Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/rF8FvBRoz-L-LxG_pMHgyl89aA8.roa
File: rF8FvBRoz-L-LxG_pMHgyl89aA8.roa (raw, json)
Hash identifier: F/H/j2Zr5aVpsJDg2wCNNLN3Wgu/H3XTOavOVYyTy/c=
Subject key identifier: AC:5F:05:BC:14:68:CF:E2:FE:2F:11:BF:A4:C1:E0:CA:5F:3D:68:0F
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 018572D5B31131EED453DC6DEF5C608B0AF3
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/rF8FvBRoz-L-LxG_pMHgyl89aA8.roa
Signing time: Mon 02 Jan 2023 14:14:45 +0000
ROA not before: Mon 02 Jan 2023 14:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206298
IP address blocks: 185.190.76.0/22 maxlen: 22
2a0a:5c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b3:11:31:ee:d4:53:dc:6d:ef:5c:60:8b:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jan 2 14:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac5f05bc1468cfe2fe2f11bfa4c1e0ca5f3d680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:d2:f2:4e:84:50:7c:c8:6f:fc:17:63:48:
e0:3d:28:97:94:c4:0e:5c:a0:37:e0:28:f4:74:41:
ed:90:3e:10:e2:00:e1:2f:1d:81:4e:ce:11:a8:de:
f4:73:3d:20:7c:8d:c5:f0:d6:cd:33:0c:72:d5:1b:
39:6f:27:9f:07:e9:21:a2:26:9d:50:ce:00:fe:52:
79:fe:19:74:61:c4:ea:eb:20:f9:07:ac:46:9d:32:
fd:83:19:a2:bb:e7:f1:0f:4a:e1:f4:99:37:5a:ee:
68:d4:80:b8:84:49:5a:ca:bf:94:99:31:3f:19:b7:
c0:92:67:97:ee:97:63:b1:8c:03:a6:5f:e4:dc:c8:
af:3a:2e:c5:db:f6:67:be:dc:1f:84:8b:85:73:82:
0e:31:a5:22:3e:fd:f8:05:06:2e:07:6a:c2:7d:76:
93:21:ff:ed:eb:c4:28:00:31:5e:77:3f:3b:24:58:
62:25:b1:b0:26:52:a4:17:21:09:67:33:d6:31:15:
97:c4:f7:43:3a:51:f8:fc:ab:67:97:65:3d:e4:f8:
1c:3e:b8:e6:75:d7:e3:f7:73:8d:e8:f7:11:e5:2b:
8a:77:0e:72:7a:f1:f4:50:23:3c:74:b0:fe:24:3d:
44:c1:d0:cb:6f:97:19:9f:36:df:ae:26:06:b1:53:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:05:BC:14:68:CF:E2:FE:2F:11:BF:A4:C1:E0:CA:5F:3D:68:0F
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/rF8FvBRoz-L-LxG_pMHgyl89aA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.76.0/22
IPv6:
2a0a:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:55:58:5c:28:cf:78:f6:41:cf:22:c1:0d:8b:a0:1a:2c:20:
7f:f3:22:96:3a:f2:70:28:e8:a8:9c:94:1b:62:69:60:a3:b0:
36:6e:70:42:d5:73:04:ad:c8:66:c5:e9:30:46:85:c1:ab:d9:
92:0c:dd:b9:bc:45:9d:4a:a2:01:2c:14:44:80:91:77:24:35:
ad:e4:d3:25:95:60:f6:36:b3:f6:23:68:c2:10:8d:86:10:30:
47:77:52:b0:ca:a3:ae:79:06:98:77:82:6c:64:db:bd:c0:96:
77:f7:bf:2c:16:f7:68:28:5f:29:e3:b0:54:7c:11:a3:3a:f0:
86:ce:29:e1:c1:07:01:53:79:7a:23:d5:30:52:b7:8d:f3:2e:
9c:a7:03:1e:98:18:30:04:b5:9c:eb:bf:8a:03:f0:e6:74:39:
a7:28:0f:75:64:30:71:52:c9:3b:18:20:11:d0:26:be:2e:b9:
b4:af:3c:04:6a:20:ee:e1:71:b9:96:09:e1:e3:6b:a7:85:6b:
9d:f8:7d:97:ba:fa:e0:74:06:e1:04:72:2f:34:6d:e9:0e:0d:
4e:fb:57:68:c4:97:f5:70:fe:5e:a4:1f:97:98:c2:4e:9f:02:
ff:1a:5d:33:49:9d:62:93:09:93:52:4a:6e:00:5f:2f:9e:50:
8e:45:9c:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVy1bMRMe7UU9xt71xgiwrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjFjY2U0ZDViYWQ4ZDljMmVkY2E0MDBlMmJmYzU0YTI0
MTg1YmYwHhcNMjMwMTAyMTQxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzVmMDViYzE0NjhjZmUyZmUyZjExYmZhNGMxZTBjYTVmM2Q2ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRnS8k6EUHzIb/wXY0jgPSiXlMQO
XKA34Cj0dEHtkD4Q4gDhLx2BTs4RqN70cz0gfI3F8NbNMwxy1Rs5byefB+khoiad
UM4A/lJ5/hl0YcTq6yD5B6xGnTL9gxmiu+fxD0rh9Jk3Wu5o1IC4hElayr+UmTE/
GbfAkmeX7pdjsYwDpl/k3MivOi7F2/ZnvtwfhIuFc4IOMaUiPv34BQYuB2rCfXaT
If/t68QoADFedz87JFhiJbGwJlKkFyEJZzPWMRWXxPdDOlH4/Ktnl2U95PgcPrjm
ddfj93ON6PcR5SuKdw5yevH0UCM8dLD+JD1EwdDLb5cZnzbfriYGsVN/5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKxfBbwUaM/i/i8Rv6TB4MpfPWgPMB8GA1UdIwQY
MBaAFDWxzOTVutjZwu3KQA4r/FSiQYW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEt
Y2ZkM2I1M2RjNDU2LzEvckY4RnZCUm96LUwtTHhHX3BNSGd5bDg5YUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEtY2ZkM2I1M2RjNDU2
LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub5MMA0E
AgACMAcDBQMqCgXAMA0GCSqGSIb3DQEBCwUAA4IBAQCqVVhcKM949kHPIsENi6Aa
LCB/8yKWOvJwKOionJQbYmlgo7A2bnBC1XMErchmxekwRoXBq9mSDN25vEWdSqIB
LBREgJF3JDWt5NMllWD2NrP2I2jCEI2GEDBHd1KwyqOueQaYd4JsZNu9wJZ3978s
FvdoKF8p47BUfBGjOvCGzinhwQcBU3l6I9UwUreN8y6cpwMemBgwBLWc67+KA/Dm
dDmnKA91ZDBxUsk7GCAR0Ca+Lrm0rzwEaiDu4XG5lgnh42unhWud+H2XuvrgdAbh
BHIvNG3pDg1O+1doxJf1cP5epB+XmMJOnwL/Gl0zSZ1ikwmTUkpuAF8vnlCORZzX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org