Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/raUryhMIIFHX3D6S2tnK8zVFdr4.roa
File: raUryhMIIFHX3D6S2tnK8zVFdr4.roa (raw, json)
Hash identifier: B6YoWlDbjM47qAlC+GpPNcUyUOZ72LMPW6QqAjlwkrc=
Subject key identifier: AD:A5:2B:CA:13:08:20:51:D7:DC:3E:92:DA:D9:CA:F3:35:45:76:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188FC23605C28B08C1CB5A118B0728989FC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/raUryhMIIFHX3D6S2tnK8zVFdr4.roa
Signing time: Tue 27 Jun 2023 09:15:56 +0000
ROA not before: Tue 27 Jun 2023 09:15:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 185.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 17:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:23:60:5c:28:b0:8c:1c:b5:a1:18:b0:72:89:89:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 27 09:15:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ada52bca13082051d7dc3e92dad9caf3354576be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:41:a0:bf:e6:52:4d:9c:f2:10:fa:82:40:
f9:89:7f:da:57:04:a2:9b:1d:91:66:20:3b:d6:f2:
e6:47:a2:06:0e:a6:f1:15:80:ba:40:93:67:5d:db:
e8:69:32:1f:71:7a:fa:93:22:b0:62:9d:cf:98:2e:
b6:9d:15:42:f2:33:c0:e5:17:ae:47:99:18:8d:25:
72:54:37:dd:75:b3:20:7f:95:6a:f4:95:f6:46:ed:
a2:e7:16:ac:98:38:f9:aa:65:42:b2:94:85:db:5b:
8f:f1:43:df:e5:64:bf:9c:a4:4d:d4:d5:c7:3c:b9:
27:5f:b0:80:f8:96:35:bf:da:25:f4:b6:b6:23:7c:
fe:01:40:57:c6:f3:93:24:9e:e9:4f:ff:b4:3b:16:
83:2f:9e:f5:63:dd:5e:6d:d4:01:03:80:b8:f1:ca:
0f:7e:7e:e8:23:10:e2:10:15:6a:ef:13:a8:07:3d:
a6:ed:68:7e:f8:ae:32:fe:e0:0b:3b:d2:26:01:cd:
e4:ee:9c:71:88:f8:fd:f2:b1:48:92:3b:86:39:d6:
c3:55:e7:5a:29:20:76:53:cd:fd:12:b8:1d:c0:26:
c3:00:33:ce:55:c9:50:fd:d1:97:db:8b:22:d1:a7:
e8:09:8d:2c:35:e4:b5:9a:b4:3b:d3:87:5b:03:d7:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:2B:CA:13:08:20:51:D7:DC:3E:92:DA:D9:CA:F3:35:45:76:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/raUryhMIIFHX3D6S2tnK8zVFdr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:08:22:27:cf:45:1c:78:72:8f:9b:92:49:03:4c:38:de:5f:
ae:03:e9:3d:ad:6e:f8:f2:63:02:2b:53:15:e9:be:01:e6:15:
4d:07:83:99:8d:72:76:fb:13:ad:d3:0a:72:59:a4:49:71:56:
49:27:d6:a3:bd:64:8f:08:72:13:e3:21:44:4b:b8:95:47:79:
3b:89:e3:70:58:58:c8:1a:7e:7d:04:96:17:68:29:49:d9:50:
72:ad:3c:ad:af:96:1c:25:cd:a7:b5:9b:a4:29:ad:d5:c0:b4:
34:5a:92:26:60:ec:02:68:2b:57:40:54:af:bc:1a:92:e2:57:
b2:09:c7:53:6e:95:59:25:9e:d6:78:74:fa:7f:32:5b:e1:14:
bc:cb:a9:2f:2b:6e:9a:c6:3e:ce:d1:18:36:27:ee:6a:29:74:
b0:fe:c0:11:01:78:a3:6f:53:d1:32:ef:51:38:8c:23:47:58:
ee:02:0c:17:c1:72:6f:37:f6:ec:7b:ab:48:e6:25:7d:b8:79:
d8:5f:bb:66:21:9f:7a:63:33:82:e0:37:e6:d2:80:a9:f3:f6:
51:7d:5d:9d:a3:6c:a8:3f:ea:35:a5:f9:09:93:98:47:f8:3b:
dd:32:f6:28:73:b4:33:94:ad:b7:51:f4:c5:7f:fc:95:f0:6f:
5a:26:10:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj8I2BcKLCMHLWhGLByiYn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNjI3MDkxNTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGE1MmJjYTEzMDgyMDUxZDdkYzNlOTJkYWQ5Y2FmMzM1NDU3NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ZBoL/mUk2c8hD6gkD5iX/aVwSi
mx2RZiA71vLmR6IGDqbxFYC6QJNnXdvoaTIfcXr6kyKwYp3PmC62nRVC8jPA5Reu
R5kYjSVyVDfddbMgf5Vq9JX2Ru2i5xasmDj5qmVCspSF21uP8UPf5WS/nKRN1NXH
PLknX7CA+JY1v9ol9La2I3z+AUBXxvOTJJ7pT/+0OxaDL571Y91ebdQBA4C48coP
fn7oIxDiEBVq7xOoBz2m7Wh++K4y/uALO9ImAc3k7pxxiPj98rFIkjuGOdbDVeda
KSB2U839ErgdwCbDADPOVclQ/dGX24si0afoCY0sNeS1mrQ704dbA9fAqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2lK8oTCCBR19w+ktrZyvM1RXa+MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcmFVcnloTUlJRkhYM0Q2UzJ0bks4elZGZHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZlMA0G
CSqGSIb3DQEBCwUAA4IBAQC1CCInz0UceHKPm5JJA0w43l+uA+k9rW748mMCK1MV
6b4B5hVNB4OZjXJ2+xOt0wpyWaRJcVZJJ9ajvWSPCHIT4yFES7iVR3k7ieNwWFjI
Gn59BJYXaClJ2VByrTytr5YcJc2ntZukKa3VwLQ0WpImYOwCaCtXQFSvvBqS4ley
CcdTbpVZJZ7WeHT6fzJb4RS8y6kvK26axj7O0Rg2J+5qKXSw/sARAXijb1PRMu9R
OIwjR1juAgwXwXJvN/bse6tI5iV9uHnYX7tmIZ96YzOC4Dfm0oCp8/ZRfV2do2yo
P+o1pfkJk5hH+DvdMvYoc7QzlK23UfTFf/yV8G9aJhCT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org