Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9cWdWvH5vrsjcEaVC_ML_xKK0Ok.roa
File: 9cWdWvH5vrsjcEaVC_ML_xKK0Ok.roa (raw, json)
Hash identifier: idkssa2E4uPecY/6+YOfI5h1+MRFh0bSt9J2cTZG0qM=
Subject key identifier: F5:C5:9D:5A:F1:F9:BE:BB:23:70:46:95:0B:F3:0B:FF:12:8A:D0:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01866F4FADB791554D72EA46D06ECEB4256B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9cWdWvH5vrsjcEaVC_ML_xKK0Ok.roa
Signing time: Mon 20 Feb 2023 14:52:18 +0000
ROA not before: Mon 20 Feb 2023 14:52:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39368
IP address blocks: 185.218.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:4f:ad:b7:91:55:4d:72:ea:46:d0:6e:ce:b4:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 20 14:52:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c59d5af1f9bebb237046950bf30bff128ad0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:e4:49:07:15:3c:e2:55:4f:8a:82:98:7a:
9b:21:96:02:2f:89:74:b4:a8:0c:3d:b0:22:e9:e0:
58:af:9d:93:5e:29:ac:b3:a0:bc:73:55:19:2a:b6:
5b:2c:2d:5e:c1:41:29:91:07:b9:c0:2e:81:1b:23:
c2:47:c4:5b:08:e5:91:9e:cd:9f:f5:b4:7f:bc:24:
14:97:ea:9b:c8:11:da:8e:13:93:2d:bc:7e:03:02:
4f:88:c7:ce:0d:a5:5b:11:71:6b:d1:b3:57:8c:18:
a9:ca:a2:45:bd:92:a4:f0:88:45:27:74:10:4a:63:
3d:c8:66:b4:83:0b:f4:25:21:0d:32:2a:2b:1c:09:
76:96:1a:09:dd:f8:2b:88:9f:55:64:60:f3:ec:c1:
4b:2f:82:dc:a1:f8:cf:99:b4:ec:1e:b1:a6:1f:56:
b6:aa:77:fc:26:63:ef:47:0b:b3:d9:9e:20:6e:7d:
d6:a4:a2:0b:aa:95:3e:5c:1f:53:77:cc:33:e9:0a:
be:e4:e6:98:84:bc:19:0e:b7:56:2e:fb:54:d4:0e:
bf:5e:68:f0:22:0a:0c:9c:a2:81:b4:a2:ed:de:cd:
5b:82:9c:28:d1:e7:49:f0:cc:0e:6f:be:04:02:21:
6a:eb:6e:16:9a:78:bb:dc:fe:94:32:13:42:07:a5:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:9D:5A:F1:F9:BE:BB:23:70:46:95:0B:F3:0B:FF:12:8A:D0:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9cWdWvH5vrsjcEaVC_ML_xKK0Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f7:31:9b:bf:cd:d8:b7:36:a2:dc:bd:35:f2:41:98:49:80:
e0:d0:77:fb:4c:1b:d1:08:31:79:c9:3c:36:2c:2c:01:67:2d:
01:d7:f3:e6:28:15:f8:65:e2:fd:5c:7a:66:d9:7a:e7:15:ac:
ce:86:95:e8:ef:41:a6:f7:5c:9d:00:41:9c:cd:0f:33:0a:c6:
de:44:60:73:9d:04:66:f6:04:d4:2f:68:80:72:13:2d:0a:ed:
7d:7b:15:3a:d3:27:4e:de:bb:dc:c5:cb:f2:70:c9:58:d6:16:
cb:3d:07:2e:53:c0:88:89:27:cf:aa:92:5a:56:32:05:7c:1e:
7e:31:20:e6:da:17:03:c8:17:04:26:03:51:79:d1:6d:9b:38:
44:38:18:08:88:58:d9:9e:4f:49:4f:7b:70:b1:56:a8:e2:ea:
58:e5:43:4e:9d:47:d9:99:ce:fc:78:72:f9:a1:ee:86:48:7a:
1e:5b:b6:b0:0c:65:72:e6:2c:46:18:4b:de:a8:95:62:9d:41:
9f:75:56:d6:6b:7b:22:68:db:c7:24:e2:2d:e8:d8:8a:13:d0:
30:ba:f4:e4:52:e0:68:32:dc:01:7b:53:24:ef:09:e5:78:56:
f4:82:e6:4b:66:5f:de:5b:4e:04:e9:c3:bd:86:16:a0:a6:ab:
af:25:6f:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZvT623kVVNcupG0G7OtCVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMjIwMTQ1MjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWM1OWQ1YWYxZjliZWJiMjM3MDQ2OTUwYmYzMGJmZjEyOGFkMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2/kSQcVPOJVT4qCmHqbIZYCL4l0
tKgMPbAi6eBYr52TXimss6C8c1UZKrZbLC1ewUEpkQe5wC6BGyPCR8RbCOWRns2f
9bR/vCQUl+qbyBHajhOTLbx+AwJPiMfODaVbEXFr0bNXjBipyqJFvZKk8IhFJ3QQ
SmM9yGa0gwv0JSENMiorHAl2lhoJ3fgriJ9VZGDz7MFLL4LcofjPmbTsHrGmH1a2
qnf8JmPvRwuz2Z4gbn3WpKILqpU+XB9Td8wz6Qq+5OaYhLwZDrdWLvtU1A6/Xmjw
IgoMnKKBtKLt3s1bgpwo0edJ8MwOb74EAiFq624Wmni73P6UMhNCB6WFMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXFnVrx+b67I3BGlQvzC/8SitDpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOWNXZFd2SDV2cnNqY0VhVkNfTUxfeEtLME9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqLMA0G
CSqGSIb3DQEBCwUAA4IBAQBl9zGbv83Ytzai3L018kGYSYDg0Hf7TBvRCDF5yTw2
LCwBZy0B1/PmKBX4ZeL9XHpm2XrnFazOhpXo70Gm91ydAEGczQ8zCsbeRGBznQRm
9gTUL2iAchMtCu19exU60ydO3rvcxcvycMlY1hbLPQcuU8CIiSfPqpJaVjIFfB5+
MSDm2hcDyBcEJgNRedFtmzhEOBgIiFjZnk9JT3twsVao4upY5UNOnUfZmc78eHL5
oe6GSHoeW7awDGVy5ixGGEveqJVinUGfdVbWa3siaNvHJOIt6NiKE9AwuvTkUuBo
MtwBe1Mk7wnleFb0guZLZl/eW04E6cO9hhagpquvJW/M
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org