Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/ERuoZMwl30cpql7d6TKwYZGlQ1s.roa
File: ERuoZMwl30cpql7d6TKwYZGlQ1s.roa (raw, json)
Hash identifier: yf9RuMdBWiGW2wcBMrI4HaxMeX2vVKQnX99fQjQ8Veg=
Subject key identifier: 11:1B:A8:64:CC:25:DF:47:29:AA:5E:DD:E9:32:B0:61:91:A5:43:5B
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 01856E01FB3AF768702595CCE492847B5A82
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/ERuoZMwl30cpql7d6TKwYZGlQ1s.roa
Signing time: Sun 01 Jan 2023 15:45:01 +0000
ROA not before: Sun 01 Jan 2023 15:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206610
IP address blocks: 185.104.168.0/22 maxlen: 24
185.173.180.0/22 maxlen: 24
2a0b:b880::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Jun 2023 16:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:fb:3a:f7:68:70:25:95:cc:e4:92:84:7b:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jan 1 15:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111ba864cc25df4729aa5edde932b06191a5435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:19:0b:65:93:28:45:cd:d8:bb:63:14:1a:
39:68:bc:d3:df:e8:c2:8f:94:fe:d5:d7:43:89:74:
86:18:1d:d0:4a:fe:56:b7:0d:4f:48:38:26:5e:80:
a8:40:16:39:35:e1:ad:5f:44:2c:28:75:ff:77:da:
47:f4:83:f1:64:38:0e:13:2f:35:0e:0f:0c:3a:4f:
c6:33:ae:82:08:96:b8:6e:38:51:f6:52:43:d0:0f:
00:f0:1d:75:b6:cc:a4:92:7b:b1:ee:58:4d:c9:2f:
e4:4b:1e:d0:92:3b:f0:09:32:61:d7:ec:55:b2:f8:
ac:e4:ba:b7:5a:78:73:d3:f9:3c:d6:be:6c:26:16:
60:5c:79:ee:cf:8d:fd:27:2b:a5:ea:3c:c0:f1:e5:
65:2d:8a:aa:a5:d0:23:f7:84:ee:bf:9c:03:b6:a5:
89:8c:bc:78:dd:d5:2f:4b:5f:ef:9a:a8:0d:fd:d1:
ec:10:0a:c1:0f:bf:f7:43:4f:2a:31:1d:88:02:f6:
95:9a:e3:f7:cc:84:b9:05:8f:86:91:fc:e4:32:bc:
f1:92:bd:b1:6f:26:79:8e:5e:47:dd:3e:96:89:54:
26:7c:25:c3:8b:e5:a4:f5:f3:05:4b:15:b3:c9:6d:
b9:ac:19:e6:a7:b4:3f:53:0a:e3:26:e6:9e:91:02:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:A8:64:CC:25:DF:47:29:AA:5E:DD:E9:32:B0:61:91:A5:43:5B
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/ERuoZMwl30cpql7d6TKwYZGlQ1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.168.0/22
185.173.180.0/22
IPv6:
2a0b:b880::/29
Signature Algorithm: sha256WithRSAEncryption
72:10:35:15:81:57:8c:de:86:76:d5:86:8b:8e:ce:6f:8c:d4:
f0:ac:08:de:97:4d:18:4a:e7:a6:06:fa:91:2c:d7:9b:9c:01:
e7:4e:84:9f:6b:a9:00:9c:2d:7d:d0:21:eb:45:58:60:e6:90:
ee:46:d9:ff:ed:3f:1a:66:28:a1:4f:02:3c:d7:79:42:1a:e8:
42:9c:20:8a:b9:86:28:f3:c6:1e:fd:15:bc:07:c8:1f:b9:bf:
8f:49:b8:33:be:4f:89:85:26:10:cc:02:0a:4b:13:9d:84:2c:
da:8d:40:7d:da:86:10:cc:6c:a2:3c:22:4f:bd:97:da:00:c4:
3c:5d:ea:10:10:f9:a1:40:af:9f:6e:06:32:bb:d9:74:c2:51:
c6:b5:02:19:71:b9:9a:13:ab:b8:30:33:2e:f8:5d:17:4b:8b:
0f:92:53:6e:45:34:ae:41:dc:95:b9:d4:0c:b1:dd:03:36:85:
ac:18:e7:bc:af:c7:7b:4e:d2:bb:ec:0b:a3:2a:d9:63:be:5d:
0d:8e:80:5c:89:14:75:7e:05:19:b6:1e:1b:a3:e3:5f:b8:e2:
92:47:0b:7f:a6:65:a5:16:20:83:af:1c:b9:3c:95:0d:3d:6c:
98:f0:67:e4:a2:dd:7a:7a:5b:5a:3b:00:d7:fc:90:7d:2d:aa:
48:99:4f:3e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVuAfs692hwJZXM5JKEe1qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjMwMTAxMTU0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTFiYTg2NGNjMjVkZjQ3MjlhYTVlZGRlOTMyYjA2MTkxYTU0MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLsZC2WTKEXN2LtjFBo5aLzT3+jC
j5T+1ddDiXSGGB3QSv5Wtw1PSDgmXoCoQBY5NeGtX0QsKHX/d9pH9IPxZDgOEy81
Dg8MOk/GM66CCJa4bjhR9lJD0A8A8B11tsykknux7lhNyS/kSx7QkjvwCTJh1+xV
svis5Lq3Wnhz0/k81r5sJhZgXHnuz439Jyul6jzA8eVlLYqqpdAj94Tuv5wDtqWJ
jLx43dUvS1/vmqgN/dHsEArBD7/3Q08qMR2IAvaVmuP3zIS5BY+GkfzkMrzxkr2x
byZ5jl5H3T6WiVQmfCXDi+Wk9fMFSxWzyW25rBnmp7Q/UwrjJuaekQJUzwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBEbqGTMJd9HKape3ekysGGRpUNbMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEvRVJ1b1pNd2wzMGNwcWw3ZDZUS3dZWkdsUTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWioAwQC
ua20MA0EAgACMAcDBQMqC7iAMA0GCSqGSIb3DQEBCwUAA4IBAQByEDUVgVeM3oZ2
1YaLjs5vjNTwrAjel00YSuemBvqRLNebnAHnToSfa6kAnC190CHrRVhg5pDuRtn/
7T8aZiihTwI813lCGuhCnCCKuYYo88Ye/RW8B8gfub+PSbgzvk+JhSYQzAIKSxOd
hCzajUB92oYQzGyiPCJPvZfaAMQ8XeoQEPmhQK+fbgYyu9l0wlHGtQIZcbmaE6u4
MDMu+F0XS4sPklNuRTSuQdyVudQMsd0DNoWsGOe8r8d7TtK77AujKtljvl0NjoBc
iRR1fgUZth4bo+NfuOKSRwt/pmWlFiCDrxy5PJUNPWyY8Gfkot16eltaOwDX/JB9
LapImU8+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:21 2024 by rpki-client on console-ams.rpki-client.org