Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w-T4JLPuyRaeR5tT8HxHW8PVlLA.roa
File: w-T4JLPuyRaeR5tT8HxHW8PVlLA.roa (raw, json)
Hash identifier: Tu0ewyjeM5ELzGqLeVQw/CsTJkmsdsJ3XIIVrReUSWg=
Subject key identifier: C3:E4:F8:24:B3:EE:C9:16:9E:47:9B:53:F0:7C:47:5B:C3:D5:94:B0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802A1605DE30E8FF33282430BFA0BF5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w-T4JLPuyRaeR5tT8HxHW8PVlLA.roa
Signing time: Tue 02 Jan 2024 02:31:04 +0000
ROA not before: Tue 02 Jan 2024 02:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400328
IP address blocks: 185.194.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:a1:60:5d:e3:0e:8f:f3:32:82:43:0b:fa:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e4f824b3eec9169e479b53f07c475bc3d594b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:37:38:3c:3e:d8:b1:25:d6:17:fd:f4:20:
4e:03:78:f6:55:25:41:f1:ad:f7:ce:8f:fa:ac:83:
66:ab:b8:41:28:6e:0d:b4:61:00:5d:08:7c:e6:61:
dd:cc:38:7b:4d:83:3f:06:2a:97:91:9c:7b:95:5e:
7e:77:44:dd:67:a5:df:6d:bc:24:32:b0:62:60:52:
9f:26:67:56:d8:1f:e5:fd:1b:bf:f9:8c:49:a6:de:
9b:f1:db:c3:cf:ca:15:0e:bf:b3:a1:af:d3:a7:c3:
55:58:7f:a6:c6:b4:93:76:c4:e2:b9:90:23:8d:b7:
80:d4:0c:44:be:62:56:81:b7:92:53:78:6b:f4:9a:
0c:ec:35:36:df:49:66:55:ef:2a:41:91:2f:9c:9d:
ad:46:83:39:a4:ae:4a:65:8f:c0:9a:d8:2f:29:03:
04:73:76:a6:12:9a:24:c9:7a:bf:13:fd:00:ee:ec:
2b:6c:cb:17:4d:02:ea:10:7f:51:6e:12:f3:05:b5:
9a:fb:13:49:19:fb:5e:fc:cf:dc:2e:3c:8f:2b:79:
67:e3:f9:59:54:d4:8e:7c:d0:60:13:d6:63:37:94:
8b:6b:2a:83:57:00:91:db:be:44:d3:93:b5:63:90:
30:50:92:c1:28:7e:6f:56:10:82:80:06:34:fb:30:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:F8:24:B3:EE:C9:16:9E:47:9B:53:F0:7C:47:5B:C3:D5:94:B0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w-T4JLPuyRaeR5tT8HxHW8PVlLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.176.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f8:27:68:89:7c:0a:d3:28:98:bd:40:c3:34:65:ed:1e:a5:
65:06:ca:c5:6b:82:59:97:cf:a7:65:7f:30:ef:95:4c:78:c2:
93:ab:96:a2:fc:dc:47:18:da:4c:34:a7:00:13:f5:48:df:e3:
89:c6:89:df:5b:5f:1d:98:29:73:63:4f:1b:d0:93:26:fe:2a:
a5:b8:e2:45:f6:88:3c:c9:6c:ff:c9:86:ec:ea:ca:d2:6d:62:
99:51:05:aa:05:1f:8e:80:83:53:6b:0e:a8:3b:d4:07:99:c2:
06:ff:10:2b:38:3b:e0:c6:6b:13:a7:27:d9:0f:a3:8d:38:e9:
8d:ee:e5:9f:a2:ae:e4:f0:54:b5:03:53:91:8b:e3:3b:48:95:
8e:6c:e1:eb:46:93:21:8b:58:90:45:c0:7b:d8:88:be:da:39:
ba:ee:85:82:7e:f6:2d:25:12:42:bc:de:88:03:2f:74:bc:92:
87:3b:1d:90:a7:02:48:b2:23:7f:c5:de:c6:af:48:a4:2a:da:
c6:91:a2:c7:3e:4f:d1:13:e0:c3:63:30:67:7e:97:12:4b:d3:
64:d8:aa:32:5a:ab:c5:2f:a7:35:22:0a:ea:5d:4e:e7:39:0e:
63:8c:f0:40:08:47:7a:15:0d:79:c9:c8:16:ed:6e:ef:75:46:
0e:c1:79:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAqFgXeMOj/MygkML+gv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2U0ZjgyNGIzZWVjOTE2OWU0NzliNTNmMDdjNDc1YmMzZDU5NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxQ3ODw+2LEl1hf99CBOA3j2VSVB
8a33zo/6rINmq7hBKG4NtGEAXQh85mHdzDh7TYM/BiqXkZx7lV5+d0TdZ6Xfbbwk
MrBiYFKfJmdW2B/l/Ru/+YxJpt6b8dvDz8oVDr+zoa/Tp8NVWH+mxrSTdsTiuZAj
jbeA1AxEvmJWgbeSU3hr9JoM7DU230lmVe8qQZEvnJ2tRoM5pK5KZY/AmtgvKQME
c3amEpokyXq/E/0A7uwrbMsXTQLqEH9RbhLzBbWa+xNJGfte/M/cLjyPK3ln4/lZ
VNSOfNBgE9ZjN5SLayqDVwCR275E05O1Y5AwUJLBKH5vVhCCgAY0+zBV/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPk+CSz7skWnkebU/B8R1vD1ZSwMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdy1UNEpMUHV5UmFlUjV0VDhIeEhXOFBWbExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKwMA0G
CSqGSIb3DQEBCwUAA4IBAQBB+CdoiXwK0yiYvUDDNGXtHqVlBsrFa4JZl8+nZX8w
75VMeMKTq5ai/NxHGNpMNKcAE/VI3+OJxonfW18dmClzY08b0JMm/iqluOJF9og8
yWz/yYbs6srSbWKZUQWqBR+OgINTaw6oO9QHmcIG/xArODvgxmsTpyfZD6ONOOmN
7uWfoq7k8FS1A1ORi+M7SJWObOHrRpMhi1iQRcB72Ii+2jm67oWCfvYtJRJCvN6I
Ay90vJKHOx2QpwJIsiN/xd7Gr0ikKtrGkaLHPk/RE+DDYzBnfpcSS9Nk2KoyWqvF
L6c1IgrqXU7nOQ5jjPBACEd6FQ15ycgW7W7vdUYOwXkt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org