Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/eyZu_zqrrRxYZBCDAYAGi2W5YYA.roa
File: eyZu_zqrrRxYZBCDAYAGi2W5YYA.roa (raw, json)
Hash identifier: B5xE/aqrT62x80LZ8VWpsfdd77RQQY1T8LH0Gs9Qkgo=
Subject key identifier: 7B:26:6E:FF:3A:AB:AD:1C:58:64:10:83:01:80:06:8B:65:B9:61:80
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 018C5E01815FADF959F93F93CE276FB4A895
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/eyZu_zqrrRxYZBCDAYAGi2W5YYA.roa
Signing time: Tue 12 Dec 2023 12:30:06 +0000
ROA not before: Tue 12 Dec 2023 12:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.57.0/24 maxlen: 24
185.248.58.0/24 maxlen: 24
185.248.56.0/24 maxlen: 24
2a0d:2bc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:01:81:5f:ad:f9:59:f9:3f:93:ce:27:6f:b4:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Dec 12 12:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b266eff3aabad1c586410830180068b65b96180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:0a:4b:57:36:4d:02:8e:f6:a8:2b:37:10:
ba:47:c1:e5:a3:6b:15:de:da:a0:59:2c:8d:76:49:
41:35:80:3c:cf:35:ba:85:01:c3:c2:bf:07:d0:04:
7a:b9:4a:c3:5f:1d:22:de:f8:66:66:0a:01:0e:2b:
95:e8:f1:52:0f:9f:df:13:77:e5:0d:3a:2f:c7:92:
54:b6:fd:2c:84:e1:e3:c5:bd:92:e5:f3:71:79:aa:
29:88:be:99:69:98:af:d4:0c:e9:5c:ef:bf:cd:c8:
cd:0b:84:91:1c:17:ec:dd:9c:88:7f:43:20:60:ba:
69:5f:30:e2:fd:b8:07:63:00:ac:c6:b1:71:8f:bb:
17:4c:1c:d2:a4:75:88:b1:64:fc:d0:c4:2a:4f:c2:
f3:e6:cf:ab:d9:dc:73:2c:f2:ea:77:71:26:7e:9b:
4e:f6:7c:7b:6a:37:88:19:dc:b7:92:88:4f:e3:4c:
ca:84:64:06:74:72:08:bf:ae:cf:2b:bd:22:c5:36:
32:ce:60:31:95:c9:31:58:09:e3:36:ea:66:07:ce:
17:e8:e9:1c:63:9d:35:d0:b9:44:3e:f3:c7:1b:c1:
2b:65:14:cb:d9:96:52:7b:dc:0d:df:97:cd:c7:e4:
0e:5c:6f:2e:8e:2a:27:5e:3a:bf:3e:86:56:e7:43:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:6E:FF:3A:AB:AD:1C:58:64:10:83:01:80:06:8B:65:B9:61:80
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/eyZu_zqrrRxYZBCDAYAGi2W5YYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0-185.248.58.255
IPv6:
2a0d:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:23:bf:e2:d3:7d:56:34:2a:8f:42:89:ba:10:06:0f:0a:60:
47:ba:f7:c9:4b:16:e0:9b:28:e6:36:0b:6b:74:b2:74:27:44:
3e:25:24:b5:55:6c:1d:9e:29:53:88:36:17:b6:df:5c:50:43:
b9:b8:03:cc:9e:6a:30:60:f0:02:c2:cf:da:c0:8b:11:d4:a9:
fc:1a:9e:05:6e:7e:75:7e:5d:a0:80:07:9a:ff:cb:68:fd:c1:
f6:25:16:89:73:d5:14:cb:f8:bb:e8:fa:68:7b:33:92:2b:e4:
09:d4:30:e4:a0:0f:9a:a3:aa:de:1b:fd:ab:a5:77:d2:92:c8:
4b:ff:00:9f:f2:a8:32:1d:ca:b1:b3:9a:bf:26:77:f6:17:8f:
91:bb:42:cb:2a:7a:5c:83:e2:fb:df:ad:40:1c:f9:79:e2:03:
e0:03:87:e4:3c:2f:20:e4:a6:de:f6:7c:34:70:57:23:77:3b:
37:99:5f:15:b0:a8:8f:fe:84:18:07:19:e9:47:34:59:1e:8e:
19:3e:9c:ae:42:34:dd:11:67:bb:62:4f:02:42:ce:e8:0b:bf:
ea:19:46:57:55:a5:5d:72:4a:56:83:6c:06:5b:99:5d:8f:9d:
91:12:fa:21:60:8f:07:de:94:ac:e3:13:30:c7:f7:18:cc:fd:
3d:56:b0:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxeAYFfrflZ+T+TzidvtKiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4
N2FiZjEwHhcNMjMxMjEyMTIzMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjI2NmVmZjNhYWJhZDFjNTg2NDEwODMwMTgwMDY4YjY1Yjk2MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMKS1c2TQKO9qgrNxC6R8Hlo2sV
3tqgWSyNdklBNYA8zzW6hQHDwr8H0AR6uUrDXx0i3vhmZgoBDiuV6PFSD5/fE3fl
DTovx5JUtv0shOHjxb2S5fNxeaopiL6ZaZiv1AzpXO+/zcjNC4SRHBfs3ZyIf0Mg
YLppXzDi/bgHYwCsxrFxj7sXTBzSpHWIsWT80MQqT8Lz5s+r2dxzLPLqd3EmfptO
9nx7ajeIGdy3kohP40zKhGQGdHIIv67PK70ixTYyzmAxlckxWAnjNupmB84X6Okc
Y5010LlEPvPHG8ErZRTL2ZZSe9wN35fNx+QOXG8ujionXjq/PoZW50NV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsmbv86q60cWGQQgwGABotluWGAMB8GA1UdIwQY
MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt
OTllZWExZjBhMzU0LzEvZXladV96cXJyUnhZWkJDREFZQUdpMlc1WVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0
LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAO5+DgD
BAC5+DowDwQCAAIwCQMHACoNK8AAADANBgkqhkiG9w0BAQsFAAOCAQEATyO/4tN9
VjQqj0KJuhAGDwpgR7r3yUsW4Jso5jYLa3SydCdEPiUktVVsHZ4pU4g2F7bfXFBD
ubgDzJ5qMGDwAsLP2sCLEdSp/BqeBW5+dX5doIAHmv/LaP3B9iUWiXPVFMv4u+j6
aHszkivkCdQw5KAPmqOq3hv9q6V30pLIS/8An/KoMh3KsbOavyZ39hePkbtCyyp6
XIPi+9+tQBz5eeID4AOH5DwvIOSm3vZ8NHBXI3c7N5lfFbCoj/6EGAcZ6Uc0WR6O
GT6crkI03RFnu2JPAkLO6Au/6hlGV1WlXXJKVoNsBluZXY+dkRL6IWCPB96UrOMT
MMf3GMz9PVawpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:36 2024 by rpki-client on console-ams.rpki-client.org