Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zBEYjGZg3S6KDxSK-maBhXBwEj8.roa
File: zBEYjGZg3S6KDxSK-maBhXBwEj8.roa (raw, json)
Hash identifier: +2IDDBq+rh/vZkNUeV4M5QCBH2XWq8DGxX5jJaK2Tlc=
Subject key identifier: CC:11:18:8C:66:60:DD:2E:8A:0F:14:8A:FA:66:81:85:70:70:12:3F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01872303619594EFC11E58D1BB4792760CC7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zBEYjGZg3S6KDxSK-maBhXBwEj8.roa
Signing time: Mon 27 Mar 2023 12:20:36 +0000
ROA not before: Mon 27 Mar 2023 12:20:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270564
IP address blocks: 185.228.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 09:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:03:61:95:94:ef:c1:1e:58:d1:bb:47:92:76:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 12:20:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc11188c6660dd2e8a0f148afa6681857070123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:d7:3b:6e:6b:33:4d:fb:2a:c1:35:d6:37:
55:3f:7d:24:0c:c7:5e:c8:18:b9:32:f9:d7:05:e3:
9e:b5:83:fd:8a:a2:1f:58:ef:3b:31:15:72:1d:79:
6e:a8:eb:ec:8b:76:d0:54:c9:0f:d2:f8:fe:a8:2d:
f0:ce:7a:b3:77:7d:43:98:94:7f:47:16:b8:9b:29:
64:e7:d7:ad:f2:a0:b3:a2:ec:55:a5:4c:cf:a2:ca:
ba:f6:41:5d:8c:ab:7e:5d:02:fb:2e:ef:a6:26:f0:
97:c9:9a:a8:e8:7e:30:16:7a:3e:02:ed:a7:5e:5c:
10:63:70:6e:2b:24:06:4b:4d:b2:20:57:69:06:63:
de:1f:b4:c7:b2:fa:d9:fc:9f:70:d3:a5:a8:61:7e:
c9:51:2c:f5:50:7a:97:98:3d:53:04:f0:81:43:69:
42:f0:18:44:36:01:53:68:a6:ac:e7:d1:f9:e5:1d:
a6:06:54:c0:3f:1a:ac:24:3b:a9:ff:e3:3e:ae:51:
d2:09:f6:e4:a8:9e:1c:5d:80:19:d8:d5:c4:1a:6d:
e7:11:cb:1c:76:4f:4a:b2:db:a0:fb:f0:a1:dd:11:
ba:73:d3:7b:3c:26:e6:30:72:72:85:19:e9:3f:97:
0c:05:81:fe:34:2f:50:79:7b:f8:59:15:e5:d9:39:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:18:8C:66:60:DD:2E:8A:0F:14:8A:FA:66:81:85:70:70:12:3F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zBEYjGZg3S6KDxSK-maBhXBwEj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.72.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:5d:a4:8f:f4:d1:45:17:e2:ac:48:5f:e3:e3:16:6d:aa:
ed:42:21:35:b3:b2:98:a9:6b:4c:93:4f:c5:d5:1d:8b:66:e5:
d6:4f:e2:f5:d2:59:29:5e:7e:95:a3:1b:d3:09:96:49:15:3b:
eb:ad:49:2e:f7:3b:ec:12:da:d6:73:49:35:36:7f:0d:d9:93:
58:99:b8:6e:f9:11:37:5c:e3:99:f7:ff:e5:a8:19:01:5b:50:
68:af:35:24:12:58:1d:fa:3f:49:ea:df:e0:0a:61:50:09:de:
84:14:68:1d:5a:eb:77:01:72:af:17:ba:2b:4f:15:9b:6c:7b:
b9:b8:ec:3e:8e:d9:19:d9:7e:9a:0d:b8:91:5a:55:97:c5:dd:
64:7a:a3:bc:6b:e6:98:4b:ba:8a:13:f6:2d:13:48:10:ea:ae:
c3:eb:05:2c:fc:91:29:64:2a:02:32:f3:80:6a:bd:00:73:1a:
87:49:5f:e8:40:67:c0:71:48:a6:7e:21:55:ce:f8:c6:4c:42:
3c:22:a7:3d:02:e7:b3:4a:10:81:e7:4f:22:c6:52:8f:df:8e:
15:13:79:6b:c2:8a:93:d3:f7:33:7d:ed:4c:b5:1b:28:6e:d5:
bf:8b:cd:55:f4:dd:e5:be:e0:62:4b:49:7f:05:66:2c:95:c8:
43:3f:fd:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcjA2GVlO/BHljRu0eSdgzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMzI3MTIyMDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzExMTg4YzY2NjBkZDJlOGEwZjE0OGFmYTY2ODE4NTcwNzAxMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlnXO25rM037KsE11jdVP30kDMde
yBi5MvnXBeOetYP9iqIfWO87MRVyHXluqOvsi3bQVMkP0vj+qC3wznqzd31DmJR/
Rxa4mylk59et8qCzouxVpUzPosq69kFdjKt+XQL7Lu+mJvCXyZqo6H4wFno+Au2n
XlwQY3BuKyQGS02yIFdpBmPeH7THsvrZ/J9w06WoYX7JUSz1UHqXmD1TBPCBQ2lC
8BhENgFTaKas59H55R2mBlTAPxqsJDup/+M+rlHSCfbkqJ4cXYAZ2NXEGm3nEcsc
dk9Kstug+/Ch3RG6c9N7PCbmMHJyhRnpP5cMBYH+NC9QeXv4WRXl2TnAnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwRGIxmYN0uig8UivpmgYVwcBI/MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvekJFWWpHWmczUzZLRHhTSy1tYUJoWEJ3RWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueRIMA0G
CSqGSIb3DQEBCwUAA4IBAQAYKF2kj/TRRRfirEhf4+MWbartQiE1s7KYqWtMk0/F
1R2LZuXWT+L10lkpXn6VoxvTCZZJFTvrrUku9zvsEtrWc0k1Nn8N2ZNYmbhu+RE3
XOOZ9//lqBkBW1BorzUkElgd+j9J6t/gCmFQCd6EFGgdWut3AXKvF7orTxWbbHu5
uOw+jtkZ2X6aDbiRWlWXxd1keqO8a+aYS7qKE/YtE0gQ6q7D6wUs/JEpZCoCMvOA
ar0AcxqHSV/oQGfAcUimfiFVzvjGTEI8Iqc9AuezShCB508ixlKP344VE3lrwoqT
0/czfe1MtRsobtW/i81V9N3lvuBiS0l/BWYslchDP/0K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org