Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/sJ0yGot9abgggqOklGrAWzreqVw.roa
File: sJ0yGot9abgggqOklGrAWzreqVw.roa (raw, json)
Hash identifier: Q7Qohi3XA2h6HDZxVwv6sUbDy4d8Q2V0X2n2jGYvKEc=
Subject key identifier: B0:9D:32:1A:8B:7D:69:B8:20:82:A3:A4:94:6A:C0:5B:3A:DE:A9:5C
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 01893ABF6B88FA29804DFFB9D753B3E29778
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/sJ0yGot9abgggqOklGrAWzreqVw.roa
Signing time: Sun 09 Jul 2023 13:02:50 +0000
ROA not before: Sun 09 Jul 2023 13:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205229
IP address blocks: 185.224.176.0/22 maxlen: 24
185.224.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:bf:6b:88:fa:29:80:4d:ff:b9:d7:53:b3:e2:97:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jul 9 13:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09d321a8b7d69b82082a3a4946ac05b3adea95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:9e:66:4f:ff:fc:c6:c9:0e:18:6f:4f:97:
91:51:df:3c:46:98:fd:7a:24:0c:1c:7e:78:19:8b:
93:0c:49:88:26:93:21:33:c0:12:63:32:86:de:94:
70:95:85:48:88:66:6f:f1:c3:bc:e1:36:ce:ed:71:
e0:35:a8:c2:63:7f:b0:39:0f:ce:90:13:89:47:d5:
4d:19:9b:6c:57:8b:4d:02:01:07:16:89:d1:1f:6e:
07:76:5b:a0:6c:1a:d4:18:ba:df:3f:77:58:29:8b:
4b:46:14:78:c1:8d:22:43:5e:4b:46:d7:f0:96:49:
fb:ba:24:61:12:16:98:c4:98:53:9e:50:c9:85:66:
9b:52:c0:57:00:87:e4:1c:80:c2:92:08:bb:dd:f2:
01:b7:75:da:b5:f8:14:bc:48:d1:01:02:9f:ec:dd:
ae:ef:08:d5:b9:65:fb:1e:8e:80:26:9a:e3:81:3a:
c8:3a:d8:78:f4:9c:60:f8:a1:8b:72:2b:fd:20:a2:
27:ff:1a:e9:2c:87:51:3e:11:8d:a7:b4:42:74:a1:
a3:f6:d8:51:36:44:34:10:0d:69:70:df:37:ff:d0:
c3:8c:cb:c9:bd:c0:3b:d4:88:39:8d:a5:1d:9a:1f:
3d:76:9f:75:23:66:15:75:3a:c8:4e:0d:70:a6:62:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:32:1A:8B:7D:69:B8:20:82:A3:A4:94:6A:C0:5B:3A:DE:A9:5C
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/sJ0yGot9abgggqOklGrAWzreqVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.176.0/22
Signature Algorithm: sha256WithRSAEncryption
37:fa:fb:57:dc:dd:79:8d:a8:71:f2:d0:1a:df:bf:43:b9:36:
77:de:c2:05:a0:42:92:2e:41:3f:90:78:bb:b6:90:53:18:c3:
d7:8c:b2:49:1e:73:f0:b3:b8:78:4f:87:fc:f9:ee:44:c5:1c:
6c:d5:9c:fa:b3:b9:d7:48:10:8e:2d:50:7d:01:be:48:0c:18:
9d:61:b9:38:1a:99:ac:d3:f9:b9:e2:d7:9a:eb:88:f7:d6:e7:
07:ad:ad:75:af:4b:fd:cc:90:01:5b:be:43:29:8a:13:4a:1f:
c4:f9:76:6d:cf:40:85:22:b5:6f:8b:fa:d5:0b:0d:dd:29:b7:
50:c2:66:9b:63:c3:fe:f5:71:ac:10:df:35:d6:32:cf:97:ed:
9d:73:a9:ef:60:14:72:a4:48:33:09:1d:94:d1:e6:2f:7f:8c:
b4:da:6d:28:2a:d1:56:6a:99:07:f7:a1:2f:fb:cc:9f:b3:7d:
78:b3:86:fd:9e:95:ab:d1:2e:46:73:a1:ea:db:a0:a9:39:88:
26:03:54:f4:b6:6a:c5:47:5e:08:5c:eb:da:aa:20:96:21:bd:
e1:8d:1e:f6:3d:ad:a7:0b:c7:ac:3b:cb:ba:9f:76:70:49:b5:
b7:71:f1:87:d8:eb:5a:20:c7:05:fd:d0:d5:f6:8c:90:b2:44:
97:ea:5f:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk6v2uI+imATf+511Oz4pd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0
OThiYWIwHhcNMjMwNzA5MTMwMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDlkMzIxYThiN2Q2OWI4MjA4MmEzYTQ5NDZhYzA1YjNhZGVhOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/KeZk///MbJDhhvT5eRUd88Rpj9
eiQMHH54GYuTDEmIJpMhM8ASYzKG3pRwlYVIiGZv8cO84TbO7XHgNajCY3+wOQ/O
kBOJR9VNGZtsV4tNAgEHFonRH24HdlugbBrUGLrfP3dYKYtLRhR4wY0iQ15LRtfw
lkn7uiRhEhaYxJhTnlDJhWabUsBXAIfkHIDCkgi73fIBt3XatfgUvEjRAQKf7N2u
7wjVuWX7Ho6AJprjgTrIOth49Jxg+KGLciv9IKIn/xrpLIdRPhGNp7RCdKGj9thR
NkQ0EA1pcN83/9DDjMvJvcA71Ig5jaUdmh89dp91I2YVdTrITg1wpmL+yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCdMhqLfWm4IIKjpJRqwFs63qlcMB8GA1UdIwQY
MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct
ZTlkYWY3OWViNzVlLzEvc0oweUdvdDlhYmdnZ3FPa2xHckFXenJlcVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl
LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueCwMA0G
CSqGSIb3DQEBCwUAA4IBAQA3+vtX3N15jahx8tAa379DuTZ33sIFoEKSLkE/kHi7
tpBTGMPXjLJJHnPws7h4T4f8+e5ExRxs1Zz6s7nXSBCOLVB9Ab5IDBidYbk4Gpms
0/m54tea64j31ucHra11r0v9zJABW75DKYoTSh/E+XZtz0CFIrVvi/rVCw3dKbdQ
wmabY8P+9XGsEN811jLPl+2dc6nvYBRypEgzCR2U0eYvf4y02m0oKtFWapkH96Ev
+8yfs314s4b9npWr0S5Gc6Hq26CpOYgmA1T0tmrFR14IXOvaqiCWIb3hjR72Pa2n
C8esO8u6n3ZwSbW3cfGH2OtaIMcF/dDV9oyQskSX6l/P
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:50 2024 by rpki-client on console-fra.rpki-client.org