Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/_259IyJMd_H2Qd7hPnfHEspaLiw.roa
File: _259IyJMd_H2Qd7hPnfHEspaLiw.roa (raw, json)
Hash identifier: z1aSOLs4LSatX3LiYbkIXIJYV8IMW8gxUXS9chUBr8Q=
Subject key identifier: FF:6E:7D:23:22:4C:77:F1:F6:41:DE:E1:3E:77:C7:12:CA:5A:2E:2C
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 0186908BA1855E110F2F801A46E53C8CC5C3
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/_259IyJMd_H2Qd7hPnfHEspaLiw.roa
Signing time: Mon 27 Feb 2023 01:45:15 +0000
ROA not before: Mon 27 Feb 2023 01:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210374
IP address blocks: 185.83.215.0/24 maxlen: 24
2a05:9f04::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:90:8b:a1:85:5e:11:0f:2f:80:1a:46:e5:3c:8c:c5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Feb 27 01:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff6e7d23224c77f1f641dee13e77c712ca5a2e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:0f:97:3f:08:ef:bc:3a:7f:8b:78:6c:59:
57:34:03:c3:28:7c:aa:dc:43:96:09:8d:fa:59:54:
d9:4e:87:53:67:69:d8:56:d4:3a:85:67:8f:d4:86:
09:e7:63:45:14:fa:52:ae:74:15:b2:30:db:1a:5a:
82:6f:df:c8:21:c7:fc:62:31:8a:fd:67:b0:56:c2:
7d:0d:73:62:74:d8:4e:1a:6f:e6:01:b5:87:b8:46:
0d:d1:b9:13:25:e6:d6:47:4d:7d:61:33:a9:25:40:
b0:e3:34:9c:ba:e4:70:2b:73:0b:d1:64:05:b9:a6:
93:ab:cf:72:04:93:a6:f2:79:21:3e:2e:ae:6b:2d:
66:77:58:b8:a8:f4:da:77:b3:3a:ed:8c:55:30:6d:
37:ab:74:ae:93:9a:d4:d7:a4:b6:cc:0c:cd:3e:41:
83:38:da:e6:39:23:a7:3a:ce:77:6d:68:8f:c1:c8:
4b:cd:05:86:49:f9:fb:e4:ba:92:6b:b6:dc:8b:41:
d0:e1:51:07:41:d0:a0:5e:c5:61:d8:cd:cb:ab:ba:
7f:d0:af:10:71:ed:b5:e7:42:56:9c:1f:d3:18:55:
63:fe:aa:2e:4e:76:e2:40:7f:ee:1e:c9:30:05:52:
83:dd:44:0c:90:1f:b2:a8:b2:32:2e:da:94:a6:d8:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:7D:23:22:4C:77:F1:F6:41:DE:E1:3E:77:C7:12:CA:5A:2E:2C
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/_259IyJMd_H2Qd7hPnfHEspaLiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.215.0/24
IPv6:
2a05:9f04::/40
Signature Algorithm: sha256WithRSAEncryption
08:12:b1:bf:ca:c1:15:a6:78:e1:86:b4:22:e4:66:3c:fa:a1:
3f:fc:cf:10:6a:bf:49:a7:11:ab:5b:f0:99:41:86:5b:b4:24:
e6:fe:7e:9e:a8:89:bb:67:2d:9e:a6:35:30:c3:a1:a6:47:c1:
e0:33:02:b4:f9:91:ac:b9:97:32:3c:52:d0:20:94:94:02:7e:
59:4e:04:23:4e:25:d1:90:d2:b0:a4:f2:b6:6b:fc:3b:d6:8d:
4d:e5:65:03:ff:b4:0b:b7:03:6c:c4:77:3e:54:c5:95:fe:1e:
ce:17:36:16:07:e9:22:3f:c1:f3:07:5b:30:96:44:49:e7:45:
60:b9:3e:ed:17:7e:b3:e2:02:5a:af:42:77:bf:ec:5b:d8:ef:
1e:66:b9:90:04:52:22:44:4b:6a:ed:7d:62:08:4f:33:08:c3:
31:f0:a6:c2:e9:01:54:b5:98:8f:91:47:b6:46:08:3f:49:9d:
a8:0c:d6:4d:ef:c0:3c:4b:7c:87:9d:8a:92:25:93:92:0e:4f:
e3:ce:37:42:55:65:38:a9:83:91:80:11:7f:30:c7:17:da:5c:
c9:65:2c:9e:a5:96:d7:d3:04:87:39:03:71:b7:50:4b:67:62:
8d:c7:6f:f5:b6:60:29:c6:66:01:61:a4:6d:36:be:a0:82:28:
67:2f:51:94
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYaQi6GFXhEPL4AaRuU8jMXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4
NmQzY2EwHhcNMjMwMjI3MDE0NTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjZlN2QyMzIyNGM3N2YxZjY0MWRlZTEzZTc3YzcxMmNhNWEyZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ8Plz8I77w6f4t4bFlXNAPDKHyq
3EOWCY36WVTZTodTZ2nYVtQ6hWeP1IYJ52NFFPpSrnQVsjDbGlqCb9/IIcf8YjGK
/WewVsJ9DXNidNhOGm/mAbWHuEYN0bkTJebWR019YTOpJUCw4zScuuRwK3ML0WQF
uaaTq89yBJOm8nkhPi6uay1md1i4qPTad7M67YxVMG03q3Suk5rU16S2zAzNPkGD
ONrmOSOnOs53bWiPwchLzQWGSfn75LqSa7bci0HQ4VEHQdCgXsVh2M3Lq7p/0K8Q
ce2150JWnB/TGFVj/qouTnbiQH/uHskwBVKD3UQMkB+yqLIyLtqUpth8EwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFP9ufSMiTHfx9kHe4T53xxLKWi4sMB8GA1UdIwQY
MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt
MDU4NWRlNGQ0ZWU3LzEvXzI1OUl5Sk1kX0gyUWQ3aFBuZkhFc3BhTGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3
LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuVPXMA4E
AgACMAgDBgAqBZ8EADANBgkqhkiG9w0BAQsFAAOCAQEACBKxv8rBFaZ44Ya0IuRm
PPqhP/zPEGq/SacRq1vwmUGGW7Qk5v5+nqiJu2ctnqY1MMOhpkfB4DMCtPmRrLmX
MjxS0CCUlAJ+WU4EI04l0ZDSsKTytmv8O9aNTeVlA/+0C7cDbMR3PlTFlf4ezhc2
FgfpIj/B8wdbMJZESedFYLk+7Rd+s+ICWq9Cd7/sW9jvHma5kARSIkRLau19YghP
MwjDMfCmwukBVLWYj5FHtkYIP0mdqAzWTe/APEt8h52KkiWTkg5P4843QlVlOKmD
kYARfzDHF9pcyWUsnqWW19MEhzkDcbdQS2dijcdv9bZgKcZmAWGkbTa+oIIoZy9R
lA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org