Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/gS6EXFsx1a5ni6QmrjAostdR9ow.roa
File: gS6EXFsx1a5ni6QmrjAostdR9ow.roa (raw, json)
Hash identifier: PRdBl0S4LIxgkJ/+NDGD4QCaxCNyk7NwZLLvrJPy5IM=
Subject key identifier: 81:2E:84:5C:5B:31:D5:AE:67:8B:A4:26:AE:30:28:B2:D7:51:F6:8C
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01892004926B4634F7F81AE6E9F9565E74A2
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/gS6EXFsx1a5ni6QmrjAostdR9ow.roa
Signing time: Tue 04 Jul 2023 08:28:37 +0000
ROA not before: Tue 04 Jul 2023 08:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203510
IP address blocks: 185.9.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:04:92:6b:46:34:f7:f8:1a:e6:e9:f9:56:5e:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jul 4 08:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=812e845c5b31d5ae678ba426ae3028b2d751f68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:83:df:a0:6c:3f:91:76:8f:6d:2a:15:a3:
14:73:fb:fa:08:25:c6:38:6c:fb:1f:ff:72:e5:4c:
a9:8b:52:a1:f3:ad:a6:3e:6c:65:a6:f7:d9:56:22:
b9:60:84:a7:c9:4e:c1:e2:d0:28:6f:6d:9c:77:3c:
e5:ab:b7:0c:15:1a:a2:11:08:d9:75:30:6f:6d:34:
15:a0:90:11:e4:8a:fe:e5:1a:25:10:64:f4:4b:b5:
be:05:d5:3e:7e:f9:f8:83:3c:ba:90:c4:66:b1:0b:
89:5f:92:00:3f:c0:3c:49:6e:cd:10:1b:93:ab:45:
02:9c:36:38:11:37:4e:91:48:c1:c6:5d:d5:52:08:
83:2d:0b:eb:ef:f3:86:c3:e9:22:3a:33:0c:25:69:
c0:88:38:ce:5f:86:a1:5b:cb:9f:2a:ba:43:90:f1:
e5:df:de:e1:5d:ef:2d:ab:e9:48:a0:eb:1a:a5:16:
ff:32:19:24:93:23:74:eb:bc:96:1a:3b:d7:25:c8:
b5:16:bd:76:97:90:a3:13:ae:ee:82:95:20:5e:f0:
cb:a6:c8:6b:a6:8b:e7:2b:78:48:64:6c:ab:1c:11:
6e:f2:12:c2:f2:b4:f1:d2:83:29:9a:e8:1b:83:8b:
df:7e:fc:cf:cc:95:6e:ea:2d:a3:8b:b1:b1:6c:c1:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:84:5C:5B:31:D5:AE:67:8B:A4:26:AE:30:28:B2:D7:51:F6:8C
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/gS6EXFsx1a5ni6QmrjAostdR9ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.185.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0e:5b:10:3e:be:c3:f8:e6:ab:a2:7d:a3:cb:a0:50:95:c6:
74:cf:3b:61:07:53:d6:bd:58:18:d3:a3:41:dc:f4:08:d9:e7:
28:17:c7:c2:06:df:1c:5f:27:77:e0:3e:20:37:45:30:17:53:
37:24:93:1c:7e:14:ea:e7:14:de:d0:0c:29:f4:51:0a:f3:4d:
21:2c:54:4e:fb:51:d7:c4:39:b1:f8:64:25:1f:58:e7:18:15:
47:22:b2:1a:70:7e:bb:7e:c7:d4:5a:e9:f3:19:de:d5:b0:ae:
5c:3c:88:05:bd:15:8a:ba:40:9f:8b:a7:03:8b:b6:32:f5:a7:
d1:15:b0:59:be:7c:3f:c9:17:cb:ba:4a:67:e0:17:15:21:c6:
48:57:10:b0:54:9c:c5:01:53:87:77:20:31:65:d5:ed:03:89:
73:1b:bc:65:3e:ba:69:92:5e:33:07:8c:4b:94:e5:3e:26:7c:
a3:7d:9e:25:a1:e8:7e:f0:b2:3f:15:d2:da:5b:ba:f4:dc:8b:
3e:1b:75:d3:60:f6:16:29:9c:fa:48:87:9f:7f:30:ab:e0:50:
4c:64:d7:2b:a5:70:d4:be:1d:c8:e1:f8:d0:e3:8f:46:65:ff:
c0:09:ba:d0:5c:56:42:ac:d5:a1:49:f1:c4:1b:3c:73:50:11:
13:d0:3b:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkgBJJrRjT3+Brm6flWXnSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjMwNzA0MDgyODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJlODQ1YzViMzFkNWFlNjc4YmE0MjZhZTMwMjhiMmQ3NTFmNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyaD36BsP5F2j20qFaMUc/v6CCXG
OGz7H/9y5Uypi1Kh862mPmxlpvfZViK5YISnyU7B4tAob22cdzzlq7cMFRqiEQjZ
dTBvbTQVoJAR5Ir+5RolEGT0S7W+BdU+fvn4gzy6kMRmsQuJX5IAP8A8SW7NEBuT
q0UCnDY4ETdOkUjBxl3VUgiDLQvr7/OGw+kiOjMMJWnAiDjOX4ahW8ufKrpDkPHl
397hXe8tq+lIoOsapRb/MhkkkyN067yWGjvXJci1Fr12l5CjE67ugpUgXvDLpshr
povnK3hIZGyrHBFu8hLC8rTx0oMpmugbg4vffvzPzJVu6i2ji7GxbMFchQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEuhFxbMdWuZ4ukJq4wKLLXUfaMMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvZ1M2RVhGc3gxYTVuaTZRbXJqQW9zdGRSOW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G
CSqGSIb3DQEBCwUAA4IBAQBhDlsQPr7D+Oaron2jy6BQlcZ0zzthB1PWvVgY06NB
3PQI2ecoF8fCBt8cXyd34D4gN0UwF1M3JJMcfhTq5xTe0Awp9FEK800hLFRO+1HX
xDmx+GQlH1jnGBVHIrIacH67fsfUWunzGd7VsK5cPIgFvRWKukCfi6cDi7Yy9afR
FbBZvnw/yRfLukpn4BcVIcZIVxCwVJzFAVOHdyAxZdXtA4lzG7xlPrppkl4zB4xL
lOU+JnyjfZ4loeh+8LI/FdLaW7r03Is+G3XTYPYWKZz6SIeffzCr4FBMZNcrpXDU
vh3I4fjQ449GZf/ACbrQXFZCrNWhSfHEGzxzUBET0Dsh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org