Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uvOfmgQ5y1Ntw3Chq6UBYhBe4eU.roa
File: uvOfmgQ5y1Ntw3Chq6UBYhBe4eU.roa (raw, json)
Hash identifier: 5ukfaVDkavgATqAU2Evhkp9Foz6t7I2lx1luFe68Nho=
Subject key identifier: BA:F3:9F:9A:04:39:CB:53:6D:C3:70:A1:AB:A5:01:62:10:5E:E1:E5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018887375C12FAEAB51C09C4C19A9427F29D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uvOfmgQ5y1Ntw3Chq6UBYhBe4eU.roa
Signing time: Sun 04 Jun 2023 16:22:12 +0000
ROA not before: Sun 04 Jun 2023 16:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 185.223.220.0/22 maxlen: 22
92.60.34.0/24 maxlen: 24
185.211.180.0/22 maxlen: 22
185.245.34.0/23 maxlen: 23
185.179.228.0/22 maxlen: 22
185.227.128.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
185.250.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 20:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:87:37:5c:12:fa:ea:b5:1c:09:c4:c1:9a:94:27:f2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 4 16:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baf39f9a0439cb536dc370a1aba50162105ee1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:33:3c:af:a2:fa:b1:63:72:80:78:ac:31:
37:29:34:23:55:9d:47:98:e9:c4:45:de:cb:65:70:
58:9e:b4:b8:e7:ef:d4:90:76:5e:9b:b8:30:d5:03:
84:70:01:55:a6:54:27:24:6a:ea:74:b6:c6:e7:dc:
82:ed:a2:f9:0c:a5:12:a0:05:df:32:15:10:f4:9f:
8b:fa:95:bb:fb:2d:dd:ce:2b:e5:f8:f7:cb:1b:24:
56:b5:8c:b3:30:8d:78:be:a6:f1:4b:18:8b:d2:61:
2f:84:8a:4e:01:b9:1e:e6:3b:ef:73:b8:e9:0c:38:
65:2c:48:2a:53:de:b8:2d:35:c2:d7:be:83:f8:17:
c9:47:45:0d:4a:62:03:c7:44:fb:1b:0f:67:d5:f9:
8a:b0:f9:ca:f8:a7:81:2f:ef:2b:37:c5:be:54:c2:
c8:bd:c4:98:79:88:9f:dd:e0:8f:35:a3:18:3d:5c:
8f:d9:28:7f:2a:f0:9a:a4:fb:4d:1a:18:f3:28:d6:
25:8b:ad:69:2d:b8:bb:f9:8b:7c:70:60:31:32:0e:
c4:26:da:0a:47:83:15:66:1a:1a:03:29:64:58:af:
7e:e0:4f:a9:77:54:ca:0f:5b:19:37:6a:7a:fa:31:
2a:c4:e3:48:8b:92:cd:02:e0:3d:f6:02:30:93:10:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:9F:9A:04:39:CB:53:6D:C3:70:A1:AB:A5:01:62:10:5E:E1:E5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uvOfmgQ5y1Ntw3Chq6UBYhBe4eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.34.0/24
185.179.228.0/22
185.189.64.0/22
185.211.180.0/22
185.223.220.0/22
185.227.128.0/22
185.245.34.0/23
185.250.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:43:a5:6f:42:c9:00:50:0a:9f:8f:ea:26:b1:7d:9e:ee:16:
95:59:7b:75:a9:98:db:ef:9f:f2:50:35:34:dc:e6:48:7a:66:
56:bb:08:fd:df:7d:44:f4:a3:51:43:77:45:f8:94:46:1a:cd:
e0:0f:90:64:59:bc:de:d1:be:c2:dc:7e:c1:61:8b:9b:ec:42:
3d:79:d9:2d:63:3b:0a:8e:87:39:31:3a:a9:c7:b3:cd:88:bc:
de:b1:9f:19:a8:38:84:cb:6a:f4:02:cd:12:e6:c7:8b:27:0f:
f1:b2:cd:c8:5b:61:cd:8c:75:16:b6:89:78:16:80:a8:f5:8b:
b2:3e:b1:de:7b:39:99:70:69:14:1b:ce:c0:a2:8f:48:b5:84:
22:73:20:b7:17:16:45:3e:ab:32:e3:7f:34:17:0c:b2:5c:31:
ec:4f:a6:f3:db:77:9d:3b:b3:99:94:dc:8f:40:ef:c0:35:86:
44:b9:59:11:73:ed:c5:de:e6:22:8f:6f:8d:72:99:b4:fd:1b:
3e:1a:ad:0c:48:ee:3c:c4:05:c1:95:a4:2b:3a:4e:ef:ae:4a:
3f:96:45:fc:a9:f2:50:27:66:97:00:29:f7:37:12:70:9e:37:
84:33:ef:8e:05:39:96:b1:02:7b:ee:45:e4:ed:ba:54:32:35:
80:c1:8a:8c
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYiHN1wS+uq1HAnEwZqUJ/KdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNjA0MTYyMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWYzOWY5YTA0MzljYjUzNmRjMzcwYTFhYmE1MDE2MjEwNWVlMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPYzPK+i+rFjcoB4rDE3KTQjVZ1H
mOnERd7LZXBYnrS45+/UkHZem7gw1QOEcAFVplQnJGrqdLbG59yC7aL5DKUSoAXf
MhUQ9J+L+pW7+y3dzivl+PfLGyRWtYyzMI14vqbxSxiL0mEvhIpOAbke5jvvc7jp
DDhlLEgqU964LTXC176D+BfJR0UNSmIDx0T7Gw9n1fmKsPnK+KeBL+8rN8W+VMLI
vcSYeYif3eCPNaMYPVyP2Sh/KvCapPtNGhjzKNYli61pLbi7+Yt8cGAxMg7EJtoK
R4MVZhoaAylkWK9+4E+pd1TKD1sZN2p6+jEqxONIi5LNAuA99gIwkxC5+QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLrzn5oEOctTbcNwoaulAWIQXuHlMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdXZPZm1nUTV5MU50dzNDaHE2VUJZaEJlNGVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAXDwiAwQC
ubPkAwQCub1AAwQCudO0AwQCud/cAwQCueOAAwQBufUiAwQAufq0MA0GCSqGSIb3
DQEBCwUAA4IBAQBeQ6VvQskAUAqfj+omsX2e7haVWXt1qZjb75/yUDU03OZIemZW
uwj9331E9KNRQ3dF+JRGGs3gD5BkWbze0b7C3H7BYYub7EI9edktYzsKjoc5MTqp
x7PNiLzesZ8ZqDiEy2r0As0S5seLJw/xss3IW2HNjHUWtol4FoCo9YuyPrHeezmZ
cGkUG87Aoo9ItYQicyC3FxZFPqsy4380FwyyXDHsT6bz23edO7OZlNyPQO/ANYZE
uVkRc+3F3uYij2+Ncpm0/Rs+Gq0MSO48xAXBlaQrOk7vrko/lkX8qfJQJ2aXACn3
NxJwnjeEM++OBTmWsQJ77kXk7bpUMjWAwYqM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org