Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Xh42Mr5AQsHE7aZpTJXup6b8s5E.roa
File: Xh42Mr5AQsHE7aZpTJXup6b8s5E.roa (raw, json)
Hash identifier: zqnsrXVHCf9LS1vBsHXaqV6B/0mXQa/dEh07l97ktz8=
Subject key identifier: 5E:1E:36:32:BE:40:42:C1:C4:ED:A6:69:4C:95:EE:A7:A6:FC:B3:91
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018EDBE38E83C09E66F044F1D41F616DCB35
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Xh42Mr5AQsHE7aZpTJXup6b8s5E.roa
Signing time: Sun 14 Apr 2024 09:15:07 +0000
ROA not before: Sun 14 Apr 2024 09:15:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 16:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:e3:8e:83:c0:9e:66:f0:44:f1:d4:1f:61:6d:cb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 14 09:15:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e1e3632be4042c1c4eda6694c95eea7a6fcb391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:cf:c3:49:c5:82:9e:2e:92:69:36:ca:58:
6c:02:2d:00:c1:22:40:7d:9b:3b:af:5f:57:42:84:
3e:79:0e:6e:de:21:aa:2f:dc:00:ef:bd:e9:c0:2f:
5f:30:0d:dc:4e:27:cd:c6:fe:86:73:6c:47:1a:1d:
33:67:bb:e3:bd:da:73:9e:6d:0e:e0:8b:41:09:23:
95:cf:bc:41:61:4a:4f:9d:36:1d:f1:40:92:3d:87:
53:4d:de:2e:9f:b9:a7:cf:27:d5:ab:c2:4b:34:0c:
cb:7f:f3:7f:92:d8:ab:58:ed:35:2f:2f:c1:f2:f8:
0e:24:5b:70:95:c3:67:f8:da:f8:aa:26:e4:aa:13:
35:1d:2b:75:31:b3:22:21:59:e8:40:43:75:2b:3c:
39:8d:4c:ee:5c:de:ec:2f:37:08:49:42:d5:5c:4f:
c9:f1:29:fd:27:fb:2e:1b:ec:ed:1c:af:ec:91:71:
3c:8b:dd:8c:dd:b5:aa:ee:14:f0:cb:ae:9e:c2:d9:
b3:e9:47:10:c4:93:74:40:f7:65:90:39:2a:60:5b:
c5:f1:49:f3:ff:02:af:74:f8:26:f1:d5:ae:67:d4:
36:0c:b2:ba:34:b6:ab:d5:83:72:c1:7f:66:3f:43:
d5:ff:08:67:44:f8:b4:7c:84:62:a5:cb:2d:e1:f9:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:36:32:BE:40:42:C1:C4:ED:A6:69:4C:95:EE:A7:A6:FC:B3:91
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Xh42Mr5AQsHE7aZpTJXup6b8s5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:32:dd:f6:8a:c0:a0:c4:99:27:26:d5:11:c8:19:3c:e2:
0b:8a:80:cc:05:10:58:ed:62:0e:92:10:5c:bf:76:c3:22:e8:
8d:26:48:19:35:7e:01:57:02:80:5d:8f:d3:0a:b1:5d:e8:af:
7f:01:8e:ca:cb:d2:b8:56:f2:7e:c9:1a:bf:d1:a6:1a:49:b8:
00:69:82:d0:86:9c:dd:1f:c3:3f:a2:55:10:d3:fb:92:40:9c:
58:c2:c9:9d:11:d1:bc:20:b1:eb:cb:8b:51:5e:a7:d9:da:5e:
7d:1d:1d:77:7e:2e:d0:f2:48:bd:e2:88:d0:28:77:6f:fd:c3:
b7:36:e0:e4:c0:db:48:7e:93:22:6f:38:f6:0f:bc:76:82:38:
48:72:dd:2c:12:2b:05:a1:9e:db:b9:b3:37:24:12:3a:80:8e:
1c:e2:01:a3:6d:23:6b:b7:2e:5e:4a:02:73:fa:0b:41:a6:bd:
8d:b8:81:28:67:96:03:5b:35:18:8a:4b:f4:1a:8c:8b:e4:a8:
6a:ea:71:e4:df:37:3c:b9:9a:3f:e9:d7:1d:27:f9:0c:f0:f8:
82:c0:95:f8:38:6e:ef:2d:6e:1b:6c:a1:31:20:7d:24:04:33:
49:30:e1:94:5a:00:ad:d2:52:63:ae:d4:67:e9:f9:13:46:f8:
59:26:25:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7b446DwJ5m8ETx1B9hbcs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjQwNDE0MDkxNTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTFlMzYzMmJlNDA0MmMxYzRlZGE2Njk0Yzk1ZWVhN2E2ZmNiMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHDPw0nFgp4ukmk2ylhsAi0AwSJA
fZs7r19XQoQ+eQ5u3iGqL9wA773pwC9fMA3cTifNxv6Gc2xHGh0zZ7vjvdpznm0O
4ItBCSOVz7xBYUpPnTYd8UCSPYdTTd4un7mnzyfVq8JLNAzLf/N/ktirWO01Ly/B
8vgOJFtwlcNn+Nr4qibkqhM1HSt1MbMiIVnoQEN1Kzw5jUzuXN7sLzcISULVXE/J
8Sn9J/suG+ztHK/skXE8i92M3bWq7hTwy66ewtmz6UcQxJN0QPdlkDkqYFvF8Unz
/wKvdPgm8dWuZ9Q2DLK6NLar1YNywX9mP0PV/whnRPi0fIRipcst4fnnrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF4eNjK+QELBxO2maUyV7qem/LORMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvWGg0Mk1yNUFRc0hFN2FacFRKWHVwNmI4czVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSEaMA0G
CSqGSIb3DQEBCwUAA4IBAQCKFzLd9orAoMSZJybVEcgZPOILioDMBRBY7WIOkhBc
v3bDIuiNJkgZNX4BVwKAXY/TCrFd6K9/AY7Ky9K4VvJ+yRq/0aYaSbgAaYLQhpzd
H8M/olUQ0/uSQJxYwsmdEdG8ILHry4tRXqfZ2l59HR13fi7Q8ki94ojQKHdv/cO3
NuDkwNtIfpMibzj2D7x2gjhIct0sEisFoZ7bubM3JBI6gI4c4gGjbSNrty5eSgJz
+gtBpr2NuIEoZ5YDWzUYikv0GoyL5Khq6nHk3zc8uZo/6dcdJ/kM8PiCwJX4OG7v
LW4bbKExIH0kBDNJMOGUWgCt0lJjrtRn6fkTRvhZJiXQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:32 2024 by rpki-client on console-fra.rpki-client.org