Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uHkLxwHI4pT4-AGp-c_vHEyN_uY.roa
File: uHkLxwHI4pT4-AGp-c_vHEyN_uY.roa (raw, json)
Hash identifier: CKcs+96LrE3RkWUdhURzzhfX2kGX6as9F7R/Nu44Zbs=
Subject key identifier: B8:79:0B:C7:01:C8:E2:94:F8:F8:01:A9:F9:CF:EF:1C:4C:8D:FE:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A8DE2DFC21FEDF453567D91309F0675D5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uHkLxwHI4pT4-AGp-c_vHEyN_uY.roa
Signing time: Wed 13 Sep 2023 09:32:50 +0000
ROA not before: Wed 13 Sep 2023 09:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.126.80.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 09:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:e2:df:c2:1f:ed:f4:53:56:7d:91:30:9f:06:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 13 09:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8790bc701c8e294f8f801a9f9cfef1c4c8dfee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:cf:a9:1f:84:93:82:f9:aa:9b:dc:c7:a9:
0f:38:ad:62:97:7d:22:52:7d:75:2f:98:da:05:69:
db:73:15:c5:dd:0d:ed:c1:0d:5e:35:66:18:d7:bc:
4c:4a:db:88:79:87:8f:a4:f6:7a:89:b0:8d:0a:a7:
8f:7e:e6:ca:c1:d3:b3:c2:c6:ad:66:03:4a:11:29:
24:5e:96:86:b5:ba:f7:d8:e8:6c:6e:3e:17:cf:15:
44:95:b0:f9:e4:fa:d2:23:16:56:3e:3c:b0:77:34:
6a:20:1c:77:9d:15:69:e1:50:c7:6b:f3:10:f8:88:
86:3d:d0:b4:d6:0d:ac:fc:c2:14:69:fe:75:41:ff:
7c:82:cd:2f:94:5c:f6:73:1f:bb:dd:68:2b:c4:04:
ba:22:2c:1e:b5:96:fd:bf:ee:84:85:9d:16:61:07:
2c:ea:c6:78:6f:3a:e2:d0:7e:f9:b0:f2:69:62:81:
d5:5c:39:06:cf:46:6c:24:de:af:ee:bd:cc:b1:15:
22:1d:c9:c5:b9:ed:35:30:f8:fb:56:ca:32:65:7f:
3c:a2:8d:dc:68:73:59:dd:9c:a2:a5:1d:a7:ca:2a:
fc:be:dd:d2:f7:a6:80:84:04:09:b5:62:7f:72:14:
c2:6b:f6:f5:7d:5c:b5:b9:07:34:3e:3f:ca:6e:29:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:0B:C7:01:C8:E2:94:F8:F8:01:A9:F9:CF:EF:1C:4C:8D:FE:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uHkLxwHI4pT4-AGp-c_vHEyN_uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
86:19:07:61:76:21:1f:f8:44:e3:60:27:58:a0:18:72:5b:66:
a2:8e:2d:a1:75:73:80:0b:73:45:f0:0e:22:14:62:09:67:d4:
f7:dc:f8:ba:b6:7e:17:5c:f6:e5:67:a2:88:a5:e2:aa:66:64:
1d:a3:5d:93:73:de:99:07:1d:22:68:c6:5a:e0:f8:54:c4:8b:
9d:c0:bb:66:da:98:84:19:72:8b:35:ed:34:b9:a2:80:8b:1f:
8a:06:00:cf:4d:91:66:11:c7:b1:93:d4:0c:7e:44:2e:ac:2e:
c2:bc:d2:ea:57:bf:a9:31:37:1f:38:0f:51:bf:90:6c:79:a3:
49:5c:33:40:78:e5:8c:ca:f0:9f:66:b0:fb:b2:60:5f:72:ea:
7b:a8:27:c7:02:10:04:2b:80:89:f0:65:f4:c1:81:63:36:96:
6c:ab:0d:d7:7e:42:d1:31:0b:fe:85:bd:54:16:57:e7:b0:43:
c0:d2:9a:09:f0:e7:68:70:af:b6:38:42:96:ff:f8:ee:24:d0:
0b:9e:99:89:68:f9:d7:58:b2:c3:55:56:47:fb:c8:4e:58:9a:
59:44:a9:c6:1e:60:32:aa:e1:7a:7d:fa:a2:e6:9e:bb:35:95:
de:f3:bd:ee:98:62:dc:5f:44:58:46:57:75:a3:f8:b5:a4:f9:
04:c7:59:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqN4t/CH+30U1Z9kTCfBnXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTEzMDkzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODc5MGJjNzAxYzhlMjk0ZjhmODAxYTlmOWNmZWYxYzRjOGRmZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzTPqR+Ek4L5qpvcx6kPOK1il30i
Un11L5jaBWnbcxXF3Q3twQ1eNWYY17xMStuIeYePpPZ6ibCNCqePfubKwdOzwsat
ZgNKESkkXpaGtbr32Ohsbj4XzxVElbD55PrSIxZWPjywdzRqIBx3nRVp4VDHa/MQ
+IiGPdC01g2s/MIUaf51Qf98gs0vlFz2cx+73WgrxAS6IiwetZb9v+6EhZ0WYQcs
6sZ4bzri0H75sPJpYoHVXDkGz0ZsJN6v7r3MsRUiHcnFue01MPj7VsoyZX88oo3c
aHNZ3ZyipR2nyir8vt3S96aAhAQJtWJ/chTCa/b1fVy1uQc0Pj/KbimcDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLh5C8cByOKU+PgBqfnP7xxMjf7mMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdUhrTHh3SEk0cFQ0LUFHcC1jX3ZIRXlOX3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuX5QAwQA
ufvmMA0GCSqGSIb3DQEBCwUAA4IBAQCGGQdhdiEf+ETjYCdYoBhyW2aiji2hdXOA
C3NF8A4iFGIJZ9T33Pi6tn4XXPblZ6KIpeKqZmQdo12Tc96ZBx0iaMZa4PhUxIud
wLtm2piEGXKLNe00uaKAix+KBgDPTZFmEcexk9QMfkQurC7CvNLqV7+pMTcfOA9R
v5BseaNJXDNAeOWMyvCfZrD7smBfcup7qCfHAhAEK4CJ8GX0wYFjNpZsqw3XfkLR
MQv+hb1UFlfnsEPA0poJ8OdocK+2OEKW//juJNALnpmJaPnXWLLDVVZH+8hOWJpZ
RKnGHmAyquF6ffqi5p67NZXe873umGLcX0RYRld1o/i1pPkEx1lq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org