Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/DUqB2zLEcssM8AVlt8zj_m9w1hY.roa
File: DUqB2zLEcssM8AVlt8zj_m9w1hY.roa (raw, json)
Hash identifier: gp6m/BEJtU2RtTB5y6JOd5PgVUV8KjGcbRN/K8EC0BQ=
Subject key identifier: 0D:4A:81:DB:32:C4:72:CB:0C:F0:05:65:B7:CC:E3:FE:6F:70:D6:16
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 01856CCAC2DF95D5603347B2174D95DC7715
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/DUqB2zLEcssM8AVlt8zj_m9w1hY.roa
Signing time: Sun 01 Jan 2023 10:05:05 +0000
ROA not before: Sun 01 Jan 2023 10:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202753
IP address blocks: 185.133.25.0/24 maxlen: 24
185.133.26.0/23 maxlen: 23
2a00:6700::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c2:df:95:d5:60:33:47:b2:17:4d:95:dc:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jan 1 10:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4a81db32c472cb0cf00565b7cce3fe6f70d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:53:0f:ef:58:52:8f:2c:5c:72:f4:c9:bb:
e5:4f:9f:03:c0:9d:e8:54:67:ac:62:84:72:b5:ae:
07:e2:90:15:16:65:93:22:58:f5:26:58:9f:d4:81:
3f:fb:bb:8e:e9:68:fc:c5:75:a8:5d:fc:91:63:5a:
a2:c5:36:79:ab:87:a2:01:1d:f4:b4:c6:1f:f2:c4:
d4:6a:2e:d1:e3:88:9f:8e:c6:a6:ef:c1:43:a3:ee:
57:90:21:27:65:8a:c7:ab:bc:e5:66:53:67:e9:37:
c1:f1:f7:4a:4c:33:f2:fa:42:3b:ed:8d:59:e4:e3:
c5:95:d8:92:83:79:6d:7e:a1:ec:06:9a:ce:97:33:
d1:cd:2b:55:2f:f7:26:6f:ab:5a:2f:8c:f7:1f:30:
53:03:4a:52:33:a0:4e:13:0e:de:1e:5c:ed:04:9c:
16:39:72:94:52:6d:90:53:65:b1:3a:9f:ad:f3:52:
d7:a0:10:a7:75:c3:7f:a2:32:65:7c:3e:e9:ba:09:
a1:c1:96:23:8c:e8:17:97:d8:e9:5f:a0:6f:1d:fb:
53:76:01:6b:f0:e1:9d:60:ee:4b:c4:e0:47:1f:db:
43:8e:e1:de:39:65:15:63:39:6e:6c:bd:4e:0e:87:
ea:f6:43:53:84:a4:d3:7c:30:5f:2b:0a:6e:6f:1b:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:81:DB:32:C4:72:CB:0C:F0:05:65:B7:CC:E3:FE:6F:70:D6:16
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/DUqB2zLEcssM8AVlt8zj_m9w1hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.25.0-185.133.27.255
IPv6:
2a00:6700::/48
Signature Algorithm: sha256WithRSAEncryption
80:78:ec:66:ce:4e:68:73:9d:d4:73:57:d0:63:16:50:53:aa:
6d:b9:90:0f:06:61:8e:2a:96:97:02:55:80:41:1e:5a:ea:fe:
92:1a:51:0f:99:be:fa:e4:c7:52:f6:30:65:95:15:3d:15:36:
09:5b:db:6d:24:ae:60:62:c0:e8:4a:ba:04:1a:2f:6d:b0:b9:
c6:ce:f4:7e:43:72:06:cf:99:57:8c:9c:17:1b:f7:a1:b8:2b:
c4:70:2c:5e:49:1a:08:78:fc:54:69:79:26:d7:1a:26:c0:b3:
0d:8d:5a:ae:30:93:8a:67:03:9c:e7:89:ef:c6:5c:d3:15:93:
20:ab:8e:45:74:af:ff:d3:45:93:95:85:35:07:fb:8a:79:8d:
07:13:d5:2a:93:66:de:af:2e:2a:e8:96:19:3f:ea:5c:ad:a8:
d8:e9:09:c5:61:b9:12:49:44:b8:93:7c:06:c8:92:ed:94:43:
ca:71:04:68:0d:65:d4:16:bf:59:c2:40:14:c9:f5:f5:86:5a:
4a:2b:21:c8:6b:a1:48:1b:22:b0:3f:b2:79:3b:80:cf:1b:d8:
f9:41:07:54:a8:18:ab:e5:17:a6:87:2a:c2:6d:e1:c0:f0:76:
f1:a0:22:ce:6e:11:7d:a8:84:35:4f:8c:1f:29:da:f6:ed:8a:
1c:98:97:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVsysLfldVgM0eyF02V3HcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1
M2U2NjIwHhcNMjMwMTAxMTAwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDRhODFkYjMyYzQ3MmNiMGNmMDA1NjViN2NjZTNmZTZmNzBkNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuFTD+9YUo8sXHL0ybvlT58DwJ3o
VGesYoRyta4H4pAVFmWTIlj1Jlif1IE/+7uO6Wj8xXWoXfyRY1qixTZ5q4eiAR30
tMYf8sTUai7R44ifjsam78FDo+5XkCEnZYrHq7zlZlNn6TfB8fdKTDPy+kI77Y1Z
5OPFldiSg3ltfqHsBprOlzPRzStVL/cmb6taL4z3HzBTA0pSM6BOEw7eHlztBJwW
OXKUUm2QU2WxOp+t81LXoBCndcN/ojJlfD7pugmhwZYjjOgXl9jpX6BvHftTdgFr
8OGdYO5LxOBHH9tDjuHeOWUVYzlubL1ODofq9kNThKTTfDBfKwpubxtX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1KgdsyxHLLDPAFZbfM4/5vcNYWMB8GA1UdIwQY
MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt
NmUyMmJmNDM2MzA0LzEvRFVxQjJ6TEVjc3NNOEFWbHQ4empfbTl3MWhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0
LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC5hRkD
BAK5hRgwDwQCAAIwCQMHACoAZwAAADANBgkqhkiG9w0BAQsFAAOCAQEAgHjsZs5O
aHOd1HNX0GMWUFOqbbmQDwZhjiqWlwJVgEEeWur+khpRD5m++uTHUvYwZZUVPRU2
CVvbbSSuYGLA6Eq6BBovbbC5xs70fkNyBs+ZV4ycFxv3obgrxHAsXkkaCHj8VGl5
JtcaJsCzDY1arjCTimcDnOeJ78Zc0xWTIKuORXSv/9NFk5WFNQf7inmNBxPVKpNm
3q8uKuiWGT/qXK2o2OkJxWG5EklEuJN8BsiS7ZRDynEEaA1l1Ba/WcJAFMn19YZa
SishyGuhSBsisD+yeTuAzxvY+UEHVKgYq+UXpocqwm3hwPB28aAizm4RfaiENU+M
Hyna9u2KHJiXHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org