Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Y2SpBM1TxVQ3nWDSim9XyjNLcSE.roa
File: Y2SpBM1TxVQ3nWDSim9XyjNLcSE.roa (raw, json)
Hash identifier: OE1uvOgRYl6ZgNZKwjYc4dQmST1WNUK8/4j4GrMR5ZM=
Subject key identifier: 63:64:A9:04:CD:53:C5:54:37:9D:60:D2:8A:6F:57:CA:33:4B:71:21
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 018CCA994531178C3B641521B2246B8357EA
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Y2SpBM1TxVQ3nWDSim9XyjNLcSE.roa
Signing time: Tue 02 Jan 2024 14:34:51 +0000
ROA not before: Tue 02 Jan 2024 14:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203324
IP address blocks: 185.238.85.0/24 maxlen: 24
185.238.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 07:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:45:31:17:8c:3b:64:15:21:b2:24:6b:83:57:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jan 2 14:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6364a904cd53c554379d60d28a6f57ca334b7121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:56:2f:fa:ec:77:2f:27:34:51:2b:c2:66:
2c:27:eb:55:86:c1:d3:87:4d:cc:a9:99:89:09:fc:
f5:73:ec:df:b3:83:97:1f:3b:e2:b7:17:fe:cc:94:
bf:1b:92:cf:9e:d9:71:99:b4:6e:aa:a3:aa:b3:56:
9a:86:48:f9:08:87:c3:8e:57:68:64:0e:74:b3:13:
25:03:d1:eb:cc:15:a2:3c:ca:8c:bb:a6:50:ae:f3:
4a:1f:30:1d:ad:52:a7:55:96:7d:1a:fb:49:31:ac:
d8:ff:38:f9:47:54:47:04:62:c3:ba:dc:c2:84:c7:
b6:40:b8:a3:38:82:aa:d4:f0:9c:f1:54:1e:17:39:
ad:89:bc:2e:33:82:bb:f0:b2:f6:81:ab:55:de:1a:
7e:9d:bb:1f:ec:24:9f:a9:df:60:26:a5:9b:c8:a8:
af:aa:88:c9:db:b1:2f:4f:45:56:74:75:0e:92:28:
98:e5:5b:c9:54:48:54:62:b7:cd:d2:33:1a:96:03:
b7:f9:ef:17:22:4a:09:f6:42:1d:fc:d7:5a:ff:38:
bf:fe:ec:ba:39:d9:c6:d1:c9:41:52:9e:41:72:d9:
c4:28:37:02:c6:68:9a:5e:3d:92:08:d0:bf:3f:46:
8a:dd:94:10:cf:6d:06:c4:20:44:df:12:05:0c:49:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:A9:04:CD:53:C5:54:37:9D:60:D2:8A:6F:57:CA:33:4B:71:21
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Y2SpBM1TxVQ3nWDSim9XyjNLcSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.85.0-185.238.86.255
Signature Algorithm: sha256WithRSAEncryption
68:74:75:13:91:50:7f:fe:d3:f4:9d:76:0e:36:88:74:4e:44:
e5:49:d9:2e:96:32:f7:4f:4f:4a:3d:0a:25:f4:d1:4d:3a:77:
90:7c:ed:ad:b5:7a:2d:e3:8c:2c:94:2d:1f:b0:67:2d:7f:36:
6a:fa:b6:67:c0:02:74:58:ae:46:33:c3:cd:ae:7e:92:64:f4:
4c:89:2d:1b:2b:ec:ae:cf:37:ea:61:94:70:27:b7:ab:cc:a0:
ba:88:a5:30:f4:e8:41:54:d8:01:7a:a4:b3:51:ba:87:28:6c:
70:9b:ba:9d:b3:bd:82:4c:5c:aa:c2:2b:30:e4:9a:5f:5b:36:
05:3c:bb:0b:4c:b1:1f:bc:e6:33:50:0c:cf:6b:3f:d4:f4:e9:
f1:54:85:ab:94:50:16:65:d2:bf:2f:63:f7:f5:b4:4d:3a:d9:
52:14:e9:47:08:b0:fa:53:c0:72:67:15:24:42:ba:71:76:7a:
23:dd:7c:6a:4a:a2:11:4c:89:b3:cb:3a:27:7f:f0:63:7b:87:
d0:bc:cf:20:b4:f3:b8:d5:66:25:77:39:b6:c9:31:b6:6c:12:
d6:e2:54:6e:e6:1c:dd:63:8d:83:11:9e:62:59:23:7a:3d:93:
9f:41:72:12:32:18:a3:e0:4c:ff:4c:a2:d9:ae:6f:3d:2e:3f:
48:f4:4e:91
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzKmUUxF4w7ZBUhsiRrg1fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjQwMTAyMTQzNDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzY0YTkwNGNkNTNjNTU0Mzc5ZDYwZDI4YTZmNTdjYTMzNGI3MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutJWL/rsdy8nNFErwmYsJ+tVhsHT
h03MqZmJCfz1c+zfs4OXHzvitxf+zJS/G5LPntlxmbRuqqOqs1aahkj5CIfDjldo
ZA50sxMlA9HrzBWiPMqMu6ZQrvNKHzAdrVKnVZZ9GvtJMazY/zj5R1RHBGLDutzC
hMe2QLijOIKq1PCc8VQeFzmtibwuM4K78LL2gatV3hp+nbsf7CSfqd9gJqWbyKiv
qojJ27EvT0VWdHUOkiiY5VvJVEhUYrfN0jMalgO3+e8XIkoJ9kId/Nda/zi//uy6
OdnG0clBUp5BctnEKDcCxmiaXj2SCNC/P0aK3ZQQz20GxCBE3xIFDEnjlwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGNkqQTNU8VUN51g0opvV8ozS3EhMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvWTJTcEJNMVR4VlEzbldEU2ltOVh5ak5MY1NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC57lUD
BAC57lYwDQYJKoZIhvcNAQELBQADggEBAGh0dRORUH/+0/Sddg42iHROROVJ2S6W
MvdPT0o9CiX00U06d5B87a21ei3jjCyULR+wZy1/Nmr6tmfAAnRYrkYzw82ufpJk
9EyJLRsr7K7PN+phlHAnt6vMoLqIpTD06EFU2AF6pLNRuocobHCbup2zvYJMXKrC
KzDkml9bNgU8uwtMsR+85jNQDM9rP9T06fFUhauUUBZl0r8vY/f1tE062VIU6UcI
sPpTwHJnFSRCunF2eiPdfGpKohFMibPLOid/8GN7h9C8zyC087jVZiV3ObbJMbZs
EtbiVG7mHN1jjYMRnmJZI3o9k59BchIyGKPgTP9Motmubz0uP0j0TpE=
-----END CERTIFICATE-----
Generated at Tue Jun 25 11:22:20 2024 by rpki-client on console.sobornost.net