Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/azlSIxURLI6cSKpr1yq1gpuzmao.roa
File: azlSIxURLI6cSKpr1yq1gpuzmao.roa (raw, json)
Hash identifier: CccS2dKKQwHMWQtjN/gu7hgSPwkMMr38+NZCjtCXOSE=
Subject key identifier: 6B:39:52:23:15:11:2C:8E:9C:48:AA:6B:D7:2A:B5:82:9B:B3:99:AA
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 018A4CBCEE1BFBC9DB676687E228FB4EE205
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/azlSIxURLI6cSKpr1yq1gpuzmao.roa
Signing time: Thu 31 Aug 2023 17:56:04 +0000
ROA not before: Thu 31 Aug 2023 17:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.99.237.0/24 maxlen: 24
185.99.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 12:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:bc:ee:1b:fb:c9:db:67:66:87:e2:28:fb:4e:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Aug 31 17:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b39522315112c8e9c48aa6bd72ab5829bb399aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:db:6b:d9:3b:3c:e2:fb:77:bb:2c:db:2e:
7d:e2:9f:22:e6:6b:f8:63:53:a1:96:e8:c4:51:ba:
34:82:ea:04:77:aa:26:b5:fd:bf:b2:a2:67:73:eb:
37:05:f4:88:98:1f:c4:02:80:eb:94:d8:fe:4f:f5:
1a:48:52:53:21:ec:85:a2:ee:15:d4:e1:8c:23:6d:
6c:9b:25:ac:d6:60:31:75:6b:46:89:81:fc:10:0f:
69:76:f5:f4:01:0e:58:e1:d3:5d:24:5a:81:32:5e:
8f:e8:a2:69:7e:b9:98:bc:f3:60:29:c7:83:de:c1:
77:13:f5:b7:5d:9d:d8:3f:3b:f2:a6:13:af:51:0a:
71:67:32:2e:23:a8:26:35:4b:4e:99:81:80:9b:58:
ab:a7:0e:d9:62:73:f7:14:43:c2:14:95:6a:4f:02:
16:03:d7:6a:06:6f:98:54:84:14:17:5e:e5:72:dc:
62:76:ba:50:6c:a7:5e:84:49:0e:69:c0:00:9d:79:
f6:07:ea:e5:27:3f:54:a3:37:cd:39:9a:bb:bb:87:
dd:99:2a:f9:de:3b:9a:b6:50:62:c3:b3:24:02:22:
dd:96:75:da:dd:59:20:e8:e6:ed:c1:16:a2:ba:61:
0f:0e:91:40:2c:b4:9e:3f:e7:eb:e4:5a:a3:06:ee:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:39:52:23:15:11:2C:8E:9C:48:AA:6B:D7:2A:B5:82:9B:B3:99:AA
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/azlSIxURLI6cSKpr1yq1gpuzmao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.237.0-185.99.238.255
Signature Algorithm: sha256WithRSAEncryption
9b:56:fe:6a:ef:10:22:21:e0:c4:7b:12:b2:e2:0a:1b:f7:df:
27:93:01:09:9a:39:33:c3:6d:e2:0b:ba:12:36:9a:4d:2a:36:
f0:96:05:6c:ea:e5:22:60:26:73:21:2f:fe:e8:5f:7f:7e:fb:
b9:2d:06:ea:ad:e6:5b:c1:8b:ba:d1:8c:c8:43:5f:6f:fa:6e:
26:57:6b:50:4f:4a:15:b2:52:02:9c:66:e6:20:74:a7:13:a4:
df:fd:46:23:c0:cb:8a:94:d6:b3:d9:14:26:4a:3a:51:4b:8f:
76:b4:c3:3f:08:df:1d:2d:70:dd:09:7d:46:d6:f1:17:08:53:
37:a0:85:27:37:ed:32:f3:44:9e:b4:58:f3:96:97:1a:35:aa:
ec:b4:42:a6:6a:ee:14:b5:8b:a5:b3:9d:a5:c9:23:7e:07:8e:
bf:4c:fd:ae:2e:b6:65:4b:60:f1:fd:18:4c:02:10:89:45:3a:
7f:c6:02:62:b9:58:bf:6d:0d:34:f9:82:44:73:8a:85:6d:0e:
14:44:f0:5b:25:cc:ea:d0:0a:05:23:6c:ab:7d:68:16:95:6c:
ae:b2:20:3c:bc:c8:99:a9:da:73:2d:b2:77:93:5b:61:e1:5f:
9d:e0:e4:89:6f:4b:39:f9:43:c5:76:a3:17:02:7c:d3:4a:14:
4e:9a:71:08
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYpMvO4b+8nbZ2aH4ij7TuIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjMwODMxMTc1NjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjM5NTIyMzE1MTEyYzhlOWM0OGFhNmJkNzJhYjU4MjliYjM5OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Hba9k7POL7d7ss2y594p8i5mv4
Y1OhlujEUbo0guoEd6omtf2/sqJnc+s3BfSImB/EAoDrlNj+T/UaSFJTIeyFou4V
1OGMI21smyWs1mAxdWtGiYH8EA9pdvX0AQ5Y4dNdJFqBMl6P6KJpfrmYvPNgKceD
3sF3E/W3XZ3YPzvyphOvUQpxZzIuI6gmNUtOmYGAm1irpw7ZYnP3FEPCFJVqTwIW
A9dqBm+YVIQUF17lctxidrpQbKdehEkOacAAnXn2B+rlJz9UozfNOZq7u4fdmSr5
3juatlBiw7MkAiLdlnXa3Vkg6ObtwRaiumEPDpFALLSeP+fr5FqjBu770QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGs5UiMVESyOnEiqa9cqtYKbs5mqMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvYXpsU0l4VVJMSTZjU0twcjF5cTFncHV6bWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5Y+0D
BAC5Y+4wDQYJKoZIhvcNAQELBQADggEBAJtW/mrvECIh4MR7ErLiChv33yeTAQma
OTPDbeILuhI2mk0qNvCWBWzq5SJgJnMhL/7oX39++7ktBuqt5lvBi7rRjMhDX2/6
biZXa1BPShWyUgKcZuYgdKcTpN/9RiPAy4qU1rPZFCZKOlFLj3a0wz8I3x0tcN0J
fUbW8RcIUzeghSc37TLzRJ60WPOWlxo1quy0QqZq7hS1i6WznaXJI34Hjr9M/a4u
tmVLYPH9GEwCEIlFOn/GAmK5WL9tDTT5gkRzioVtDhRE8FslzOrQCgUjbKt9aBaV
bK6yIDy8yJmp2nMtsneTW2HhX53g5IlvSzn5Q8V2oxcCfNNKFE6acQg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org