Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/VW2NkcvF_YY-pyRDrnstcM1kfIw.roa
File: VW2NkcvF_YY-pyRDrnstcM1kfIw.roa (raw, json)
Hash identifier: TDTVsVqdS7KDcUELS8vUaIwCIsBRrNWjKUAP16vgqnc=
Subject key identifier: 55:6D:8D:91:CB:C5:FD:86:3E:A7:24:43:AE:7B:2D:70:CD:64:7C:8C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 018CC801AF631AE081214517C2882C7DBED2
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/VW2NkcvF_YY-pyRDrnstcM1kfIw.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205721
IP address blocks: 185.208.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:af:63:1a:e0:81:21:45:17:c2:88:2c:7d:be:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=556d8d91cbc5fd863ea72443ae7b2d70cd647c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:80:45:5e:c7:b6:31:3f:2e:49:d8:58:09:
92:a2:74:a1:79:cc:17:1e:34:29:bb:b3:f4:7b:dd:
aa:60:31:d0:c5:de:fb:0b:f9:e6:4c:eb:5d:39:90:
d4:59:36:62:d7:ea:00:f8:3f:82:06:cc:c6:c5:1a:
1a:87:d4:02:20:82:af:12:8e:3b:0f:70:b7:a7:3a:
34:54:4f:f1:1c:0a:97:18:66:67:a6:d3:c0:c1:a5:
97:bb:b9:c5:d6:02:d2:97:a4:59:ca:d5:34:48:43:
a8:3e:b4:29:3a:c2:8e:d5:c8:4c:67:28:00:3f:0e:
58:66:1b:27:c9:67:a5:e1:62:a5:58:ea:ea:ca:b5:
dc:21:50:7c:fe:bb:81:c6:b5:eb:8b:15:6a:20:38:
82:31:8f:98:6e:f0:3b:ef:c6:0a:ba:5a:38:5a:a5:
cb:81:a6:c0:f4:18:b1:e0:0e:cc:02:d7:f5:7c:9a:
fe:73:7b:89:60:46:60:63:4e:25:fb:58:cf:20:ee:
4b:a9:b0:fc:3f:2e:68:4a:9c:9f:dc:c2:d0:83:26:
78:6a:b5:af:65:e9:76:55:7f:4f:0f:f3:8e:44:85:
71:e3:88:6e:81:63:6c:8f:3d:80:0a:f4:83:0d:ee:
1c:42:df:df:67:69:16:0d:92:00:dc:3f:87:05:b1:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:8D:91:CB:C5:FD:86:3E:A7:24:43:AE:7B:2D:70:CD:64:7C:8C
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/VW2NkcvF_YY-pyRDrnstcM1kfIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:38:4b:25:a5:96:3e:50:9a:0c:a2:e4:00:f6:24:82:73:92:
6a:f2:89:a7:c8:74:e8:95:5b:b5:5a:ac:47:b6:1e:5c:b5:6c:
a0:86:57:18:59:97:be:cd:e2:19:10:9f:b3:db:d3:99:39:0e:
61:b5:a7:12:4f:22:42:2c:65:49:f6:75:ef:f1:03:53:7c:3a:
d1:91:2a:b1:66:5a:eb:cd:62:5f:40:03:61:03:55:a9:14:bf:
6b:5b:d3:5a:71:a5:13:50:de:35:98:8b:6d:8f:fe:1a:ed:a3:
5e:61:af:1b:b0:e7:b9:24:d1:28:31:be:53:38:82:aa:7e:ac:
f0:b4:7e:bd:18:1a:db:53:8c:28:e3:43:3c:4e:b4:d1:ef:3a:
25:8c:ed:b1:22:e3:67:df:ba:a0:28:42:93:9e:d1:b5:e1:09:
0f:8e:a6:fb:5a:7b:c1:1a:65:46:3a:2b:1d:af:39:84:af:ab:
75:04:17:43:7c:96:d1:1a:1f:de:7a:e0:22:30:df:ff:3b:e5:
4a:ad:65:6e:69:e7:08:1a:8d:a1:81:ea:48:16:fd:55:af:b4:
98:8a:dd:14:7e:b4:d9:06:bc:f5:2f:93:17:db:e0:ad:56:d6:
01:02:67:fe:2b:44:87:07:4a:e0:c8:17:47:47:14:df:bf:8a:
bd:01:02:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAa9jGuCBIUUXwogsfb7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My
ZjE5MmMwHhcNMjQwMTAyMDIzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTZkOGQ5MWNiYzVmZDg2M2VhNzI0NDNhZTdiMmQ3MGNkNjQ3YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+uARV7HtjE/LknYWAmSonShecwX
HjQpu7P0e92qYDHQxd77C/nmTOtdOZDUWTZi1+oA+D+CBszGxRoah9QCIIKvEo47
D3C3pzo0VE/xHAqXGGZnptPAwaWXu7nF1gLSl6RZytU0SEOoPrQpOsKO1chMZygA
Pw5YZhsnyWel4WKlWOrqyrXcIVB8/ruBxrXrixVqIDiCMY+YbvA778YKulo4WqXL
gabA9Bix4A7MAtf1fJr+c3uJYEZgY04l+1jPIO5LqbD8Py5oSpyf3MLQgyZ4arWv
Zel2VX9PD/OORIVx44hugWNsjz2ACvSDDe4cQt/fZ2kWDZIA3D+HBbHfWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVtjZHLxf2GPqckQ657LXDNZHyMMB8GA1UdIwQY
MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt
YjE0Y2M5MWM3NzZjLzEvVlcyTmtjdkZfWVktcHlSRHJuc3RjTTFrZkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj
LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudBQMA0G
CSqGSIb3DQEBCwUAA4IBAQCeOEslpZY+UJoMouQA9iSCc5Jq8omnyHTolVu1WqxH
th5ctWyghlcYWZe+zeIZEJ+z29OZOQ5htacSTyJCLGVJ9nXv8QNTfDrRkSqxZlrr
zWJfQANhA1WpFL9rW9NacaUTUN41mIttj/4a7aNeYa8bsOe5JNEoMb5TOIKqfqzw
tH69GBrbU4wo40M8TrTR7zoljO2xIuNn37qgKEKTntG14QkPjqb7WnvBGmVGOisd
rzmEr6t1BBdDfJbRGh/eeuAiMN//O+VKrWVuaecIGo2hgepIFv1Vr7SYit0UfrTZ
Brz1L5MX2+CtVtYBAmf+K0SHB0rgyBdHRxTfv4q9AQKu
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:09 2025 by rpki-client