Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vLYPN55ixnp9U9iP1-P1kEPoTlU.roa
File: vLYPN55ixnp9U9iP1-P1kEPoTlU.roa (raw, json)
Hash identifier: ZqZuxbni8nzEUBfow9rY8hSqqfWxuETXsG45YAZTLFA=
Subject key identifier: BC:B6:0F:37:9E:62:C6:7A:7D:53:D8:8F:D7:E3:F5:90:43:E8:4E:55
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B5C2823084740BB247464664DC29B1D7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vLYPN55ixnp9U9iP1-P1kEPoTlU.roa
Signing time: Mon 23 Oct 2023 10:50:16 +0000
ROA not before: Mon 23 Oct 2023 10:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 93.92.228.0/22 maxlen: 24
185.223.220.0/22 maxlen: 22
92.60.34.0/24 maxlen: 24
185.211.180.0/22 maxlen: 22
212.80.208.0/22 maxlen: 24
185.245.34.0/23 maxlen: 23
185.179.228.0/22 maxlen: 22
185.227.128.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:28:23:08:47:40:bb:24:74:64:66:4d:c2:9b:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 23 10:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb60f379e62c67a7d53d88fd7e3f59043e84e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:64:45:ef:00:3c:d2:2e:40:00:09:62:87:
4e:65:ab:93:51:8c:75:18:c2:bf:0a:4a:51:3a:51:
cf:f4:a4:cb:ab:6f:af:9b:cc:21:dc:80:a9:ff:29:
47:bf:f6:4d:dd:c6:05:bc:23:6c:43:ad:24:7f:b0:
ab:e8:7c:a8:6e:b9:55:de:75:aa:6e:86:d8:c0:92:
3a:4e:d9:63:01:3c:fe:cf:19:0c:ce:2f:97:3f:95:
c3:c5:aa:98:9e:3a:87:ec:e1:f2:9d:ed:dd:bb:a8:
42:b1:9a:f6:dd:da:c3:c1:58:6f:2b:30:b8:7e:8a:
5e:c7:34:00:09:7f:af:a8:91:38:db:72:48:25:67:
6a:92:3e:b3:de:97:fd:d3:f4:fa:d7:93:10:1d:7e:
c4:3d:53:66:6c:93:93:29:6d:2a:2a:3d:f0:6e:88:
32:05:a0:b9:24:da:99:14:0e:e6:61:0e:d8:31:74:
34:4d:ac:c8:60:c6:07:a5:85:ea:76:fc:df:2c:07:
5c:fe:71:4d:7e:db:a1:db:7a:98:92:8c:24:9e:ca:
7c:e5:6f:ac:90:21:62:7a:5b:7c:45:53:a5:dc:ca:
ac:2e:42:28:81:e6:35:32:ab:8f:d9:53:26:09:89:
12:38:b1:25:3b:c9:01:07:2f:2e:02:48:6f:35:e4:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:0F:37:9E:62:C6:7A:7D:53:D8:8F:D7:E3:F5:90:43:E8:4E:55
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vLYPN55ixnp9U9iP1-P1kEPoTlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.34.0/24
93.92.228.0/22
185.179.228.0/22
185.189.64.0/22
185.211.180.0/22
185.223.220.0/22
185.227.128.0/22
185.245.34.0/23
212.80.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:82:8b:95:50:53:1d:e2:c1:d7:b0:a3:9e:59:49:12:7e:8f:
fd:6d:83:fb:4e:c7:8a:4e:ff:ff:66:2b:b0:65:97:77:e6:2d:
6e:1a:35:8d:4c:4e:22:48:f3:fd:b9:67:b8:d6:0c:8a:27:be:
ed:73:d1:93:b2:ff:3d:c5:1a:94:4b:29:23:6a:9c:82:60:13:
42:61:14:46:2d:13:be:38:02:8f:16:01:3b:bb:45:00:8d:6c:
21:5e:d3:a0:91:ec:90:f5:a9:d0:59:0d:ef:c7:f5:92:81:7b:
5f:b1:2e:bc:7c:66:c9:24:91:dc:37:6a:ac:ae:09:00:ea:c7:
5c:ce:b1:51:6b:9c:07:e5:88:25:ec:8a:8b:98:6c:0e:ad:d2:
3e:61:6e:92:4a:95:76:2d:95:17:21:6d:c0:e0:58:fa:f3:05:
c3:ae:2e:21:1f:c6:70:6d:4b:c1:ca:27:33:65:01:38:35:41:
10:21:cf:d7:8b:5c:cf:ee:5d:3a:bc:44:ee:55:f1:64:28:89:
69:a2:7a:45:6c:5f:ae:7a:eb:cf:17:7b:83:e8:00:88:95:9f:
38:9d:84:17:d5:20:c6:f4:74:27:dc:d0:3a:8b:16:5e:b2:d4:
80:28:df:41:c8:c5:a2:04:4d:21:af:4d:0e:ae:71:b7:b1:b3:
ca:30:c1:3b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYtcKCMIR0C7JHRkZk3Cmx1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMDIzMTA1MDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2I2MGYzNzllNjJjNjdhN2Q1M2Q4OGZkN2UzZjU5MDQzZTg0ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFlkRe8APNIuQAAJYodOZauTUYx1
GMK/CkpROlHP9KTLq2+vm8wh3ICp/ylHv/ZN3cYFvCNsQ60kf7Cr6HyobrlV3nWq
bobYwJI6TtljATz+zxkMzi+XP5XDxaqYnjqH7OHyne3du6hCsZr23drDwVhvKzC4
fopexzQACX+vqJE423JIJWdqkj6z3pf90/T615MQHX7EPVNmbJOTKW0qKj3wbogy
BaC5JNqZFA7mYQ7YMXQ0TazIYMYHpYXqdvzfLAdc/nFNftuh23qYkowknsp85W+s
kCFielt8RVOl3MqsLkIogeY1MquP2VMmCYkSOLElO8kBBy8uAkhvNeQNIwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLy2DzeeYsZ6fVPYj9fj9ZBD6E5VMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdkxZUE41NWl4bnA5VTlpUDEtUDFrRVBvVGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAXDwiAwQC
XVzkAwQCubPkAwQCub1AAwQCudO0AwQCud/cAwQCueOAAwQBufUiAwQC1FDQMA0G
CSqGSIb3DQEBCwUAA4IBAQClgouVUFMd4sHXsKOeWUkSfo/9bYP7TseKTv//Ziuw
ZZd35i1uGjWNTE4iSPP9uWe41gyKJ77tc9GTsv89xRqUSykjapyCYBNCYRRGLRO+
OAKPFgE7u0UAjWwhXtOgkeyQ9anQWQ3vx/WSgXtfsS68fGbJJJHcN2qsrgkA6sdc
zrFRa5wH5Ygl7IqLmGwOrdI+YW6SSpV2LZUXIW3A4Fj68wXDri4hH8ZwbUvByicz
ZQE4NUEQIc/Xi1zP7l06vETuVfFkKIlponpFbF+ueuvPF3uD6ACIlZ84nYQX1SDG
9HQn3NA6ixZestSAKN9ByMWiBE0hr00OrnG3sbPKMME7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org