Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EHC4rJsdYQnaJT5zyTW04JJrOPM.roa
File: EHC4rJsdYQnaJT5zyTW04JJrOPM.roa (raw, json)
Hash identifier: a2Y1sRPN5amI4+tMloCvyVAMRCyXx5+vAbpJqCS9gbQ=
Subject key identifier: 10:70:B8:AC:9B:1D:61:09:DA:25:3E:73:C9:35:B4:E0:92:6B:38:F3
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 0185704BCEFB16EDCAB8364B4BA01728DB61
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EHC4rJsdYQnaJT5zyTW04JJrOPM.roa
Signing time: Mon 02 Jan 2023 02:24:54 +0000
ROA not before: Mon 02 Jan 2023 02:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41931
IP address blocks: 185.23.7.0/24 maxlen: 24
31.135.192.0/20 maxlen: 20
2a0e:64c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 08 Oct 2023 17:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ce:fb:16:ed:ca:b8:36:4b:4b:a0:17:28:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jan 2 02:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1070b8ac9b1d6109da253e73c935b4e0926b38f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:fa:f6:fa:40:92:0b:c4:c9:1a:48:f2:69:
e9:15:3e:da:8d:be:43:0e:b2:f1:88:53:92:95:92:
55:5c:0c:cb:4b:64:21:d1:38:28:02:87:19:1c:a1:
4a:6b:43:82:9f:4b:83:ff:32:95:ac:9b:eb:2b:dc:
ea:76:a7:df:83:62:9f:4f:ce:de:47:1a:a1:44:90:
6f:03:4a:e0:06:4e:5d:13:03:9a:49:ff:bf:af:21:
6c:3c:96:75:aa:c0:3c:93:ab:9a:23:7c:14:7a:38:
05:74:65:1b:d1:f1:c6:96:f0:0c:e0:7f:56:6a:9a:
b4:31:53:53:62:d1:24:d3:dd:36:d7:a6:8b:f1:7e:
bf:2b:92:9e:36:a8:c3:85:7a:ad:67:71:f4:87:f2:
17:b2:b5:ef:22:86:5e:4d:81:4b:8f:0d:1b:63:75:
54:17:cf:72:59:c2:5e:ae:dd:e9:65:87:64:01:4e:
de:96:ee:b4:3d:f6:66:ac:a0:fd:4a:bc:6e:d5:db:
82:35:bc:e2:8a:67:00:17:e9:d7:a3:75:61:9f:6b:
7b:4d:18:fe:a6:5f:6a:cf:f2:d8:53:ae:90:57:0e:
3c:3c:8d:cf:7c:93:90:e9:07:97:f0:94:ed:fd:80:
80:a1:5c:76:b2:68:df:15:d5:3c:74:ce:57:ff:87:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:B8:AC:9B:1D:61:09:DA:25:3E:73:C9:35:B4:E0:92:6B:38:F3
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EHC4rJsdYQnaJT5zyTW04JJrOPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.192.0/20
185.23.7.0/24
IPv6:
2a0e:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:74:82:54:cc:3a:67:db:74:84:9d:dd:9f:11:67:d2:84:a9:
27:34:40:cb:0c:63:a1:02:84:cb:82:b3:c9:47:8e:e7:1a:2b:
ba:41:01:20:89:ef:77:13:ba:8f:ef:40:a0:f2:04:84:50:21:
01:a1:05:42:e1:2d:48:df:77:19:97:5e:3a:03:ec:6d:87:f8:
03:fa:2f:43:6f:26:a5:2f:df:6f:c8:6b:f1:7f:c9:f4:b0:bb:
d1:0d:87:b7:a9:c2:e8:cb:89:55:11:a1:ce:c2:1c:2e:4c:2a:
40:5b:00:3c:4f:1d:d0:8f:d2:55:fe:47:d2:71:16:f8:04:0b:
94:02:58:f7:a7:1b:ee:bf:9b:e8:cb:e5:3c:ae:80:8a:42:c8:
20:9e:6c:d3:b3:30:b9:e8:ed:2e:f3:0d:ff:ae:da:8d:f3:16:
57:51:18:71:63:40:b7:bf:fe:02:9f:39:a1:51:63:88:a1:43:
1d:86:c7:61:39:c2:22:61:94:0f:11:94:16:0f:8f:d2:5d:67:
c2:5c:ac:b2:ce:ec:95:68:61:65:b8:89:9f:af:76:e7:ff:0f:
68:00:21:d8:d6:ea:13:55:0d:24:40:91:61:bc:1e:00:be:3b:
33:d0:5e:7c:c6:1b:35:9e:8b:b5:f2:35:22:f0:77:74:95:b5:
31:0e:1f:35
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwS877Fu3KuDZLS6AXKNthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm
OGY0ZTcwHhcNMjMwMTAyMDIyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDcwYjhhYzliMWQ2MTA5ZGEyNTNlNzNjOTM1YjRlMDkyNmIzOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO769vpAkgvEyRpI8mnpFT7ajb5D
DrLxiFOSlZJVXAzLS2Qh0TgoAocZHKFKa0OCn0uD/zKVrJvrK9zqdqffg2KfT87e
RxqhRJBvA0rgBk5dEwOaSf+/ryFsPJZ1qsA8k6uaI3wUejgFdGUb0fHGlvAM4H9W
apq0MVNTYtEk090216aL8X6/K5KeNqjDhXqtZ3H0h/IXsrXvIoZeTYFLjw0bY3VU
F89yWcJert3pZYdkAU7elu60PfZmrKD9Srxu1duCNbziimcAF+nXo3Vhn2t7TRj+
pl9qz/LYU66QVw48PI3PfJOQ6QeX8JTt/YCAoVx2smjfFdU8dM5X/4cK1QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBBwuKybHWEJ2iU+c8k1tOCSazjzMB8GA1UdIwQY
MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt
YjA1ODMyYmM2OTYyLzEvRUhDNHJKc2RZUW5hSlQ1enlUVzA0SkpyT1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy
LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEH4fAAwQA
uRcHMA0EAgACMAcDBQMqDmTAMA0GCSqGSIb3DQEBCwUAA4IBAQA4dIJUzDpn23SE
nd2fEWfShKknNEDLDGOhAoTLgrPJR47nGiu6QQEgie93E7qP70Cg8gSEUCEBoQVC
4S1I33cZl146A+xth/gD+i9DbyalL99vyGvxf8n0sLvRDYe3qcLoy4lVEaHOwhwu
TCpAWwA8Tx3Qj9JV/kfScRb4BAuUAlj3pxvuv5voy+U8roCKQsggnmzTszC56O0u
8w3/rtqN8xZXURhxY0C3v/4CnzmhUWOIoUMdhsdhOcIiYZQPEZQWD4/SXWfCXKyy
zuyVaGFluImfr3bn/w9oACHY1uoTVQ0kQJFhvB4Avjsz0F58xhs1nou18jUi8Hd0
lbUxDh81
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:56 2024 by rpki-client on console-ams.rpki-client.org