Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/75hZdFC5h6WBawjEUfncIzUz76g.roa
File: 75hZdFC5h6WBawjEUfncIzUz76g.roa (raw, json)
Hash identifier: L4PogoTdIYbYFcipLVi51SBC2ti+Nn4FFuBdSwGVq2g=
Subject key identifier: EF:98:59:74:50:B9:87:A5:81:6B:08:C4:51:F9:DC:23:35:33:EF:A8
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 018AF109E3896EDE1D6C6FC3CC0808A441F9
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/75hZdFC5h6WBawjEUfncIzUz76g.roa
Signing time: Mon 02 Oct 2023 15:37:51 +0000
ROA not before: Mon 02 Oct 2023 15:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.234.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 14:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:09:e3:89:6e:de:1d:6c:6f:c3:cc:08:08:a4:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Oct 2 15:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef98597450b987a5816b08c451f9dc233533efa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:f0:b2:b8:9a:90:50:8e:54:b4:90:ff:97:
2a:95:2f:45:20:6d:2c:3c:10:52:ee:0a:c7:2c:01:
47:6e:d3:f7:3b:d1:2e:18:d1:cf:f0:62:e5:a4:51:
a0:1f:db:5b:af:43:36:ee:31:ee:46:87:b9:cd:47:
60:a8:ff:50:6a:c4:4d:83:fa:eb:61:cd:29:28:00:
61:5a:81:ce:44:81:98:56:87:54:d0:cf:b7:84:40:
4d:fe:7b:68:79:43:e4:81:bb:16:7b:2a:aa:7c:04:
7f:88:72:af:f1:7b:f0:23:ad:e3:77:ea:d6:5b:9a:
38:1c:25:ad:a3:5a:cb:06:79:eb:77:12:a9:54:94:
eb:24:7f:6a:26:73:47:07:7e:17:e5:8b:a7:4e:6d:
b2:a9:f5:d7:f9:f4:3f:f7:bf:c5:bf:c9:b8:62:45:
c5:5a:83:76:a9:d2:3e:4f:6c:46:fb:eb:fe:db:c5:
82:07:19:b6:54:01:7a:b3:bf:53:6d:ae:45:43:1e:
58:d7:11:03:55:9d:a1:ad:06:32:3c:c8:d3:a5:4e:
63:db:bf:21:fc:2d:66:9f:c3:98:05:0c:9c:00:68:
4b:01:bc:0f:86:78:88:68:10:1a:44:d9:64:19:9a:
04:3f:3b:8f:1c:74:fb:9d:e7:f9:09:fb:9c:45:1c:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:59:74:50:B9:87:A5:81:6B:08:C4:51:F9:DC:23:35:33:EF:A8
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/75hZdFC5h6WBawjEUfncIzUz76g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.110.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a2:e1:16:b7:d2:ac:25:9c:bc:2d:eb:1f:c9:b6:2e:2c:95:
36:ab:aa:79:99:21:35:59:ba:95:5c:68:d5:d2:d0:38:35:3c:
d5:11:bf:9f:3b:e2:d9:c4:ed:03:b8:3b:6d:7e:8f:a7:91:78:
fc:35:fd:b7:b9:6e:f0:a3:ce:82:e1:72:9d:15:8e:b9:06:4d:
e9:16:70:3b:63:fb:b7:ae:76:07:45:37:a4:83:87:14:49:ab:
bf:8d:f7:75:29:d0:8f:97:d8:d8:b8:50:1e:65:41:75:d8:e9:
57:c7:db:5e:19:75:80:2a:07:60:ce:c2:a1:0a:e7:8e:a7:81:
3f:ea:58:94:5f:88:fe:15:54:7d:58:f7:fc:f0:61:de:1b:8a:
09:9a:de:0a:81:08:35:0a:cb:57:42:77:29:0d:a8:28:c4:bd:
af:e7:15:cd:3d:32:ae:df:41:90:db:d4:27:2f:ba:5a:2e:01:
d3:08:a8:b6:fb:1e:c3:60:bd:84:24:08:d1:ef:3d:74:64:99:
d1:ca:b0:5c:79:ac:fb:5d:ab:4b:5d:ab:25:d5:0c:68:f9:53:
c3:01:d6:e1:a6:80:8c:fe:da:11:aa:dd:6d:44:c4:88:52:3a:
61:9d:40:a2:5b:b8:83:0e:c9:7d:3f:62:5b:b2:ab:23:16:c9:
98:40:b9:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrxCeOJbt4dbG/DzAgIpEH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjMxMDAyMTUzNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk4NTk3NDUwYjk4N2E1ODE2YjA4YzQ1MWY5ZGMyMzM1MzNlZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3PwsriakFCOVLSQ/5cqlS9FIG0s
PBBS7grHLAFHbtP3O9EuGNHP8GLlpFGgH9tbr0M27jHuRoe5zUdgqP9QasRNg/rr
Yc0pKABhWoHORIGYVodU0M+3hEBN/ntoeUPkgbsWeyqqfAR/iHKv8XvwI63jd+rW
W5o4HCWto1rLBnnrdxKpVJTrJH9qJnNHB34X5YunTm2yqfXX+fQ/97/Fv8m4YkXF
WoN2qdI+T2xG++v+28WCBxm2VAF6s79Tba5FQx5Y1xEDVZ2hrQYyPMjTpU5j278h
/C1mn8OYBQycAGhLAbwPhniIaBAaRNlkGZoEPzuPHHT7nef5CfucRRwH4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+YWXRQuYelgWsIxFH53CM1M++oMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvNzVoWmRGQzVoNldCYXdqRVVmbmNJelV6NzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuepuMA0G
CSqGSIb3DQEBCwUAA4IBAQA3ouEWt9KsJZy8LesfybYuLJU2q6p5mSE1WbqVXGjV
0tA4NTzVEb+fO+LZxO0DuDttfo+nkXj8Nf23uW7wo86C4XKdFY65Bk3pFnA7Y/u3
rnYHRTekg4cUSau/jfd1KdCPl9jYuFAeZUF12OlXx9teGXWAKgdgzsKhCueOp4E/
6liUX4j+FVR9WPf88GHeG4oJmt4KgQg1CstXQncpDagoxL2v5xXNPTKu30GQ29Qn
L7paLgHTCKi2+x7DYL2EJAjR7z10ZJnRyrBceaz7XatLXasl1Qxo+VPDAdbhpoCM
/toRqt1tRMSIUjphnUCiW7iDDsl9P2JbsqsjFsmYQLlI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:33 2024 by rpki-client on console-ams.rpki-client.org