Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/1-9o_VyT5hI0mTkMPK2_HHGOc62g.roa
File: 1-9o_VyT5hI0mTkMPK2_HHGOc62g.roa (raw, json)
Hash identifier: UIEuLJa58qBholcfDOsexF6V5R5BeYyknXS38eYQNZQ=
Subject key identifier: FB:DA:3F:57:24:F9:84:8D:26:4E:43:0F:2B:6F:C7:1C:63:9C:EB:68
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 01856FD4EAEFD6E97A0BFEF4F5511051AA77
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/1-9o_VyT5hI0mTkMPK2_HHGOc62g.roa
Signing time: Mon 02 Jan 2023 00:15:02 +0000
ROA not before: Mon 02 Jan 2023 00:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204309
IP address blocks: 185.253.203.0/24 maxlen: 24
185.253.202.0/24 maxlen: 24
185.253.200.0/22 maxlen: 22
185.253.201.0/24 maxlen: 24
185.253.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:ea:ef:d6:e9:7a:0b:fe:f4:f5:51:10:51:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Jan 2 00:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbda3f5724f9848d264e430f2b6fc71c639ceb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:b3:c9:ba:c2:d6:44:4b:c3:44:76:2c:66:
05:ed:27:b6:3e:90:af:93:83:71:b1:4f:a1:85:a7:
e0:37:8e:8f:c6:9e:1c:3c:75:98:67:17:ed:7a:11:
20:83:a2:24:1e:c2:1c:46:35:91:81:e9:b9:d0:63:
bc:3d:57:da:e1:84:ef:d7:c7:39:cf:40:e3:2f:bc:
37:1b:5c:fc:38:89:a3:99:cb:bf:6a:95:3a:eb:b5:
15:a2:34:b2:4b:2f:b2:70:2d:7b:fe:c2:98:c7:fa:
b1:5d:50:0b:51:45:e4:28:de:f3:6d:2f:dd:4d:51:
d5:2b:15:8b:23:04:86:87:29:86:c3:20:00:4a:00:
24:c7:e3:c6:03:73:3a:fb:3a:25:bc:08:d0:8d:fb:
17:9b:41:c9:70:17:ac:83:cd:ad:aa:2e:5c:29:e0:
87:bb:aa:14:30:6d:a2:ed:65:4a:f5:48:87:04:58:
ab:8a:99:79:f0:55:7c:73:a5:ee:46:90:84:df:9f:
64:55:43:47:bf:cd:28:a5:80:b3:ad:66:04:b0:19:
9b:1d:52:5e:c1:21:65:3c:df:55:16:0f:56:ea:31:
5e:14:f3:d3:0f:8e:19:16:41:55:90:70:ae:1f:5b:
b8:6e:4f:5e:16:9f:1f:4a:87:9a:9e:3c:fe:0a:8d:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:3F:57:24:F9:84:8D:26:4E:43:0F:2B:6F:C7:1C:63:9C:EB:68
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/1-9o_VyT5hI0mTkMPK2_HHGOc62g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e4:a4:7b:3b:29:a9:4d:49:53:b2:4b:fa:d3:fc:94:a4:d7:
1c:63:a5:0a:44:5c:8e:c2:61:44:50:fe:aa:48:8d:8b:7d:ee:
75:32:d4:92:7c:5a:50:ba:8c:a0:04:0e:1f:69:dc:f8:f1:45:
2b:1a:bd:e2:f7:ba:e4:a0:be:f9:a7:aa:80:7c:e5:a7:ad:e2:
de:d9:d2:51:74:90:05:bb:ac:c7:2c:3c:c7:47:3e:5f:a3:a4:
ea:11:3c:0e:89:89:30:99:22:b1:b7:db:ea:2a:e5:1c:05:f5:
da:37:cb:f0:d1:8f:f1:69:fd:bf:d3:e7:55:85:5d:74:f4:1a:
4a:64:cf:4a:dd:95:b4:23:a2:a4:fa:d0:c5:de:95:43:bc:f3:
79:5c:fe:98:93:ef:cd:87:10:b8:74:a4:c8:a9:17:59:30:78:
f1:05:be:35:87:56:a3:9b:05:6a:f6:20:e5:2c:12:09:14:ac:
40:5d:61:33:29:2d:33:1c:f1:da:ee:c5:84:c6:42:92:11:9c:
07:5b:4d:07:3d:3c:26:a9:75:b0:18:f9:1e:c6:45:c3:7b:f7:
58:a5:33:1f:10:38:2d:5e:17:fa:95:b3:5e:3f:45:4d:86:92:
4b:c2:66:c5:15:9b:6e:20:ed:8f:1f:9e:95:21:95:fb:76:cb:
a9:5a:89:4c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVv1Orv1ul6C/709VEQUap3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWI2ZGMzYmMyMmY2YzM2YTAzOTg1NTUzNGIyZDQxYWJi
MTI0MjMwHhcNMjMwMTAyMDAxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmRhM2Y1NzI0Zjk4NDhkMjY0ZTQzMGYyYjZmYzcxYzYzOWNlYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJazybrC1kRLw0R2LGYF7Se2PpCv
k4NxsU+hhafgN46Pxp4cPHWYZxftehEgg6IkHsIcRjWRgem50GO8PVfa4YTv18c5
z0DjL7w3G1z8OImjmcu/apU667UVojSySy+ycC17/sKYx/qxXVALUUXkKN7zbS/d
TVHVKxWLIwSGhymGwyAASgAkx+PGA3M6+zolvAjQjfsXm0HJcBesg82tqi5cKeCH
u6oUMG2i7WVK9UiHBFiripl58FV8c6XuRpCE359kVUNHv80opYCzrWYEsBmbHVJe
wSFlPN9VFg9W6jFeFPPTD44ZFkFVkHCuH1u4bk9eFp8fSoeanjz+Co2UdQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvaP1ck+YSNJk5DDytvxxxjnOtoMB8GA1UdIwQY
MBaAFMWbbcO8IvbDagOYVVNLLUGrsSQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjkt
ZDJmNDBkZTA0OWI3LzEvMS05b19WeVQ1aEkwbVRrTVBLMl9ISEdPYzYyZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDIvZjBlZmUzLTQxM2MtNDNkMi1iYjY5LWQyZjQwZGUwNDli
Ny8xL3hadHR3N3dpOXNOcUE1aFZVMHN0UWF1eEpDTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn9yDAN
BgkqhkiG9w0BAQsFAAOCAQEAreSkezspqU1JU7JL+tP8lKTXHGOlCkRcjsJhRFD+
qkiNi33udTLUknxaULqMoAQOH2nc+PFFKxq94ve65KC++aeqgHzlp63i3tnSUXSQ
Bbusxyw8x0c+X6Ok6hE8DomJMJkisbfb6irlHAX12jfL8NGP8Wn9v9PnVYVddPQa
SmTPSt2VtCOipPrQxd6VQ7zzeVz+mJPvzYcQuHSkyKkXWTB48QW+NYdWo5sFavYg
5SwSCRSsQF1hMyktMxzx2u7FhMZCkhGcB1tNBz08Jql1sBj5HsZFw3v3WKUzHxA4
LV4X+pWzXj9FTYaSS8JmxRWbbiDtjx+elSGV+3bLqVqJTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:14 2024 by rpki-client on console-ams.rpki-client.org