Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/gJ2X_NrrUI7J7NUjdAf-YbKD60U.roa
File: gJ2X_NrrUI7J7NUjdAf-YbKD60U.roa (raw, json)
Hash identifier: HVUikhqTMaShLyxoewKGY9+fuiFTWU5F4As7/Yg5tFo=
Subject key identifier: 80:9D:97:FC:DA:EB:50:8E:C9:EC:D5:23:74:07:FE:61:B2:83:EB:45
Certificate issuer: /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial: 0186C695373087C65437784F3BF2DE453501
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/gJ2X_NrrUI7J7NUjdAf-YbKD60U.roa
Signing time: Thu 09 Mar 2023 13:35:13 +0000
ROA not before: Thu 09 Mar 2023 13:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59829
IP address blocks: 185.131.206.0/24 maxlen: 24
2a12:b340::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:95:37:30:87:c6:54:37:78:4f:3b:f2:de:45:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
Validity
Not Before: Mar 9 13:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=809d97fcdaeb508ec9ecd5237407fe61b283eb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:87:5e:f9:e5:a4:3b:f1:ef:c6:f0:fe:da:
e4:db:d5:17:82:cf:1c:63:a5:bd:0c:a4:68:40:b8:
53:a3:d1:97:4f:b8:d3:eb:4f:87:bc:25:d5:96:e7:
1b:ef:d3:c5:d2:f4:32:a3:6f:74:92:d6:d9:0b:9e:
e7:21:6f:5b:f2:16:e6:38:37:96:92:20:c2:cd:87:
6d:ff:21:a2:2d:0b:c9:49:69:38:05:89:13:18:cc:
3f:fc:ea:8a:c0:7e:06:cb:09:d5:ea:92:4b:21:61:
5c:30:41:24:6a:56:68:d5:cf:7d:7d:39:7a:ce:0f:
c5:8f:46:19:48:22:49:e8:b5:d9:b4:a6:ad:6b:f6:
70:7e:d3:90:f7:71:87:17:6b:0d:44:1b:69:1d:55:
fb:d3:7d:06:48:c2:94:f0:85:2a:e2:60:91:f5:60:
e9:f9:eb:8a:5a:08:f6:c9:ea:62:56:09:24:fc:02:
87:30:6e:7c:a8:b0:5a:d6:25:ba:5b:ca:5f:c7:97:
83:5b:4b:f0:32:fa:b1:e9:f8:9d:c8:f9:af:0d:c2:
e7:20:30:31:e8:b6:5c:db:80:59:e7:48:89:69:5b:
fc:0e:01:c7:90:23:ba:f2:ee:d0:5a:89:33:de:84:
10:1e:ed:64:9c:9d:0a:a6:55:5d:3b:65:a9:78:57:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:97:FC:DA:EB:50:8E:C9:EC:D5:23:74:07:FE:61:B2:83:EB:45
X509v3 Authority Key Identifier:
keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/gJ2X_NrrUI7J7NUjdAf-YbKD60U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.206.0/24
IPv6:
2a12:b340::/29
Signature Algorithm: sha256WithRSAEncryption
4e:b1:4b:d8:0a:4b:7a:4b:79:81:95:2d:4d:9f:1b:44:56:21:
16:b4:69:40:80:77:6f:97:ca:07:68:59:27:14:9f:1a:74:3d:
45:c5:d4:39:db:02:13:f8:6b:b0:c8:f0:4d:32:e8:49:6b:4f:
66:ba:1c:ec:e5:b4:bf:b0:8f:cb:b6:c9:51:00:63:8b:63:1a:
a4:c0:2b:96:f9:2b:b5:24:20:43:0f:04:a7:d9:7c:d7:02:c9:
ac:c1:6c:66:f0:ae:b3:02:cd:f3:61:2f:c8:0e:20:ba:f1:63:
9b:17:4b:ec:f8:9f:42:b2:18:47:d0:7c:74:94:73:ed:b8:3f:
a1:d8:60:ea:f7:73:38:14:b5:53:0c:fb:ec:a5:67:6f:b2:d5:
95:d1:32:1b:d7:75:6f:69:05:8b:1a:08:b8:ac:43:ee:4d:ff:
5c:97:3f:2c:df:35:d3:d6:fb:aa:d9:03:60:4d:f9:d6:f3:de:
bb:e8:72:ef:cd:12:4d:38:a8:f8:12:d1:14:15:63:5b:22:99:
1e:63:62:51:e5:50:2b:ee:a0:d3:1b:6e:6d:17:31:70:cf:cc:
dc:77:47:31:61:cc:b0:e8:be:27:8f:75:d9:8a:fa:b6:82:64:
e5:06:00:e5:b9:50:30:cd:87:a3:64:0c:14:50:54:f0:d2:b8:
24:a1:76:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbGlTcwh8ZUN3hPO/LeRTUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNWNkZDUwNzNhYTU0M2RmNDQ4OTI4MGY2N2RhZTUzZmFj
MjYxNzkwHhcNMjMwMzA5MTMzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDlkOTdmY2RhZWI1MDhlYzllY2Q1MjM3NDA3ZmU2MWIyODNlYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZOHXvnlpDvx78bw/trk29UXgs8c
Y6W9DKRoQLhTo9GXT7jT60+HvCXVlucb79PF0vQyo290ktbZC57nIW9b8hbmODeW
kiDCzYdt/yGiLQvJSWk4BYkTGMw//OqKwH4GywnV6pJLIWFcMEEkalZo1c99fTl6
zg/Fj0YZSCJJ6LXZtKata/ZwftOQ93GHF2sNRBtpHVX7030GSMKU8IUq4mCR9WDp
+euKWgj2yepiVgkk/AKHMG58qLBa1iW6W8pfx5eDW0vwMvqx6fidyPmvDcLnIDAx
6LZc24BZ50iJaVv8DgHHkCO68u7QWokz3oQQHu1knJ0KplVdO2WpeFd74wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFICdl/za61COyezVI3QH/mGyg+tFMB8GA1UdIwQY
MBaAFOJc3VBzqlQ99EiSgPZ9rlP6wmF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGx6ZFVIT3FWRDMwU0pLQTluMnVVX3JDWVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YjBiOWItMWJiOS00Y2Y3LWEzZjQt
N2VmMTdkOTExZTBjLzEvZ0oyWF9OcnJVSTdKN05VamRBZi1ZYktENjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83YjBiOWItMWJiOS00Y2Y3LWEzZjQtN2VmMTdkOTExZTBj
LzEvNGx6ZFVIT3FWRDMwU0pLQTluMnVVX3JDWVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYPOMA0E
AgACMAcDBQMqErNAMA0GCSqGSIb3DQEBCwUAA4IBAQBOsUvYCkt6S3mBlS1NnxtE
ViEWtGlAgHdvl8oHaFknFJ8adD1FxdQ52wIT+GuwyPBNMuhJa09muhzs5bS/sI/L
tslRAGOLYxqkwCuW+Su1JCBDDwSn2XzXAsmswWxm8K6zAs3zYS/IDiC68WObF0vs
+J9CshhH0Hx0lHPtuD+h2GDq93M4FLVTDPvspWdvstWV0TIb13VvaQWLGgi4rEPu
Tf9clz8s3zXT1vuq2QNgTfnW89676HLvzRJNOKj4EtEUFWNbIpkeY2JR5VAr7qDT
G25tFzFwz8zcd0cxYcyw6L4nj3XZivq2gmTlBgDluVAwzYejZAwUUFTw0rgkoXYr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:48 2024 by rpki-client on console-ams.rpki-client.org