Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/re1fbaFcpJGMb8MczMEHKsWT_Y8.roa
File: re1fbaFcpJGMb8MczMEHKsWT_Y8.roa (raw, json)
Hash identifier: 9MaZCCYmNP7DowVz7PXbe6V21+PQKQ/aw3QyPFH1mdI=
Subject key identifier: AD:ED:5F:6D:A1:5C:A4:91:8C:6F:C3:1C:CC:C1:07:2A:C5:93:FD:8F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A6F768BE9E1DA17A1445673D77C1040B0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/re1fbaFcpJGMb8MczMEHKsWT_Y8.roa
Signing time: Thu 07 Sep 2023 11:45:54 +0000
ROA not before: Thu 07 Sep 2023 11:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.230.52.0/24 maxlen: 24
185.218.23.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 15:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:76:8b:e9:e1:da:17:a1:44:56:73:d7:7c:10:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 7 11:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aded5f6da15ca4918c6fc31cccc1072ac593fd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:a2:db:76:1b:0c:3d:8b:8e:86:f2:58:db:
37:83:45:55:53:ea:c2:4e:9b:10:7b:88:f8:c7:cc:
27:a2:e1:c8:cf:fd:b4:1b:f4:0f:0f:bf:e1:39:3b:
14:98:84:1b:f3:4a:7c:2b:ef:a0:30:31:c4:5a:5b:
10:ab:ae:ed:6b:3c:7f:df:e2:81:6e:ea:5b:b6:2f:
e2:78:3e:a0:07:18:8d:87:f6:51:80:63:61:7b:cb:
17:0b:36:dd:8b:4d:da:e1:2e:46:e2:ff:a7:d5:fd:
0f:5b:73:4d:db:7a:0b:19:0c:0f:cf:35:47:df:f6:
a0:c2:6a:c2:bc:13:10:4f:b9:aa:70:5e:2d:61:a6:
11:14:bf:21:c9:df:b5:ac:c2:74:3d:a3:2a:f1:53:
99:3a:89:ca:fd:79:b6:a5:85:ba:31:0a:87:fd:ec:
8e:14:ff:09:76:4a:a6:48:0c:0d:e8:75:86:04:43:
11:38:5e:21:e1:99:be:c5:ea:07:f1:9d:28:56:dd:
2d:3a:33:dd:d4:52:e0:7c:7b:3e:e6:e5:fb:67:ca:
aa:cb:2a:3e:b9:f8:34:59:30:13:c5:89:a0:f9:38:
04:83:78:00:7d:eb:05:f8:9c:45:d7:5a:ba:4e:32:
eb:a9:a6:17:5e:d8:37:7c:89:c0:e2:ed:26:4f:09:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:5F:6D:A1:5C:A4:91:8C:6F:C3:1C:CC:C1:07:2A:C5:93:FD:8F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/re1fbaFcpJGMb8MczMEHKsWT_Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.23.0/24
185.223.79.0/24
185.230.52.0/24
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b0:ad:8e:62:47:74:e3:2a:40:64:be:f9:c7:2c:b4:07:b5:
bb:09:28:a9:af:c8:6e:4e:55:e9:1e:09:27:9f:e8:9e:6e:7a:
94:8b:dc:ac:bb:07:9c:3c:0b:58:da:5a:2b:7d:91:af:36:88:
4d:54:1c:6e:8b:59:9f:34:c5:4c:ac:e7:8a:83:19:fd:8c:42:
54:35:be:7a:3d:e3:0a:a1:37:12:af:81:6b:23:64:76:b3:b9:
3f:ad:f2:27:2c:67:b0:d6:dc:30:de:6d:56:c3:49:16:2b:68:
88:ae:61:cc:cd:aa:85:a8:51:ba:20:8b:f9:f1:6e:9d:97:64:
2f:60:d5:b4:cd:6a:dd:01:9f:5c:ca:08:f6:ac:9a:6c:32:7d:
88:2f:87:12:d7:01:5d:55:62:fb:66:3b:8e:17:9b:af:e1:65:
11:c2:57:27:aa:cb:e3:f9:6f:28:a7:f0:0a:ae:ac:b5:2f:56:
03:53:2e:1b:d0:bd:bf:46:ef:63:a9:16:44:0a:ac:2e:ee:61:
f5:e1:00:c5:2d:20:41:7a:84:1d:f8:2f:2f:02:76:1f:55:5c:
1f:77:86:4d:b2:83:3e:9a:a8:80:c8:8a:35:62:25:ad:b9:80:
56:48:8a:dd:3a:79:b6:19:9c:f3:f8:e9:c2:4c:ec:c9:70:c0:
76:64:47:a3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYpvdovp4doXoURWc9d8EECwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTA3MTE0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGVkNWY2ZGExNWNhNDkxOGM2ZmMzMWNjY2MxMDcyYWM1OTNmZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgei23YbDD2LjobyWNs3g0VVU+rC
TpsQe4j4x8wnouHIz/20G/QPD7/hOTsUmIQb80p8K++gMDHEWlsQq67tazx/3+KB
bupbti/ieD6gBxiNh/ZRgGNhe8sXCzbdi03a4S5G4v+n1f0PW3NN23oLGQwPzzVH
3/agwmrCvBMQT7mqcF4tYaYRFL8hyd+1rMJ0PaMq8VOZOonK/Xm2pYW6MQqH/eyO
FP8JdkqmSAwN6HWGBEMROF4h4Zm+xeoH8Z0oVt0tOjPd1FLgfHs+5uX7Z8qqyyo+
ufg0WTATxYmg+TgEg3gAfesF+JxF11q6TjLrqaYXXtg3fInA4u0mTwltxwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK3tX22hXKSRjG/DHMzBByrFk/2PMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcmUxZmJhRmNwSkdNYjhNY3pNRUhLc1dUX1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAudoXAwQA
ud9PAwQAueY0AwQAufZyMA0GCSqGSIb3DQEBCwUAA4IBAQAMsK2OYkd04ypAZL75
xyy0B7W7CSipr8huTlXpHgknn+iebnqUi9ysuwecPAtY2lorfZGvNohNVBxui1mf
NMVMrOeKgxn9jEJUNb56PeMKoTcSr4FrI2R2s7k/rfInLGew1tww3m1Ww0kWK2iI
rmHMzaqFqFG6IIv58W6dl2QvYNW0zWrdAZ9cygj2rJpsMn2IL4cS1wFdVWL7ZjuO
F5uv4WURwlcnqsvj+W8op/AKrqy1L1YDUy4b0L2/Ru9jqRZECqwu7mH14QDFLSBB
eoQd+C8vAnYfVVwfd4ZNsoM+mqiAyIo1YiWtuYBWSIrdOnm2GZzz+OnCTOzJcMB2
ZEej
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org