Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/dhfBxBmXYRFHFEI2nTrX8tziWGE.roa
File: dhfBxBmXYRFHFEI2nTrX8tziWGE.roa (raw, json)
Hash identifier: QRkIXPa++3QIZf8y32nCuMFCNFs89hjGvUOvf2LU3Fk=
Subject key identifier: 76:17:C1:C4:19:97:61:11:47:14:42:36:9D:3A:D7:F2:DC:E2:58:61
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 0189D36A7D42091DDC285B00B4B401B529BF
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/dhfBxBmXYRFHFEI2nTrX8tziWGE.roa
Signing time: Tue 08 Aug 2023 04:31:58 +0000
ROA not before: Tue 08 Aug 2023 04:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57724
IP address blocks: 185.9.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:6a:7d:42:09:1d:dc:28:5b:00:b4:b4:01:b5:29:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Aug 8 04:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7617c1c419976111471442369d3ad7f2dce25861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:b9:fd:e0:88:8f:0e:5e:70:0b:26:2c:be:
d4:e8:46:2c:1a:4e:13:20:5f:8b:af:f2:8f:52:42:
ef:86:a9:0c:66:4b:19:7e:85:25:92:db:46:f5:f8:
79:bf:0d:83:c2:b5:f0:63:f2:46:77:9e:7f:de:bc:
83:19:61:4d:39:91:b8:85:2b:d0:f8:74:89:82:6f:
49:8a:9c:c9:2e:0e:3b:16:ea:4b:e6:d9:91:1d:0c:
79:21:d1:b3:36:84:9d:9f:5b:26:5c:b0:e4:35:16:
3a:fe:b3:a9:e4:cc:c6:de:1c:21:f2:a8:da:ec:0a:
09:a8:13:c7:06:3a:57:f5:98:09:c5:94:7f:8b:99:
af:16:c3:8c:68:db:ea:f1:40:9e:4e:d5:66:e9:bc:
c7:87:e0:0e:14:b7:ae:79:a5:5b:a3:3d:34:08:30:
4a:fa:ee:83:93:69:c9:7a:55:d1:3b:9d:9c:8e:4a:
3c:6a:8b:40:58:13:90:d5:bc:3b:19:d8:8c:2d:3c:
47:d1:5a:7e:60:8c:14:30:2d:e5:25:94:56:96:e2:
4d:0a:2e:4b:c1:79:4a:90:1d:bb:c6:64:c0:5f:95:
45:91:0a:e8:8c:48:8e:ab:91:6f:1a:7e:81:2a:98:
b6:93:17:84:5f:33:92:9e:d4:9b:38:ac:6e:12:52:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:C1:C4:19:97:61:11:47:14:42:36:9D:3A:D7:F2:DC:E2:58:61
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/dhfBxBmXYRFHFEI2nTrX8tziWGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8e:34:5b:1f:84:64:33:51:d4:fa:fe:0c:30:80:d0:41:c0:
15:b6:c4:a2:e1:7c:9f:ea:13:c7:31:0c:14:c8:03:a6:6d:1e:
21:23:3e:29:f9:0c:83:6a:6b:f1:1d:cf:f6:66:b2:31:a4:fd:
81:6e:d3:96:15:e8:57:e2:cb:fb:a7:27:15:64:0f:c5:c6:94:
e5:d7:c8:79:e2:b4:80:a3:37:66:5e:6f:31:10:97:5f:c0:68:
bf:e3:49:ba:8a:75:fa:1a:c8:c6:88:ed:37:d9:c0:61:76:5a:
91:9b:40:2a:01:74:33:75:a4:72:5e:7d:f8:da:c6:5a:6b:c5:
ba:70:79:85:da:4c:70:51:d3:b7:04:8d:84:4b:cd:8a:72:35:
be:cd:48:47:3d:22:a2:e3:49:6e:29:ef:63:77:92:8c:c6:a1:
1a:20:46:a4:3f:59:89:6d:96:09:23:fe:5a:9e:9a:b0:89:ca:
4b:0c:e6:19:ac:f8:88:c2:bb:ce:60:b7:3f:ce:e1:96:8d:5e:
71:c3:a2:13:54:d3:a2:a0:f9:e2:64:f4:a7:83:48:ef:a9:0f:
00:b1:a3:fe:a0:38:22:a5:cc:3d:44:52:77:08:d1:ef:b3:91:
c6:d3:02:3a:ba:f8:e6:10:f5:e4:f5:1b:69:f2:fe:23:42:8c:
85:cd:e8:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnTan1CCR3cKFsAtLQBtSm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjMwODA4MDQzMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjE3YzFjNDE5OTc2MTExNDcxNDQyMzY5ZDNhZDdmMmRjZTI1ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPa5/eCIjw5ecAsmLL7U6EYsGk4T
IF+Lr/KPUkLvhqkMZksZfoUlkttG9fh5vw2DwrXwY/JGd55/3ryDGWFNOZG4hSvQ
+HSJgm9JipzJLg47FupL5tmRHQx5IdGzNoSdn1smXLDkNRY6/rOp5MzG3hwh8qja
7AoJqBPHBjpX9ZgJxZR/i5mvFsOMaNvq8UCeTtVm6bzHh+AOFLeueaVboz00CDBK
+u6Dk2nJelXRO52cjko8aotAWBOQ1bw7GdiMLTxH0Vp+YIwUMC3lJZRWluJNCi5L
wXlKkB27xmTAX5VFkQrojEiOq5FvGn6BKpi2kxeEXzOSntSbOKxuElIKYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYXwcQZl2ERRxRCNp061/Lc4lhhMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvZGhmQnhCbVhZUkZIRkVJMm5Uclg4dHppV0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G
CSqGSIb3DQEBCwUAA4IBAQCkjjRbH4RkM1HU+v4MMIDQQcAVtsSi4Xyf6hPHMQwU
yAOmbR4hIz4p+QyDamvxHc/2ZrIxpP2BbtOWFehX4sv7pycVZA/FxpTl18h54rSA
ozdmXm8xEJdfwGi/40m6inX6GsjGiO032cBhdlqRm0AqAXQzdaRyXn342sZaa8W6
cHmF2kxwUdO3BI2ES82KcjW+zUhHPSKi40luKe9jd5KMxqEaIEakP1mJbZYJI/5a
npqwicpLDOYZrPiIwrvOYLc/zuGWjV5xw6ITVNOioPniZPSng0jvqQ8AsaP+oDgi
pcw9RFJ3CNHvs5HG0wI6uvjmEPXk9Rtp8v4jQoyFzegO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org