Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/EHmzaJyyIdqpbKiG2RoAnc2Q93U.roa
File: EHmzaJyyIdqpbKiG2RoAnc2Q93U.roa (raw, json)
Hash identifier: gqJTnky0TdH73HsXjaT3QLi4hTV3ZgNH0rDM8ur2x7I=
Subject key identifier: 10:79:B3:68:9C:B2:21:DA:A9:6C:A8:86:D9:1A:00:9D:CD:90:F7:75
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 01856B4A4EE614F0C40E046A8176007ADF64
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/EHmzaJyyIdqpbKiG2RoAnc2Q93U.roa
Signing time: Sun 01 Jan 2023 03:05:09 +0000
ROA not before: Sun 01 Jan 2023 03:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201534
IP address blocks: 185.71.219.0/24 maxlen: 24
185.71.216.0/24 maxlen: 24
185.71.218.0/24 maxlen: 24
185.71.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:4e:e6:14:f0:c4:0e:04:6a:81:76:00:7a:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jan 1 03:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1079b3689cb221daa96ca886d91a009dcd90f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:20:22:1f:53:4a:4b:7a:9f:7c:d8:ff:39:
51:04:00:be:c1:ea:7e:2f:af:8a:8f:29:1e:9c:b3:
83:4d:c0:59:e9:48:91:f9:8b:d9:c5:b5:75:b2:dd:
54:66:de:49:2d:7f:d2:40:6e:82:e6:b0:af:5a:76:
53:43:23:64:53:94:92:57:6b:69:3f:a2:a5:12:27:
1c:83:24:64:90:e3:4a:68:3a:79:97:24:4d:73:13:
84:17:ab:c6:24:45:ad:37:8b:66:3c:fb:dd:90:97:
c3:ba:43:6b:f1:17:21:0f:6a:e0:47:bf:b3:8a:9e:
b3:03:ee:77:09:e9:eb:96:03:c1:66:ed:60:4f:f8:
de:60:8f:81:b1:b5:5f:9a:7c:67:c6:6c:dd:51:72:
32:c3:62:ad:e2:06:c4:26:af:4e:4f:43:7d:15:1b:
3b:ff:b9:fe:24:7d:9a:50:b5:80:f5:d8:c1:92:0d:
ba:35:f6:33:28:93:b6:80:e4:f2:7e:ea:9b:68:55:
34:e4:e1:69:af:c8:60:8f:f3:4f:22:26:ba:d8:85:
3a:f8:53:78:cf:0f:03:0b:70:7d:99:8a:e5:54:fd:
97:9d:2a:f0:52:4f:40:16:3f:75:0b:17:62:b9:c2:
e0:79:d9:dc:56:ce:c2:8b:0f:50:f1:cc:f9:7d:c9:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:B3:68:9C:B2:21:DA:A9:6C:A8:86:D9:1A:00:9D:CD:90:F7:75
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/EHmzaJyyIdqpbKiG2RoAnc2Q93U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.216.0/22
Signature Algorithm: sha256WithRSAEncryption
34:01:17:11:65:b5:39:ba:87:b4:82:26:37:82:9f:72:e0:c0:
df:6f:e0:49:13:78:fd:16:d4:35:49:07:0f:35:3f:a1:00:02:
c4:c6:8e:e6:01:18:7b:43:d3:74:c1:bb:1c:03:c8:69:46:12:
12:f0:d1:0c:9b:a8:bb:eb:8c:42:cb:de:89:81:43:a6:5b:86:
e6:01:53:af:15:18:9e:ea:78:c1:4f:7d:a6:2a:7d:8a:bb:88:
2e:22:12:95:37:ee:34:c9:c6:3d:59:9a:a9:e4:f0:6f:ad:09:
3c:6b:4f:95:72:48:6b:3f:26:7d:85:ea:7b:c8:4c:fe:ba:1a:
f2:d5:f8:2b:de:4c:85:fd:e9:20:2b:b2:74:c1:17:ec:0f:50:
a8:64:1b:40:ed:eb:68:cd:fb:a1:92:c1:eb:0e:3e:d6:da:8f:
0e:95:5c:60:15:71:e6:61:25:9d:c3:f6:1a:69:8e:13:45:76:
aa:86:8d:72:a0:fb:f9:8d:72:b7:69:8e:31:20:0e:a7:3b:98:
a3:9b:f1:0c:25:cc:eb:ec:ec:d1:ed:39:9d:55:b3:ae:88:c9:
a4:79:72:38:dd:48:8e:0f:26:52:b1:8f:84:b1:41:03:9e:6a:
40:10:e9:de:55:d8:62:cd:d2:40:04:b9:69:2a:e6:13:04:bb:
9a:51:35:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSk7mFPDEDgRqgXYAet9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjMwMTAxMDMwNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc5YjM2ODljYjIyMWRhYTk2Y2E4ODZkOTFhMDA5ZGNkOTBmNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqYgIh9TSkt6n3zY/zlRBAC+wep+
L6+KjykenLODTcBZ6UiR+YvZxbV1st1UZt5JLX/SQG6C5rCvWnZTQyNkU5SSV2tp
P6KlEiccgyRkkONKaDp5lyRNcxOEF6vGJEWtN4tmPPvdkJfDukNr8RchD2rgR7+z
ip6zA+53CenrlgPBZu1gT/jeYI+BsbVfmnxnxmzdUXIyw2Kt4gbEJq9OT0N9FRs7
/7n+JH2aULWA9djBkg26NfYzKJO2gOTyfuqbaFU05OFpr8hgj/NPIia62IU6+FN4
zw8DC3B9mYrlVP2XnSrwUk9AFj91CxdiucLgedncVs7Ciw9Q8cz5fcl09wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBB5s2icsiHaqWyohtkaAJ3NkPd1MB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEvRUhtemFKeXlJZHFwYktpRzJSb0FuYzJROTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUfYMA0G
CSqGSIb3DQEBCwUAA4IBAQA0ARcRZbU5uoe0giY3gp9y4MDfb+BJE3j9FtQ1SQcP
NT+hAALExo7mARh7Q9N0wbscA8hpRhIS8NEMm6i764xCy96JgUOmW4bmAVOvFRie
6njBT32mKn2Ku4guIhKVN+40ycY9WZqp5PBvrQk8a0+VckhrPyZ9hep7yEz+uhry
1fgr3kyF/ekgK7J0wRfsD1CoZBtA7etozfuhksHrDj7W2o8OlVxgFXHmYSWdw/Ya
aY4TRXaqho1yoPv5jXK3aY4xIA6nO5ijm/EMJczr7OzR7TmdVbOuiMmkeXI43UiO
DyZSsY+EsUEDnmpAEOneVdhizdJABLlpKuYTBLuaUTWY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org