Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t18ln2IrQG4bBYOvA_GHkYvGy8Q.roa
File: t18ln2IrQG4bBYOvA_GHkYvGy8Q.roa (raw, json)
Hash identifier: +UWi/Jy60p+VgKGtknRnTFlu2Jg2snC5npU0dBxFp7w=
Subject key identifier: B7:5F:25:9F:62:2B:40:6E:1B:05:83:AF:03:F1:87:91:8B:C6:CB:C4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CD03C17C842AEAFEB972E1568F29F5AE4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t18ln2IrQG4bBYOvA_GHkYvGy8Q.roa
Signing time: Wed 03 Jan 2024 16:50:48 +0000
ROA not before: Wed 03 Jan 2024 16:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 271621
IP address blocks: 185.126.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 20:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d0:3c:17:c8:42:ae:af:eb:97:2e:15:68:f2:9f:5a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 16:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b75f259f622b406e1b0583af03f187918bc6cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:f8:55:98:4c:3c:fb:64:b4:0a:cb:cf:62:
c8:91:26:67:62:81:90:fe:44:42:f3:59:51:b4:1a:
96:85:39:ae:ab:7d:41:6b:13:7e:e7:92:63:cc:27:
24:bf:a5:73:1f:c5:08:ce:22:dd:cb:89:c2:a3:13:
67:a9:79:52:20:cf:b3:8b:02:ee:c7:7a:38:8e:6f:
ce:e6:3d:5c:2f:ca:e5:ef:62:50:9b:76:ef:98:e6:
54:29:f0:d6:5f:d0:3f:0b:00:be:9a:40:a8:df:d0:
a8:6b:d1:33:de:45:00:7a:d0:87:ec:2a:fd:94:de:
4b:f5:6f:68:92:f8:b2:9d:b9:bb:65:41:da:00:fc:
68:b5:4d:03:ed:86:97:8d:a0:33:89:64:d5:3a:58:
96:e8:59:59:bf:70:57:24:18:a2:4e:18:e9:60:34:
2c:b3:27:d8:d4:42:4c:53:fb:ae:df:30:f5:39:83:
6f:ce:cf:31:c1:fd:fe:6a:98:0a:78:ed:a0:d5:fe:
5f:b1:ba:51:bd:5a:95:4b:91:f2:8f:6d:ec:5e:36:
ba:24:1a:9e:e1:24:04:c2:6f:b3:ea:7b:ea:37:13:
03:99:74:f6:6e:06:d0:02:94:f8:d3:18:cf:79:88:
5e:c7:45:24:0e:79:6c:ae:3c:e9:5b:f1:5d:9b:82:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:25:9F:62:2B:40:6E:1B:05:83:AF:03:F1:87:91:8B:C6:CB:C4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t18ln2IrQG4bBYOvA_GHkYvGy8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bb:17:4b:98:4d:77:b2:16:81:ca:bb:f7:25:15:f8:ae:af:
6b:8c:b5:6b:7a:79:38:27:60:21:f1:bb:e2:5a:38:3e:b7:f1:
81:e5:0b:c1:96:2b:df:91:5d:a4:be:b2:63:e0:7b:81:20:ae:
7c:eb:47:ea:42:fa:b1:d7:b3:f1:a6:e0:6f:91:15:24:bc:d3:
cf:5f:b9:9b:92:29:57:08:78:2c:ac:3c:ce:0d:76:a4:4e:98:
f7:44:d5:77:3b:a0:e4:77:8d:33:db:f1:89:e5:de:96:b1:22:
97:ea:ee:81:ba:17:94:57:50:c3:44:15:d4:53:35:cd:5a:68:
0b:cc:55:4d:69:fb:86:fe:89:0d:3f:17:26:f1:bb:44:56:96:
cc:e7:7e:3a:bd:39:6a:b3:cb:f3:a6:85:fc:5c:64:2f:18:95:
9e:4c:df:99:c7:29:85:b7:f7:ab:0a:d2:29:a4:52:fb:df:be:
bf:a6:1a:9a:bf:39:f4:eb:c5:5b:ec:7b:a5:02:93:ea:e0:41:
7b:58:e5:6d:ce:ea:95:1c:72:07:3a:12:60:7e:27:43:75:33:
61:58:7f:9e:8c:eb:17:24:d4:b0:04:14:a5:e3:45:c0:a7:72:
3d:bf:9a:75:67:a5:e2:41:a6:cf:90:f7:41:4c:c9:16:61:9d:
be:67:50:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzQPBfIQq6v65cuFWjyn1rkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAzMTY1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzVmMjU5ZjYyMmI0MDZlMWIwNTgzYWYwM2YxODc5MThiYzZjYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDD4VZhMPPtktArLz2LIkSZnYoGQ
/kRC81lRtBqWhTmuq31BaxN+55JjzCckv6VzH8UIziLdy4nCoxNnqXlSIM+ziwLu
x3o4jm/O5j1cL8rl72JQm3bvmOZUKfDWX9A/CwC+mkCo39Coa9Ez3kUAetCH7Cr9
lN5L9W9okviynbm7ZUHaAPxotU0D7YaXjaAziWTVOliW6FlZv3BXJBiiThjpYDQs
syfY1EJMU/uu3zD1OYNvzs8xwf3+apgKeO2g1f5fsbpRvVqVS5Hyj23sXja6JBqe
4SQEwm+z6nvqNxMDmXT2bgbQApT40xjPeYhex0UkDnlsrjzpW/Fdm4I1dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdfJZ9iK0BuGwWDrwPxh5GLxsvEMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdDE4bG4ySXJRRzRiQllPdkFfR0hrWXZHeThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX5SMA0G
CSqGSIb3DQEBCwUAA4IBAQAfuxdLmE13shaByrv3JRX4rq9rjLVrenk4J2Ah8bvi
Wjg+t/GB5QvBlivfkV2kvrJj4HuBIK5860fqQvqx17PxpuBvkRUkvNPPX7mbkilX
CHgsrDzODXakTpj3RNV3O6Dkd40z2/GJ5d6WsSKX6u6BuheUV1DDRBXUUzXNWmgL
zFVNafuG/okNPxcm8btEVpbM5346vTlqs8vzpoX8XGQvGJWeTN+ZxymFt/erCtIp
pFL7376/phqavzn068Vb7HulApPq4EF7WOVtzuqVHHIHOhJgfidDdTNhWH+ejOsX
JNSwBBSl40XAp3I9v5p1Z6XiQabPkPdBTMkWYZ2+Z1AV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org