Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rVgYAYPqS-MfCh2dykNAB8QVMRI.roa
File: rVgYAYPqS-MfCh2dykNAB8QVMRI.roa (raw, json)
Hash identifier: tBvAXK/1xAa7JHGEtNa6bepIC9IGACyhPjxI4PE+x0Y=
Subject key identifier: AD:58:18:01:83:EA:4B:E3:1F:0A:1D:9D:CA:43:40:07:C4:15:31:12
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01877B613993110C2DD492C5A34B2EAE5E7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rVgYAYPqS-MfCh2dykNAB8QVMRI.roa
Signing time: Thu 13 Apr 2023 16:09:41 +0000
ROA not before: Thu 13 Apr 2023 16:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 185.218.22.0/24 maxlen: 24
185.194.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:61:39:93:11:0c:2d:d4:92:c5:a3:4b:2e:ae:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 13 16:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad58180183ea4be31f0a1d9dca434007c4153112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:cb:4a:f4:45:62:5f:20:8d:df:b9:6b:86:
e4:f7:84:60:30:92:1d:79:b4:93:36:97:88:66:c9:
7c:c4:d9:d1:d4:cd:27:9e:8b:73:00:1e:e9:84:7d:
cf:9e:7a:89:4b:4b:cf:74:5b:b1:8c:28:15:f8:ab:
b6:59:8c:a3:5d:46:a8:a1:93:0d:98:bf:13:a6:8f:
3b:0e:98:09:b2:00:27:83:ff:03:d3:49:66:76:92:
a0:00:38:af:6f:6c:0e:20:31:4d:c7:1f:07:4e:ef:
fb:f7:c9:95:12:b5:06:6e:18:4e:e4:12:af:a4:27:
b0:3a:d9:c8:48:00:15:fc:c9:f5:1d:39:e5:80:5f:
50:50:48:9f:66:97:52:de:ce:f3:2d:84:b2:82:ff:
dc:85:d8:1c:2e:d8:bb:05:2c:a7:86:60:d4:29:e4:
c2:cf:85:56:a0:c9:73:58:39:6d:ab:0d:a7:fe:45:
08:02:0b:a7:cb:c7:91:e7:c5:6f:37:b2:90:47:8e:
7d:38:1b:a6:48:66:73:cd:1c:17:38:b5:cc:75:22:
db:bb:8b:ae:ce:b8:14:a2:1a:d9:36:a0:42:81:0a:
af:e3:f6:3b:3a:12:9b:9c:d0:50:52:a6:b0:14:7f:
37:8d:b5:d3:65:a8:dc:8c:95:7d:22:a1:54:eb:91:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:18:01:83:EA:4B:E3:1F:0A:1D:9D:CA:43:40:07:C4:15:31:12
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rVgYAYPqS-MfCh2dykNAB8QVMRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
185.218.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:12:ba:6b:0c:b4:8b:f2:54:e1:6d:41:e6:59:8a:79:80:da:
56:5f:5a:ea:a3:4e:34:46:01:bc:8c:ae:d7:00:33:e8:c2:89:
36:26:d2:22:80:ad:ac:c7:0d:e4:8c:16:8d:fa:34:a2:52:36:
3a:bf:38:9c:65:f0:a4:f4:5f:75:9a:99:a8:88:ae:42:24:c5:
3d:9f:6f:58:f4:d2:cb:bc:9e:df:5b:34:8c:69:07:f7:c2:1e:
f3:1d:29:2d:32:f8:b2:4c:5f:4c:0b:36:a3:2d:d6:59:63:e7:
0b:a0:b1:b5:31:a7:81:bb:e5:62:52:73:98:0a:9e:bf:26:48:
82:02:95:07:11:38:58:47:92:f9:c0:0f:8a:89:f1:51:b9:6e:
a4:1b:e6:b8:98:5c:a8:ce:83:b4:87:2a:ee:e4:35:9e:f8:a0:
97:0f:97:de:ce:e0:52:83:20:f3:43:31:54:a0:e7:e8:bb:c4:
15:1e:25:8e:b5:0e:b9:74:0b:13:47:26:7d:9b:8e:1d:0c:e5:
6d:ce:ad:5c:c2:fb:2d:d8:df:7b:31:28:80:49:6c:19:32:00:
43:59:fd:24:16:27:2c:4e:94:4e:1e:6e:9e:0f:38:66:fa:90:
d0:e4:01:eb:96:67:04:1a:38:b1:11:56:df:c1:f2:3a:35:d1:
f9:2f:35:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd7YTmTEQwt1JLFo0surl5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDEzMTYwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU4MTgwMTgzZWE0YmUzMWYwYTFkOWRjYTQzNDAwN2M0MTUzMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vLLSvRFYl8gjd+5a4bk94RgMJId
ebSTNpeIZsl8xNnR1M0nnotzAB7phH3PnnqJS0vPdFuxjCgV+Ku2WYyjXUaooZMN
mL8Tpo87DpgJsgAng/8D00lmdpKgADivb2wOIDFNxx8HTu/798mVErUGbhhO5BKv
pCewOtnISAAV/Mn1HTnlgF9QUEifZpdS3s7zLYSygv/chdgcLti7BSynhmDUKeTC
z4VWoMlzWDltqw2n/kUIAguny8eR58VvN7KQR459OBumSGZzzRwXOLXMdSLbu4uu
zrgUohrZNqBCgQqv4/Y7OhKbnNBQUqawFH83jbXTZajcjJV9IqFU65HvEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK1YGAGD6kvjHwodncpDQAfEFTESMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvclZnWUFZUHFTLU1mQ2gyZHlrTkFCOFFWTVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucKzAwQA
udoWMA0GCSqGSIb3DQEBCwUAA4IBAQA/ErprDLSL8lThbUHmWYp5gNpWX1rqo040
RgG8jK7XADPowok2JtIigK2sxw3kjBaN+jSiUjY6vzicZfCk9F91mpmoiK5CJMU9
n29Y9NLLvJ7fWzSMaQf3wh7zHSktMviyTF9MCzajLdZZY+cLoLG1MaeBu+ViUnOY
Cp6/JkiCApUHEThYR5L5wA+KifFRuW6kG+a4mFyozoO0hyru5DWe+KCXD5fezuBS
gyDzQzFUoOfou8QVHiWOtQ65dAsTRyZ9m44dDOVtzq1cwvst2N97MSiASWwZMgBD
Wf0kFicsTpROHm6eDzhm+pDQ5AHrlmcEGjixEVbfwfI6NdH5LzU6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org