Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/9zvVp7SzCnk_l0PmcKtgRAz53X0.roa
File: 9zvVp7SzCnk_l0PmcKtgRAz53X0.roa (raw, json)
Hash identifier: 10EHB3Xr4pr3lAk6Yb9UFQ0oRKzISGeXGI01dfuL9M0=
Subject key identifier: F7:3B:D5:A7:B4:B3:0A:79:3F:97:43:E6:70:AB:60:44:0C:F9:DD:7D
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018B3D5310C545C61E9B9C4C7D6C4D7F5A56
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/9zvVp7SzCnk_l0PmcKtgRAz53X0.roa
Signing time: Tue 17 Oct 2023 11:08:55 +0000
ROA not before: Tue 17 Oct 2023 11:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 185.144.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:53:10:c5:45:c6:1e:9b:9c:4c:7d:6c:4d:7f:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 17 11:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f73bd5a7b4b30a793f9743e670ab60440cf9dd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:e1:ef:d5:dc:9f:7f:67:b3:3a:b3:a8:bd:
05:64:95:df:02:42:3d:b1:4d:9e:c4:32:1a:d1:31:
85:b0:1f:98:a2:db:03:9f:d0:1e:40:44:66:6f:dc:
5f:c5:80:e9:10:c0:66:af:15:d4:89:75:3e:96:fb:
7b:f7:29:8d:38:c2:79:ef:16:be:1c:57:61:83:47:
af:28:71:50:68:97:0b:0d:1e:fb:03:d8:95:1d:20:
ff:b6:c2:cc:87:2c:d1:c2:f6:d6:73:55:b2:58:b8:
9f:23:ce:57:6d:28:b8:00:66:14:60:e3:d8:4d:32:
a7:23:bb:61:f8:38:c2:03:3a:93:cb:7b:bc:d6:2a:
85:5e:b1:54:83:69:e9:0e:ad:73:e6:95:f6:2a:67:
aa:a4:49:a4:41:83:95:ab:ae:2c:51:e9:d1:dc:55:
3f:c6:e4:4e:21:77:28:a3:ab:fe:2c:ed:06:9e:3c:
d5:04:f9:71:83:fd:8b:5d:d6:55:d4:0e:e7:cf:9c:
65:aa:93:46:7c:93:63:6c:47:6c:dc:77:9d:09:a2:
84:73:b6:c5:82:58:1a:0a:43:53:8b:a5:62:ef:bc:
9f:6c:4e:bc:b1:68:4b:37:e0:46:11:57:ae:4d:50:
ca:54:54:54:66:2e:6b:8b:25:c4:94:e9:41:b2:a5:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:D5:A7:B4:B3:0A:79:3F:97:43:E6:70:AB:60:44:0C:F9:DD:7D
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/9zvVp7SzCnk_l0PmcKtgRAz53X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:c2:cd:fe:42:4e:a5:6e:79:55:71:ce:9b:47:36:6e:c2:62:
ae:0c:e0:23:fd:30:b1:ad:7d:23:4f:b0:28:26:6a:8f:a4:7a:
12:47:3c:19:8c:b9:ee:ff:32:79:95:d5:34:6b:3c:09:44:68:
af:6d:3d:d9:1f:f6:6b:ed:70:25:a5:29:92:47:fb:3f:a9:0a:
de:51:3c:b1:94:0f:3a:0e:6a:98:eb:b6:3a:5b:f3:d5:19:2b:
f4:59:d3:a5:2a:3a:30:29:fa:60:31:2b:72:5e:33:e7:18:24:
f2:78:ac:1d:9d:41:12:32:10:77:df:15:8c:69:de:47:62:98:
0f:2a:98:fb:83:18:19:c2:73:bd:63:39:a4:56:65:0f:1a:8a:
6c:d6:29:10:ac:3d:67:9c:4f:89:e5:e1:fc:4a:d5:bf:e4:0b:
6e:a6:c0:f9:ea:55:55:83:95:07:7e:0b:e9:43:b5:5a:d6:ac:
f5:56:26:4f:e3:b7:bf:17:44:c3:cf:1f:12:03:2b:d1:4e:8d:
86:73:50:47:a2:57:3d:3c:6e:e5:5f:db:3f:ae:15:6c:ac:4d:
e4:4d:6a:a4:8e:e3:cf:7e:d1:08:2e:7c:92:f2:a3:b4:39:d8:
51:50:a3:df:09:4e:45:86:f6:22:da:62:91:a5:2f:5a:1d:28:
80:f7:7b:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs9UxDFRcYem5xMfWxNf1pWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjMxMDE3MTEwODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzNiZDVhN2I0YjMwYTc5M2Y5NzQzZTY3MGFiNjA0NDBjZjlkZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+jh79Xcn39nszqzqL0FZJXfAkI9
sU2exDIa0TGFsB+YotsDn9AeQERmb9xfxYDpEMBmrxXUiXU+lvt79ymNOMJ57xa+
HFdhg0evKHFQaJcLDR77A9iVHSD/tsLMhyzRwvbWc1WyWLifI85XbSi4AGYUYOPY
TTKnI7th+DjCAzqTy3u81iqFXrFUg2npDq1z5pX2KmeqpEmkQYOVq64sUenR3FU/
xuROIXcoo6v+LO0GnjzVBPlxg/2LXdZV1A7nz5xlqpNGfJNjbEds3HedCaKEc7bF
glgaCkNTi6Vi77yfbE68sWhLN+BGEVeuTVDKVFRUZi5riyXElOlBsqWCewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPc71ae0swp5P5dD5nCrYEQM+d19MB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvOXp2VnA3U3pDbmtfbDBQbWNLdGdSQXo1M1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZCcMA0G
CSqGSIb3DQEBCwUAA4IBAQDWws3+Qk6lbnlVcc6bRzZuwmKuDOAj/TCxrX0jT7Ao
JmqPpHoSRzwZjLnu/zJ5ldU0azwJRGivbT3ZH/Zr7XAlpSmSR/s/qQreUTyxlA86
DmqY67Y6W/PVGSv0WdOlKjowKfpgMStyXjPnGCTyeKwdnUESMhB33xWMad5HYpgP
Kpj7gxgZwnO9YzmkVmUPGops1ikQrD1nnE+J5eH8StW/5AtupsD56lVVg5UHfgvp
Q7Va1qz1ViZP47e/F0TDzx8SAyvRTo2Gc1BHolc9PG7lX9s/rhVsrE3kTWqkjuPP
ftEILnyS8qO0OdhRUKPfCU5FhvYi2mKRpS9aHSiA93sM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org