Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tVxt3nhfg5RJTgcO52jE7ri4ERE.roa
File: tVxt3nhfg5RJTgcO52jE7ri4ERE.roa (raw, json)
Hash identifier: wVdOB7/uPdKOW/wZTxPfbSnB2f8tUAfDfGLVh1ar5dQ=
Subject key identifier: B5:5C:6D:DE:78:5F:83:94:49:4E:07:0E:E7:68:C4:EE:B8:B8:11:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185E9616A8E670C03832B6D91F1D84D0056
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tVxt3nhfg5RJTgcO52jE7ri4ERE.roa
Signing time: Wed 25 Jan 2023 14:42:33 +0000
ROA not before: Wed 25 Jan 2023 14:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 185.108.205.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:61:6a:8e:67:0c:03:83:2b:6d:91:f1:d8:4d:00:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 25 14:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b55c6dde785f8394494e070ee768c4eeb8b81111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:c6:c9:75:66:72:e1:b2:2b:bc:c2:e1:0a:
62:9f:15:82:70:58:3c:ab:77:fe:3d:70:4a:db:e2:
79:f2:db:4a:24:02:62:65:e9:a7:80:ff:91:26:2b:
b9:7a:42:78:aa:18:5c:b5:79:c6:55:f2:2a:6c:da:
9c:21:0e:53:a5:21:3b:1b:20:a7:8a:2e:6c:44:cc:
83:ce:b3:b6:05:89:12:68:eb:82:dc:96:96:37:4e:
44:d5:c9:5d:30:e8:41:37:9d:c4:34:61:fe:68:9b:
29:24:1a:b6:1c:f3:6c:cf:f2:10:7d:01:d0:2c:c7:
c0:9a:93:a2:59:95:02:33:ed:01:c9:db:9f:b0:88:
5b:18:a5:1c:98:52:1d:22:a8:90:62:f9:38:86:06:
c7:d4:8d:7f:77:d8:9a:81:a7:93:08:f3:73:75:35:
96:2b:33:dc:1d:5b:6b:f0:04:3a:c5:25:95:18:d4:
86:bd:71:cf:c8:6d:b8:70:5f:c0:8f:3a:0e:fa:ab:
3c:70:97:91:4d:d1:e8:55:d8:21:ff:91:e6:5d:19:
af:53:ef:4b:aa:07:41:8d:67:d2:f9:d8:10:ee:5c:
a1:84:aa:0c:d9:f1:ff:39:f7:e8:79:6f:ff:88:e4:
93:41:16:91:32:bc:22:53:6d:59:8b:2d:7e:28:65:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:6D:DE:78:5F:83:94:49:4E:07:0E:E7:68:C4:EE:B8:B8:11:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tVxt3nhfg5RJTgcO52jE7ri4ERE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:3c:cd:af:bb:66:a1:54:6c:49:bd:bc:98:74:5e:97:44:10:
96:56:f1:42:38:ce:01:e2:0b:f5:8b:81:88:03:24:e6:38:43:
2b:71:5f:a1:cb:b9:6c:24:7b:a3:fd:86:e6:40:02:54:be:0f:
2a:f7:d5:9a:59:a2:78:69:c0:e9:3f:27:ff:be:5b:d1:c7:55:
86:5f:1b:a3:fd:12:cf:fd:04:a1:4c:3f:46:55:bf:46:3d:20:
c9:8c:d1:8d:34:ce:b4:f5:bc:98:62:b5:4d:9d:52:3a:a8:22:
47:c9:a1:4d:b6:ac:fe:09:d5:52:13:3b:78:13:35:8c:55:1e:
32:05:58:62:3d:1c:08:a7:06:d4:c9:77:db:7f:f9:74:09:3e:
43:db:57:04:07:20:26:a1:8e:ad:aa:e2:da:ac:b7:cb:8d:99:
07:1b:fd:06:9a:77:a0:17:ac:a5:cc:22:f4:2e:7d:c8:63:f2:
2b:45:67:0f:d0:61:95:c9:02:4f:6a:2c:54:48:f3:69:d4:14:
12:ac:83:a8:95:57:36:8c:65:92:52:25:58:39:1d:98:82:ee:
ed:fa:22:87:d4:1e:55:78:ae:3e:fd:74:6d:4f:65:bb:01:64:
9f:79:ee:84:d2:5d:f0:76:d9:e1:16:0e:9f:6b:f2:e1:d1:49:
5e:16:85:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXpYWqOZwwDgyttkfHYTQBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTI1MTQ0MjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVjNmRkZTc4NWY4Mzk0NDk0ZTA3MGVlNzY4YzRlZWI4YjgxMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhnGyXVmcuGyK7zC4QpinxWCcFg8
q3f+PXBK2+J58ttKJAJiZemngP+RJiu5ekJ4qhhctXnGVfIqbNqcIQ5TpSE7GyCn
ii5sRMyDzrO2BYkSaOuC3JaWN05E1cldMOhBN53ENGH+aJspJBq2HPNsz/IQfQHQ
LMfAmpOiWZUCM+0BydufsIhbGKUcmFIdIqiQYvk4hgbH1I1/d9iagaeTCPNzdTWW
KzPcHVtr8AQ6xSWVGNSGvXHPyG24cF/AjzoO+qs8cJeRTdHoVdgh/5HmXRmvU+9L
qgdBjWfS+dgQ7lyhhKoM2fH/OffoeW//iOSTQRaRMrwiU21Ziy1+KGU4mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVcbd54X4OUSU4HDudoxO64uBERMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdFZ4dDNuaGZnNVJKVGdjTzUyakU3cmk0RVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWzMMA0G
CSqGSIb3DQEBCwUAA4IBAQC2PM2vu2ahVGxJvbyYdF6XRBCWVvFCOM4B4gv1i4GI
AyTmOEMrcV+hy7lsJHuj/YbmQAJUvg8q99WaWaJ4acDpPyf/vlvRx1WGXxuj/RLP
/QShTD9GVb9GPSDJjNGNNM609byYYrVNnVI6qCJHyaFNtqz+CdVSEzt4EzWMVR4y
BVhiPRwIpwbUyXfbf/l0CT5D21cEByAmoY6tquLarLfLjZkHG/0GmnegF6ylzCL0
Ln3IY/IrRWcP0GGVyQJPaixUSPNp1BQSrIOolVc2jGWSUiVYOR2Ygu7t+iKH1B5V
eK4+/XRtT2W7AWSfee6E0l3wdtnhFg6fa/Lh0UleFoV3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org