Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/fM75y4WRNArFZH5euXTYjCP8pgQ.roa
File: fM75y4WRNArFZH5euXTYjCP8pgQ.roa (raw, json)
Hash identifier: A6ZMB1afhmsW79wffCQLhW3Gm5qkTBlY969HeivoZEE=
Subject key identifier: 7C:CE:F9:CB:85:91:34:0A:C5:64:7E:5E:B9:74:D8:8C:23:FC:A6:04
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 0185780352DBCFE9D2DF2ADF105B85F7062C
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/fM75y4WRNArFZH5euXTYjCP8pgQ.roa
Signing time: Tue 03 Jan 2023 14:22:41 +0000
ROA not before: Tue 03 Jan 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209841
IP address blocks: 185.201.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:03:52:db:cf:e9:d2:df:2a:df:10:5b:85:f7:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 3 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ccef9cb8591340ac5647e5eb974d88c23fca604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:9f:51:3a:1f:9a:f7:6d:36:8a:ce:0a:89:
42:dd:6b:b6:5d:57:8c:19:4b:77:c9:98:a5:39:b7:
ad:ec:78:1f:1e:ca:d1:dd:b3:8c:50:e3:6e:15:73:
23:1c:05:f6:43:e9:03:02:a6:86:0a:67:bb:b1:88:
ac:76:c3:08:ce:69:41:dd:8c:38:94:00:ab:35:db:
ea:47:d3:41:10:db:26:45:d3:63:01:04:68:f9:bf:
1c:17:75:b1:f1:ce:da:d2:b1:39:fd:c6:85:57:4b:
6a:a0:6b:0d:56:95:7e:9f:55:9c:ce:4c:a4:10:d8:
a7:79:41:7a:58:46:ee:eb:c2:44:71:57:2e:bf:0e:
08:c5:29:1c:70:fa:d8:86:50:a7:74:f5:6e:df:7e:
35:69:8c:5d:93:b8:02:df:09:0e:39:a3:c8:5b:da:
0e:8b:14:49:14:c4:aa:c1:c3:1a:a4:f5:bd:75:a1:
67:af:d9:68:8a:0f:b1:4a:52:82:52:10:ed:54:bd:
37:eb:64:b8:1a:a1:37:ff:15:71:8c:06:19:ae:96:
d3:86:29:fc:a4:ff:ef:a0:e3:45:e5:74:03:79:08:
f5:04:47:41:7c:e0:26:6f:9e:2f:7f:9b:60:cc:a4:
5c:73:7d:26:97:4b:f4:de:13:85:a4:c6:95:f2:80:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:F9:CB:85:91:34:0A:C5:64:7E:5E:B9:74:D8:8C:23:FC:A6:04
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/fM75y4WRNArFZH5euXTYjCP8pgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:be:42:ce:26:d2:50:a8:89:cc:aa:17:52:f0:3a:30:01:fd:
21:27:7f:d2:a9:3d:53:b6:86:57:df:53:7c:c1:16:91:1f:f0:
39:c7:06:0c:6f:18:0f:1a:cf:01:05:f9:95:a1:9e:03:08:13:
11:b6:27:65:53:1a:66:29:07:73:d1:26:9a:15:3e:c1:7a:e9:
9f:15:95:0f:a3:82:03:79:33:7d:8d:0b:d3:04:69:f9:70:e0:
dd:52:57:7d:87:20:9d:24:4d:80:60:8c:a7:7a:d9:45:74:ef:
aa:35:02:70:fb:d0:d1:69:fa:10:e9:b7:02:da:19:df:9c:1b:
93:9a:2e:17:b2:46:54:47:de:99:df:a8:6a:a2:93:27:9b:f7:
ad:ce:cd:9b:2f:04:de:c1:f8:56:c7:3e:3b:d0:d3:7c:e9:ea:
d9:23:7e:0d:5d:e9:a5:60:1c:b6:8c:25:bd:4e:fb:54:e5:c7:
33:88:d0:03:cf:30:bb:13:0c:e3:53:c6:1b:ac:f2:a0:13:80:
b9:0b:0d:ad:7f:c8:50:20:9b:d9:52:77:fe:36:0c:d4:cc:21:
c0:fe:56:55:7e:73:de:64:e4:16:d7:89:24:69:b5:fe:5c:83:
14:6e:b1:3d:60:06:9c:31:44:e5:7e:17:f8:64:e6:0f:69:56:
a1:4a:53:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV4A1Lbz+nS3yrfEFuF9wYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjMwMTAzMTQyMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2NlZjljYjg1OTEzNDBhYzU2NDdlNWViOTc0ZDg4YzIzZmNhNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3OfUTofmvdtNorOColC3Wu2XVeM
GUt3yZilObet7HgfHsrR3bOMUONuFXMjHAX2Q+kDAqaGCme7sYisdsMIzmlB3Yw4
lACrNdvqR9NBENsmRdNjAQRo+b8cF3Wx8c7a0rE5/caFV0tqoGsNVpV+n1Wczkyk
ENineUF6WEbu68JEcVcuvw4IxSkccPrYhlCndPVu3341aYxdk7gC3wkOOaPIW9oO
ixRJFMSqwcMapPW9daFnr9loig+xSlKCUhDtVL0362S4GqE3/xVxjAYZrpbThin8
pP/voONF5XQDeQj1BEdBfOAmb54vf5tgzKRcc30ml0v03hOFpMaV8oCOmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHzO+cuFkTQKxWR+Xrl02Iwj/KYEMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvZk03NXk0V1JOQXJGWkg1ZXVYVFlqQ1A4cGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucknMA0G
CSqGSIb3DQEBCwUAA4IBAQAPvkLOJtJQqInMqhdS8DowAf0hJ3/SqT1TtoZX31N8
wRaRH/A5xwYMbxgPGs8BBfmVoZ4DCBMRtidlUxpmKQdz0SaaFT7BeumfFZUPo4ID
eTN9jQvTBGn5cODdUld9hyCdJE2AYIynetlFdO+qNQJw+9DRafoQ6bcC2hnfnBuT
mi4XskZUR96Z36hqopMnm/etzs2bLwTewfhWxz470NN86erZI34NXemlYBy2jCW9
TvtU5ccziNADzzC7EwzjU8YbrPKgE4C5Cw2tf8hQIJvZUnf+NgzUzCHA/lZVfnPe
ZOQW14kkabX+XIMUbrE9YAacMUTlfhf4ZOYPaVahSlPk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org