Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/7pv9vA0mQbUdl2Qv4vSSjUpNiPM.roa
File: 7pv9vA0mQbUdl2Qv4vSSjUpNiPM.roa (raw, json)
Hash identifier: 1rvBIneQhz3MQWnQNoP3UOubm5oDxP4lBjntJXvAmec=
Subject key identifier: EE:9B:FD:BC:0D:26:41:B5:1D:97:64:2F:E2:F4:92:8D:4A:4D:88:F3
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01856D4AD4C6FB3DC9C008B070186A0C3FAE
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/7pv9vA0mQbUdl2Qv4vSSjUpNiPM.roa
Signing time: Sun 01 Jan 2023 12:24:58 +0000
ROA not before: Sun 01 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 05:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d4:c6:fb:3d:c9:c0:08:b0:70:18:6a:0c:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9bfdbc0d2641b51d97642fe2f4928d4a4d88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:2c:82:dd:19:62:cf:ce:b5:d5:c0:41:c2:
8e:01:dd:13:1e:4c:67:c4:21:f1:f0:6b:c9:2f:07:
59:1a:82:6a:dd:69:38:cb:04:70:3d:8d:3c:69:94:
d1:bc:7e:9e:31:a4:20:57:95:b5:52:04:71:a7:30:
30:3e:36:66:cd:b7:24:c9:f6:92:f3:5a:e8:6a:40:
4a:ea:fb:6a:56:fd:98:f1:b9:43:ea:d3:77:23:95:
cc:27:33:f7:94:05:ea:cb:16:4f:da:bf:30:10:cc:
46:e8:18:19:06:fa:0c:32:eb:43:ba:c9:e6:6c:29:
bf:6e:48:c4:40:bc:bd:50:f5:16:c8:1e:6b:b1:25:
c2:e6:70:54:f0:cd:d7:38:d4:ec:5e:f2:88:07:4a:
51:89:77:f2:9e:a4:7d:fe:e8:b4:a4:5b:77:41:d1:
18:69:88:6c:66:7b:77:29:66:01:ee:f7:4f:d4:ca:
e1:38:d2:38:50:5c:9a:f7:19:85:d0:57:a2:c4:89:
e1:1e:2b:27:38:06:74:c1:b1:98:7d:3f:63:b2:53:
f2:60:b2:93:d4:44:de:bc:7e:59:a5:be:6b:ef:50:
95:29:0c:6f:f7:25:a1:3f:35:15:4b:37:f8:6f:a4:
9f:00:e5:1b:9c:7a:6f:e0:84:da:a2:f1:cf:21:15:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:FD:BC:0D:26:41:B5:1D:97:64:2F:E2:F4:92:8D:4A:4D:88:F3
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/7pv9vA0mQbUdl2Qv4vSSjUpNiPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d7:e6:dc:4b:5e:e1:82:bf:e1:27:7f:b1:3a:77:97:66:64:
8c:bd:c6:4f:38:62:06:6d:31:43:6c:23:2a:d4:68:a0:42:17:
90:2e:38:1e:a8:93:4c:9c:96:22:74:fa:3f:34:a3:5f:fe:ff:
0f:d9:d7:25:4e:5f:20:62:fe:2c:0d:ff:23:af:09:31:5a:3c:
a0:70:11:6e:f4:d6:13:bf:47:52:51:13:5c:2f:d0:83:a6:9e:
1c:7e:d1:5d:ce:32:2a:47:53:54:a8:7a:3a:a7:fb:7c:6d:52:
89:e1:be:0c:b1:25:21:1e:7e:23:e9:ca:56:bb:9d:04:64:51:
1c:c7:c7:13:28:4d:42:b3:4b:9f:09:df:7d:be:62:95:84:e3:
7b:00:12:1a:09:5a:1e:31:a7:ad:21:7a:5d:7a:4e:ab:a5:c9:
43:3f:5a:f1:73:46:65:e0:92:fe:57:1f:f5:ca:0c:28:69:1b:
10:59:3e:89:82:52:cd:a3:9b:c7:0c:b9:63:c0:c8:b3:c0:62:
36:c4:c4:ad:35:7d:7e:67:a7:94:31:ff:b5:fd:75:ff:0c:b3:
b0:24:fc:97:ac:11:8d:f2:2d:8d:00:31:b7:d2:7b:f2:51:51:
a8:62:d2:d9:43:2c:f5:ce:e6:36:d3:af:fe:a4:d7:67:9a:5b:
7e:a0:0d:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtStTG+z3JwAiwcBhqDD+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjMwMTAxMTIyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTliZmRiYzBkMjY0MWI1MWQ5NzY0MmZlMmY0OTI4ZDRhNGQ4OGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzQsgt0ZYs/OtdXAQcKOAd0THkxn
xCHx8GvJLwdZGoJq3Wk4ywRwPY08aZTRvH6eMaQgV5W1UgRxpzAwPjZmzbckyfaS
81roakBK6vtqVv2Y8blD6tN3I5XMJzP3lAXqyxZP2r8wEMxG6BgZBvoMMutDusnm
bCm/bkjEQLy9UPUWyB5rsSXC5nBU8M3XONTsXvKIB0pRiXfynqR9/ui0pFt3QdEY
aYhsZnt3KWYB7vdP1MrhONI4UFya9xmF0FeixInhHisnOAZ0wbGYfT9jslPyYLKT
1ETevH5Zpb5r71CVKQxv9yWhPzUVSzf4b6SfAOUbnHpv4ITaovHPIRX+gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6b/bwNJkG1HZdkL+L0ko1KTYjzMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvN3B2OXZBMG1RYlVkbDJRdjR2U1NqVXBOaVBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6eMA0G
CSqGSIb3DQEBCwUAA4IBAQBz1+bcS17hgr/hJ3+xOneXZmSMvcZPOGIGbTFDbCMq
1GigQheQLjgeqJNMnJYidPo/NKNf/v8P2dclTl8gYv4sDf8jrwkxWjygcBFu9NYT
v0dSURNcL9CDpp4cftFdzjIqR1NUqHo6p/t8bVKJ4b4MsSUhHn4j6cpWu50EZFEc
x8cTKE1Cs0ufCd99vmKVhON7ABIaCVoeMaetIXpdek6rpclDP1rxc0Zl4JL+Vx/1
ygwoaRsQWT6JglLNo5vHDLljwMizwGI2xMStNX1+Z6eUMf+1/XX/DLOwJPyXrBGN
8i2NADG30nvyUVGoYtLZQyz1zuY206/+pNdnmlt+oA1x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org