Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9W7jQFZ9LWelfdwg0ASbEdq7oNE.roa
File: 9W7jQFZ9LWelfdwg0ASbEdq7oNE.roa (raw, json)
Hash identifier: 0W2wrWNrmRUENDCCBnbW3aZmbN+TDUYi2hc5moJQWdA=
Subject key identifier: F5:6E:E3:40:56:7D:2D:67:A5:7D:DC:20:D0:04:9B:11:DA:BB:A0:D1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019264C77EFA608CCF9897019F7DB2B5C561
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9W7jQFZ9LWelfdwg0ASbEdq7oNE.roa
Signing time: Mon 07 Oct 2024 02:20:48 +0000
ROA not before: Mon 07 Oct 2024 02:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215081
IP address blocks: 185.80.197.0/24 maxlen: 24
188.253.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 09:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:64:c7:7e:fa:60:8c:cf:98:97:01:9f:7d:b2:b5:c5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 7 02:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f56ee340567d2d67a57ddc20d0049b11dabba0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:5b:0d:82:e3:4f:7f:31:5e:66:88:0b:fc:
9e:15:b9:61:94:75:33:8b:06:cc:ba:97:36:bd:9b:
29:6e:17:ae:92:a2:36:73:0c:c8:1e:ab:fc:89:5a:
a9:f0:3b:0d:8f:b7:d0:25:df:7b:4d:8b:34:29:be:
04:73:44:e3:a1:d1:5f:2f:57:c2:f1:f1:f2:f8:c5:
b4:31:69:69:43:8e:44:49:29:bb:3b:16:54:b2:6a:
13:57:b2:56:28:c7:e3:b3:b5:3a:3c:0f:9f:86:d2:
98:91:0a:03:76:fb:e7:6d:78:68:71:15:4d:55:99:
81:b8:34:5e:29:c7:0e:e6:23:7e:e0:5d:da:81:2b:
01:27:78:91:a6:bc:92:f7:84:cf:ed:d4:83:56:1c:
5d:80:be:ad:2d:b0:8d:5d:45:73:44:2a:8b:3b:bb:
a9:7f:82:91:51:a5:e0:41:65:7d:21:98:db:a1:16:
04:b0:fb:01:dd:83:17:f2:f9:da:08:bb:fc:0c:5d:
cb:ff:e7:15:a3:df:31:47:1c:99:43:f9:ae:e1:df:
d2:6d:23:8a:3e:ae:d2:5a:98:34:69:99:fb:78:97:
a5:61:1b:ea:dd:2b:5d:0b:48:c7:58:4d:65:de:a2:
0a:04:19:24:b4:37:9c:a1:b5:9b:85:92:94:1d:d6:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:E3:40:56:7D:2D:67:A5:7D:DC:20:D0:04:9B:11:DA:BB:A0:D1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9W7jQFZ9LWelfdwg0ASbEdq7oNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.197.0/24
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
48:df:e9:16:79:e0:15:43:97:99:0a:38:2d:ba:07:05:6d:26:
44:1f:41:97:df:d6:ea:48:27:59:97:07:4c:22:ed:64:bc:6e:
e9:4b:dc:df:f6:a3:da:e4:40:f9:83:4f:f3:9e:a0:b4:c3:af:
fe:86:5b:18:04:ed:f1:b3:0d:d7:2b:08:66:f0:fa:a6:2f:3d:
d0:ca:73:66:44:03:a5:76:84:0b:26:bc:cd:c6:1e:b8:63:7c:
33:d2:c2:42:8f:45:25:02:af:d9:44:d8:d5:e4:7b:67:c8:13:
96:f8:60:a0:16:91:09:12:8e:16:5e:e7:ea:4f:4e:04:99:2f:
8d:40:de:cb:b8:e5:69:8a:16:bb:c3:20:45:0d:53:2d:f8:b2:
86:bf:f9:de:86:58:9e:c1:63:d9:a9:41:2c:18:2f:0a:f5:48:
28:63:ad:7c:0d:3b:83:7b:c4:ad:89:6f:c1:db:58:67:8e:9b:
85:86:48:95:4b:e1:cb:0b:3a:43:74:cd:38:4c:30:ac:a4:67:
9e:33:7b:90:2d:46:69:ef:6a:f8:be:3c:fa:dc:6b:72:7c:3e:
3f:10:6d:70:92:93:b4:77:a1:33:b1:9a:24:1f:a7:cd:61:c5:
ac:81:b7:30:e5:a1:a9:56:c6:e4:a7:4f:91:cc:6d:dc:d2:d4:
ff:5f:22:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJkx376YIzPmJcBn32ytcVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQxMDA3MDIyMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTZlZTM0MDU2N2QyZDY3YTU3ZGRjMjBkMDA0OWIxMWRhYmJhMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4JbDYLjT38xXmaIC/yeFblhlHUz
iwbMupc2vZspbheukqI2cwzIHqv8iVqp8DsNj7fQJd97TYs0Kb4Ec0TjodFfL1fC
8fHy+MW0MWlpQ45ESSm7OxZUsmoTV7JWKMfjs7U6PA+fhtKYkQoDdvvnbXhocRVN
VZmBuDReKccO5iN+4F3agSsBJ3iRpryS94TP7dSDVhxdgL6tLbCNXUVzRCqLO7up
f4KRUaXgQWV9IZjboRYEsPsB3YMX8vnaCLv8DF3L/+cVo98xRxyZQ/mu4d/SbSOK
Pq7SWpg0aZn7eJelYRvq3StdC0jHWE1l3qIKBBkktDecobWbhZKUHdYHQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPVu40BWfS1npX3cINAEmxHau6DRMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvOVc3alFGWjlMV2VsZmR3ZzBBU2JFZHE3b05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVDFAwQA
vP0JMA0GCSqGSIb3DQEBCwUAA4IBAQBI3+kWeeAVQ5eZCjgtugcFbSZEH0GX39bq
SCdZlwdMIu1kvG7pS9zf9qPa5ED5g0/znqC0w6/+hlsYBO3xsw3XKwhm8PqmLz3Q
ynNmRAOldoQLJrzNxh64Y3wz0sJCj0UlAq/ZRNjV5HtnyBOW+GCgFpEJEo4WXufq
T04EmS+NQN7LuOVpiha7wyBFDVMt+LKGv/nehliewWPZqUEsGC8K9UgoY618DTuD
e8StiW/B21hnjpuFhkiVS+HLCzpDdM04TDCspGeeM3uQLUZp72r4vjz63GtyfD4/
EG1wkpO0d6EzsZokH6fNYcWsgbcw5aGpVsbkp0+RzG3c0tT/XyK1
-----END CERTIFICATE-----
Generated at Tue Oct 22 13:48:37 2024 by rpki-client on console-ams.rpki-client.org