Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/1-TtQB00Dehoo8t_a0kAwaLgHjRE.roa
File: 1-TtQB00Dehoo8t_a0kAwaLgHjRE.roa (raw, json)
Hash identifier: YJ9lT9+ZKrL2X6+A6PqihX4+5QYncnjgUkRDHKG7f78=
Subject key identifier: F9:3B:50:07:4D:03:7A:1A:28:F2:DF:DA:D2:40:30:68:B8:07:8D:11
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 018B4C9E2AB6770A9EC7FD3C4581A1A55EF4
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/1-TtQB00Dehoo8t_a0kAwaLgHjRE.roa
Signing time: Fri 20 Oct 2023 10:25:15 +0000
ROA not before: Fri 20 Oct 2023 10:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211953
IP address blocks: 185.189.52.0/24 maxlen: 24
185.189.53.0/24 maxlen: 24
185.189.54.0/24 maxlen: 24
185.189.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:9e:2a:b6:77:0a:9e:c7:fd:3c:45:81:a1:a5:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Oct 20 10:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93b50074d037a1a28f2dfdad2403068b8078d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:16:16:a6:92:f3:88:5f:4a:ca:39:28:2e:
19:db:ae:cb:98:ea:31:37:05:a5:c9:bb:8a:8f:c3:
9a:d0:06:75:28:08:52:81:95:f1:1c:08:33:5b:fc:
54:f6:c5:1d:d0:89:ab:bb:73:f6:ce:c3:4b:9d:2a:
02:5a:9d:e5:8b:9b:ee:d9:dc:3c:b6:98:d8:a6:43:
8b:ef:2e:dd:99:41:77:1e:9d:4d:00:6b:b9:5d:3f:
32:4f:64:cc:37:de:47:75:04:77:79:ac:9d:85:13:
6c:90:4f:9c:99:a3:28:14:89:93:a8:b3:e0:37:17:
79:09:9b:19:bd:a2:e0:d7:e6:00:cc:44:c7:88:79:
2b:6e:67:11:89:da:2f:92:d4:9d:6a:18:bf:09:94:
fa:ef:5a:c4:8f:02:fb:70:b2:f5:7e:82:f4:2d:85:
0c:1e:3b:21:c8:e4:b4:5e:ea:ee:70:5e:d0:e9:97:
70:fa:ae:ac:64:6c:d0:7f:e2:d6:23:c8:d8:7c:64:
a3:89:52:e7:af:05:cf:e9:4f:3c:26:99:04:a7:d8:
5f:3d:0f:5d:b2:4e:d0:0e:f7:37:6e:bf:34:c6:e4:
ca:05:c9:ed:58:4d:52:96:c3:31:17:78:ba:94:1a:
45:4f:4e:d2:80:93:35:cc:82:7c:7b:9d:b7:17:5a:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3B:50:07:4D:03:7A:1A:28:F2:DF:DA:D2:40:30:68:B8:07:8D:11
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/1-TtQB00Dehoo8t_a0kAwaLgHjRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.52.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:4d:80:fe:c5:31:96:68:98:15:ae:4d:33:0a:45:2b:12:6c:
ae:06:89:84:61:78:39:c9:db:30:2b:69:48:4c:e0:0a:e2:f8:
47:84:ec:ab:ad:e0:1c:18:37:f2:64:3f:9d:47:50:14:55:b8:
31:f6:51:49:6a:37:e5:94:db:27:8b:d0:4c:fb:26:10:e2:62:
fc:4d:2b:97:4a:3e:52:37:83:f4:f2:2b:75:97:08:c3:7b:18:
a2:9a:db:dd:dc:48:e5:42:62:22:62:2b:47:c1:88:61:0b:eb:
f0:68:a2:90:03:a5:2b:db:ac:9c:46:20:a5:d0:a8:32:93:2e:
e7:fe:2d:18:ad:16:6a:34:c1:49:b4:2c:1b:95:86:12:76:2e:
f3:0e:b6:94:99:fe:66:25:34:5b:fe:1f:0b:11:f0:7c:8e:83:
05:b9:9e:ec:30:f9:80:fe:6e:1a:48:06:bb:48:dc:4e:f3:b5:
94:6f:53:66:93:50:ee:7b:23:63:16:8e:22:3e:9b:92:95:28:
aa:63:27:55:d4:05:39:fb:45:ea:da:95:9f:43:35:9f:b5:e9:
61:14:65:63:08:29:26:50:5b:37:ab:35:9d:99:d5:2c:38:c5:
3a:61:7c:02:25:18:45:c4:f8:fd:fd:70:0c:4f:2a:7d:c3:e9:
b9:1e:86:12
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtMniq2dwqex/08RYGhpV70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2
Mzk4OTgwHhcNMjMxMDIwMTAyNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNiNTAwNzRkMDM3YTFhMjhmMmRmZGFkMjQwMzA2OGI4MDc4ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUsWFqaS84hfSso5KC4Z267LmOox
NwWlybuKj8Oa0AZ1KAhSgZXxHAgzW/xU9sUd0Imru3P2zsNLnSoCWp3li5vu2dw8
tpjYpkOL7y7dmUF3Hp1NAGu5XT8yT2TMN95HdQR3eaydhRNskE+cmaMoFImTqLPg
Nxd5CZsZvaLg1+YAzETHiHkrbmcRidovktSdahi/CZT671rEjwL7cLL1foL0LYUM
HjshyOS0XurucF7Q6Zdw+q6sZGzQf+LWI8jYfGSjiVLnrwXP6U88JpkEp9hfPQ9d
sk7QDvc3br80xuTKBcntWE1SlsMxF3i6lBpFT07SgJM1zIJ8e523F1p3QQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPk7UAdNA3oaKPLf2tJAMGi4B40RMB8GA1UdIwQY
MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt
NjdmYmYyMTU1ZTRlLzEvMS1UdFFCMDBEZWhvbzh0X2Ewa0F3YUxnSGpSRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTIvN2Q2NmRlLTVmMGMtNDc2NS1hMGY2LTY3ZmJmMjE1NWU0
ZS8xL1lINWNyX1QwZXl1TnlCekRiSTQwWm1Kam1KZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm9NDAN
BgkqhkiG9w0BAQsFAAOCAQEAqk2A/sUxlmiYFa5NMwpFKxJsrgaJhGF4OcnbMCtp
SEzgCuL4R4Tsq63gHBg38mQ/nUdQFFW4MfZRSWo35ZTbJ4vQTPsmEOJi/E0rl0o+
UjeD9PIrdZcIw3sYoprb3dxI5UJiImIrR8GIYQvr8GiikAOlK9usnEYgpdCoMpMu
5/4tGK0WajTBSbQsG5WGEnYu8w62lJn+ZiU0W/4fCxHwfI6DBbme7DD5gP5uGkgG
u0jcTvO1lG9TZpNQ7nsjYxaOIj6bkpUoqmMnVdQFOftF6tqVn0M1n7XpYRRlYwgp
JlBbN6s1nZnVLDjFOmF8AiUYRcT4/f1wDE8qfcPpuR6GEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:01 2024 by rpki-client on console-ams.rpki-client.org