Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ONqBbV3LSzx1ru0WdY0UKWUeeMo.roa
File: ONqBbV3LSzx1ru0WdY0UKWUeeMo.roa (raw, json)
Hash identifier: WeeBdaRAFPbFeoc3jJUBWM9nGogJjYP+kbRggsqFGPU=
Subject key identifier: 38:DA:81:6D:5D:CB:4B:3C:75:AE:ED:16:75:8D:14:29:65:1E:78:CA
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 0185724723677E17301B4D7C53898A76B09D
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ONqBbV3LSzx1ru0WdY0UKWUeeMo.roa
Signing time: Mon 02 Jan 2023 11:39:02 +0000
ROA not before: Mon 02 Jan 2023 11:39:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59723
IP address blocks: 185.233.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:23:67:7e:17:30:1b:4d:7c:53:89:8a:76:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 11:39:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38da816d5dcb4b3c75aeed16758d1429651e78ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:70:be:cf:8a:26:f7:7d:91:cd:a6:e5:cf:
33:24:8b:c3:c3:4d:3f:f1:78:49:92:f8:7f:48:b9:
37:d9:96:8c:d5:c6:f5:c0:e9:b6:19:b2:99:87:28:
ea:98:23:fa:a5:28:3f:eb:b1:66:a0:98:2d:aa:db:
fd:f7:21:dc:f2:24:2d:5d:1a:94:c0:bc:b8:5e:42:
24:34:a5:5c:63:dc:39:b1:14:aa:aa:f5:31:ca:06:
51:38:d0:05:4b:f7:a7:06:fd:53:b8:89:b8:d4:53:
3c:f3:ed:de:88:18:d2:d8:85:f3:10:a3:aa:80:a7:
c0:7a:8a:4d:3c:24:7d:be:25:14:52:53:4f:66:d1:
66:3f:01:17:e1:14:13:e6:bd:29:4f:2b:2c:fe:01:
51:9f:10:1f:46:7b:7d:c6:7a:61:26:a4:68:bc:ff:
6c:ca:94:16:d6:08:08:1b:3a:c3:22:46:f0:a7:89:
1a:97:99:e6:38:29:b1:01:16:4d:62:05:c7:66:22:
22:72:80:a9:aa:c7:f3:21:ce:44:46:d7:b2:76:f6:
67:d6:8a:ea:b2:39:04:41:36:da:5c:47:70:16:01:
de:ae:b7:0c:42:d5:de:d1:20:d9:5c:89:a2:28:f7:
4c:3f:94:d4:ff:42:40:b2:13:1f:0a:02:f1:65:3e:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:81:6D:5D:CB:4B:3C:75:AE:ED:16:75:8D:14:29:65:1E:78:CA
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ONqBbV3LSzx1ru0WdY0UKWUeeMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
23:f5:f4:9c:28:2a:c6:d1:a4:91:be:b9:b9:15:87:b9:49:67:
85:ce:74:6d:24:99:38:c3:4d:11:0e:7f:5d:49:f1:5a:d7:81:
d0:86:a3:c6:0d:9e:21:49:99:36:40:77:7b:23:f3:ef:3e:7f:
18:a0:2d:5f:24:33:1f:37:db:d1:f6:77:f2:97:c0:0b:af:ca:
6b:61:ba:98:37:09:3b:bd:5a:49:b0:b2:e0:e9:4b:43:4b:d1:
49:f2:8a:49:48:b3:3f:65:d7:1b:15:b6:29:6b:b6:2b:39:d7:
30:5b:9d:a7:fc:95:ec:60:3a:6e:da:cf:2c:c4:16:74:bf:8d:
2f:a5:65:b2:c0:96:02:79:3e:28:33:d3:71:c5:e2:71:6e:73:
eb:92:7d:c8:ef:ab:88:43:d2:7d:e4:88:24:40:92:f9:24:cf:
a1:41:e7:00:a9:01:15:1f:36:d5:13:70:c0:4c:80:03:60:44:
90:a3:51:90:c1:95:4c:8f:07:1b:e4:10:df:9a:6b:7a:30:bd:
b2:45:2f:b7:0c:6d:79:e2:06:9e:5b:68:17:e2:e7:d2:15:bc:
e0:23:e4:10:cb:d7:df:c7:53:66:43:64:95:e2:5b:ac:58:9f:
87:e2:3f:35:03:34:b1:6c:a8:88:de:c1:fb:80:4c:6b:2e:3c:
20:80:da:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRyNnfhcwG018U4mKdrCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2
NTIxNDAwHhcNMjMwMTAyMTEzOTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGRhODE2ZDVkY2I0YjNjNzVhZWVkMTY3NThkMTQyOTY1MWU3OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iFwvs+KJvd9kc2m5c8zJIvDw00/
8XhJkvh/SLk32ZaM1cb1wOm2GbKZhyjqmCP6pSg/67FmoJgtqtv99yHc8iQtXRqU
wLy4XkIkNKVcY9w5sRSqqvUxygZRONAFS/enBv1TuIm41FM88+3eiBjS2IXzEKOq
gKfAeopNPCR9viUUUlNPZtFmPwEX4RQT5r0pTyss/gFRnxAfRnt9xnphJqRovP9s
ypQW1ggIGzrDIkbwp4kal5nmOCmxARZNYgXHZiIicoCpqsfzIc5ERteydvZn1orq
sjkEQTbaXEdwFgHerrcMQtXe0SDZXImiKPdMP5TU/0JAshMfCgLxZT6BnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjagW1dy0s8da7tFnWNFCllHnjKMB8GA1UdIwQY
MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt
MThlMThkNjU5ZDhmLzEvT05xQmJWM0xTengxcnUwV2RZMFVLV1VlZU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm
LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuenoMA0G
CSqGSIb3DQEBCwUAA4IBAQAj9fScKCrG0aSRvrm5FYe5SWeFznRtJJk4w00RDn9d
SfFa14HQhqPGDZ4hSZk2QHd7I/PvPn8YoC1fJDMfN9vR9nfyl8ALr8prYbqYNwk7
vVpJsLLg6UtDS9FJ8opJSLM/ZdcbFbYpa7YrOdcwW52n/JXsYDpu2s8sxBZ0v40v
pWWywJYCeT4oM9NxxeJxbnPrkn3I76uIQ9J95IgkQJL5JM+hQecAqQEVHzbVE3DA
TIADYESQo1GQwZVMjwcb5BDfmmt6ML2yRS+3DG154gaeW2gX4ufSFbzgI+QQy9ff
x1NmQ2SV4lusWJ+H4j81AzSxbKiI3sH7gExrLjwggNpg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org