Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/fVsr7ILmhkVdjbs60ePDVptfcZ8.roa
File: fVsr7ILmhkVdjbs60ePDVptfcZ8.roa (raw, json)
Hash identifier: bLDgCxzT85DjyaT0vZ2gRin/eIRlJwf3CyAMr6dWlk0=
Subject key identifier: 7D:5B:2B:EC:82:E6:86:45:5D:8D:BB:3A:D1:E3:C3:56:9B:5F:71:9F
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 0188772A786B489B139B3611BBFCE8FBD18A
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/fVsr7ILmhkVdjbs60ePDVptfcZ8.roa
Signing time: Thu 01 Jun 2023 13:34:11 +0000
ROA not before: Thu 01 Jun 2023 13:34:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 185.28.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:2a:78:6b:48:9b:13:9b:36:11:bb:fc:e8:fb:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Jun 1 13:34:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d5b2bec82e686455d8dbb3ad1e3c3569b5f719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:af:eb:7b:60:44:57:ce:bc:21:f2:6a:1f:
2b:65:35:f5:5a:87:85:23:a8:25:3a:e7:f3:b2:6a:
bb:2d:7a:26:6c:0a:c1:3e:07:1b:de:dc:18:7d:91:
ab:ee:c9:b3:c6:6d:c0:b2:9c:e6:55:dd:83:f4:59:
3b:fd:93:b7:1c:6e:27:0b:7e:56:1c:d1:bd:9f:9c:
00:8d:a5:8f:9e:8c:38:09:bf:b1:34:a5:70:70:d1:
de:21:c6:9c:58:9d:82:28:fb:d2:eb:45:33:b7:41:
8e:dd:b7:61:2d:ce:d1:d3:e5:21:b3:1a:37:56:8b:
c4:e7:28:51:20:d3:90:9d:71:35:22:0a:23:10:3b:
5d:c4:3a:a5:79:85:8a:b3:4c:15:3a:70:5b:bc:75:
77:05:a9:13:ba:e0:3e:37:fa:35:94:ea:af:1a:83:
fa:6e:b7:5c:a2:88:d0:bb:01:55:07:17:0f:dd:2d:
f6:0e:c4:c1:46:c8:70:b5:c1:dc:4e:28:34:8f:bb:
c2:21:15:6d:e4:de:68:8d:53:19:fe:82:33:80:5b:
24:5f:b0:3e:4e:a6:8c:31:8f:5e:e4:45:77:8a:c2:
db:be:48:d6:5b:29:f3:0e:ca:8a:c3:6c:15:99:6f:
f6:70:cb:60:5e:bb:72:69:55:9c:2b:5a:ab:b2:a1:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5B:2B:EC:82:E6:86:45:5D:8D:BB:3A:D1:E3:C3:56:9B:5F:71:9F
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/fVsr7ILmhkVdjbs60ePDVptfcZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4f:e5:0c:37:89:44:22:60:d0:84:09:99:22:00:50:39:b3:
f8:12:26:0e:12:a7:78:01:af:fa:40:a8:77:87:56:f9:fc:c4:
f0:db:17:43:c4:c7:65:4a:75:b2:cb:67:dd:e1:cb:c9:a7:9b:
d3:9f:54:c0:8a:1d:29:75:e9:66:ae:39:54:fd:9e:a4:0c:f3:
e0:49:98:2c:08:04:99:2d:28:37:4e:78:ce:c6:3f:12:8f:f1:
3e:7c:45:bf:44:75:f1:37:bc:99:b2:03:f1:ea:48:6c:c3:a6:
7b:59:84:67:54:58:46:65:8f:3a:ab:1c:b1:c9:29:09:c3:8a:
f7:1c:df:3f:2c:15:c0:13:d9:8d:55:c1:81:56:63:d8:96:07:
ca:d8:68:30:f9:b6:4b:c6:dc:7e:77:4d:cc:4e:f2:9c:f7:98:
06:bb:5c:71:95:df:26:51:14:4d:8a:9d:cd:c5:ba:61:f1:03:
a0:f5:e0:10:c2:7e:66:89:79:6b:42:ec:fb:b6:d1:0a:15:98:
b5:a4:36:6e:85:d3:0b:aa:27:99:1c:f5:1b:76:73:c8:10:b7:
70:b5:f8:68:9e:57:14:d8:5b:be:22:13:94:ce:d2:63:cd:9b:
6a:cb:2e:13:bb:bd:e3:5d:a2:45:a6:09:9e:af:56:3a:9f:b8:
04:6c:e6:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh3KnhrSJsTmzYRu/zo+9GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk
MmI3YjMwHhcNMjMwNjAxMTMzNDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDViMmJlYzgyZTY4NjQ1NWQ4ZGJiM2FkMWUzYzM1NjliNWY3MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Sv63tgRFfOvCHyah8rZTX1WoeF
I6glOufzsmq7LXombArBPgcb3twYfZGr7smzxm3AspzmVd2D9Fk7/ZO3HG4nC35W
HNG9n5wAjaWPnow4Cb+xNKVwcNHeIcacWJ2CKPvS60Uzt0GO3bdhLc7R0+Uhsxo3
VovE5yhRINOQnXE1IgojEDtdxDqleYWKs0wVOnBbvHV3BakTuuA+N/o1lOqvGoP6
brdcoojQuwFVBxcP3S32DsTBRshwtcHcTig0j7vCIRVt5N5ojVMZ/oIzgFskX7A+
TqaMMY9e5EV3isLbvkjWWynzDsqKw2wVmW/2cMtgXrtyaVWcK1qrsqF+PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1bK+yC5oZFXY27OtHjw1abX3GfMB8GA1UdIwQY
MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt
ODdjMmU4ZjM5MTRlLzEvZlZzcjdJTG1oa1ZkamJzNjBlUERWcHRmY1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl
LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRx3MA0G
CSqGSIb3DQEBCwUAA4IBAQAaT+UMN4lEImDQhAmZIgBQObP4EiYOEqd4Aa/6QKh3
h1b5/MTw2xdDxMdlSnWyy2fd4cvJp5vTn1TAih0pdelmrjlU/Z6kDPPgSZgsCASZ
LSg3TnjOxj8Sj/E+fEW/RHXxN7yZsgPx6khsw6Z7WYRnVFhGZY86qxyxySkJw4r3
HN8/LBXAE9mNVcGBVmPYlgfK2Ggw+bZLxtx+d03MTvKc95gGu1xxld8mURRNip3N
xbph8QOg9eAQwn5miXlrQuz7ttEKFZi1pDZuhdMLqieZHPUbdnPIELdwtfhonlcU
2Fu+IhOUztJjzZtqyy4Tu73jXaJFpgmer1Y6n7gEbOYI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:10 2024 by rpki-client on console-ams.rpki-client.org