ9oMcDmZCBOcM/lVmRPb
4Qnc/DRLkPz/y+WTnEeDGg5l2221ggo++QXuudFZBlGWCF+RGVT1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org