Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/1Qf9QbDhIB3M2DjUXOVVHnXcFiI.roa
File: 1Qf9QbDhIB3M2DjUXOVVHnXcFiI.roa (raw, json)
Hash identifier: TjIZPlHNQuc+L7dIp3fwRaytuQFn3B7gol+aDUslafw=
Subject key identifier: D5:07:FD:41:B0:E1:20:1D:CC:D8:38:D4:5C:E5:55:1E:75:DC:16:22
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 0187C423F027EAFA80602C18C1B65A9EF626
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/1Qf9QbDhIB3M2DjUXOVVHnXcFiI.roa
Signing time: Thu 27 Apr 2023 19:15:02 +0000
ROA not before: Thu 27 Apr 2023 19:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211627
IP address blocks: 185.254.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 12:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:23:f0:27:ea:fa:80:60:2c:18:c1:b6:5a:9e:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Apr 27 19:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d507fd41b0e1201dccd838d45ce5551e75dc1622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:ea:54:69:76:8e:63:8a:6a:9d:6b:e6:27:
35:11:af:b7:af:2d:58:8f:29:5c:6c:eb:05:13:8b:
5f:ec:a9:0a:db:d4:a9:e2:92:fe:41:ee:98:9d:44:
1a:1c:bb:87:b6:af:9e:b0:4f:21:63:e4:72:ad:c4:
83:94:7c:04:96:39:7b:bc:c8:2e:3e:fe:05:d5:03:
4d:dd:97:2e:d7:81:35:74:ce:89:74:39:26:4f:24:
f0:c7:8a:af:1b:8b:42:ec:93:d2:f1:c8:f0:d6:84:
99:9d:6b:a2:61:dd:4d:8a:17:dd:5c:df:42:fb:92:
dc:32:9b:1c:ab:b6:da:39:ea:23:ab:c0:6b:ba:f7:
da:7f:68:f6:8d:47:76:d2:a9:0c:a3:4b:14:9f:9f:
bf:b2:fe:8a:47:6b:17:29:2d:df:0e:05:51:76:49:
c2:bb:46:8e:82:6e:f1:88:2a:6c:15:cf:43:be:ff:
45:55:f0:20:91:e0:9f:9d:e5:23:a5:57:c3:70:51:
0d:84:8f:d6:0e:15:f0:c4:45:a4:7e:25:ae:cd:fd:
6e:d2:4d:f5:d2:b6:63:85:54:dc:e8:30:67:bc:f1:
02:a3:6f:7d:c9:c4:88:1a:d8:47:0a:6c:32:5b:28:
95:f0:73:03:63:14:5b:85:aa:3d:31:0b:87:af:2d:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:FD:41:B0:E1:20:1D:CC:D8:38:D4:5C:E5:55:1E:75:DC:16:22
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/1Qf9QbDhIB3M2DjUXOVVHnXcFiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f1:4b:a9:1f:6c:f6:39:4b:a3:7e:d2:c2:de:ee:6f:4e:d3:
6a:9a:ed:0c:2a:72:08:3e:3f:95:e1:a8:97:1b:99:10:34:16:
a9:d4:33:7d:18:68:ab:c9:65:fa:2d:70:b5:bc:36:0f:eb:73:
fe:40:b0:f5:b6:ea:3e:df:f9:21:fb:02:23:05:55:9b:51:8a:
37:2c:7a:f8:4a:4d:2d:07:2d:2a:c3:f2:1e:f2:a3:29:d8:d9:
79:20:dd:02:0a:b9:0d:72:fd:fe:01:73:77:f5:12:20:6b:0e:
88:de:f5:7f:3c:58:85:83:6d:aa:f1:06:23:e1:d7:bb:70:3b:
7f:4a:78:a4:e6:4f:a1:ef:4d:0d:a8:07:64:58:b1:7f:4d:33:
79:30:9f:ca:af:d9:0e:ae:7f:47:b4:fe:fb:4c:f8:3d:95:b0:
7e:33:b9:19:76:a1:52:bd:33:c1:f8:f6:68:8a:cb:11:94:73:
2f:a6:d0:9e:67:b0:c2:dd:a9:a1:1b:e1:6f:df:a1:0e:0f:42:
00:2a:b4:15:7d:b3:23:f5:09:18:52:58:f8:c8:e6:1d:2b:66:
0b:98:a0:d5:88:e9:07:64:ee:00:68:bd:ee:36:5a:37:f6:40:
b0:7c:cc:d0:e2:46:60:41:40:0c:14:63:c5:0b:86:25:9b:c5:
4b:70:22:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfEI/An6vqAYCwYwbZanvYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi
Y2Y5Y2EwHhcNMjMwNDI3MTkxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTA3ZmQ0MWIwZTEyMDFkY2NkODM4ZDQ1Y2U1NTUxZTc1ZGMxNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHrqVGl2jmOKap1r5ic1Ea+3ry1Y
jylcbOsFE4tf7KkK29Sp4pL+Qe6YnUQaHLuHtq+esE8hY+RyrcSDlHwEljl7vMgu
Pv4F1QNN3Zcu14E1dM6JdDkmTyTwx4qvG4tC7JPS8cjw1oSZnWuiYd1NihfdXN9C
+5LcMpscq7baOeojq8Bruvfaf2j2jUd20qkMo0sUn5+/sv6KR2sXKS3fDgVRdknC
u0aOgm7xiCpsFc9Dvv9FVfAgkeCfneUjpVfDcFENhI/WDhXwxEWkfiWuzf1u0k31
0rZjhVTc6DBnvPECo299ycSIGthHCmwyWyiV8HMDYxRbhao9MQuHry3EHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUH/UGw4SAdzNg41FzlVR513BYiMB8GA1UdIwQY
MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt
NmI4OWZhNDY3NTdjLzEvMVFmOVFiRGhJQjNNMkRqVVhPVlZIblhjRmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj
LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf6lMA0G
CSqGSIb3DQEBCwUAA4IBAQBh8UupH2z2OUujftLC3u5vTtNqmu0MKnIIPj+V4aiX
G5kQNBap1DN9GGiryWX6LXC1vDYP63P+QLD1tuo+3/kh+wIjBVWbUYo3LHr4Sk0t
By0qw/Ie8qMp2Nl5IN0CCrkNcv3+AXN39RIgaw6I3vV/PFiFg22q8QYj4de7cDt/
Snik5k+h700NqAdkWLF/TTN5MJ/Kr9kOrn9HtP77TPg9lbB+M7kZdqFSvTPB+PZo
issRlHMvptCeZ7DC3amhG+Fv36EOD0IAKrQVfbMj9QkYUlj4yOYdK2YLmKDViOkH
ZO4AaL3uNlo39kCwfMzQ4kZgQUAMFGPFC4Ylm8VLcCIi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:07 2024 by rpki-client on console-ams.rpki-client.org