Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/231Xz_UTBLPvIivwzihD2kKOnhA.roa
File: 231Xz_UTBLPvIivwzihD2kKOnhA.roa (raw, json)
Hash identifier: LxpGhTEdlfHnEecN/vYk9hLs9qxI+scDHuBzXRmJqDg=
Subject key identifier: DB:7D:57:CF:F5:13:04:B3:EF:22:2B:F0:CE:28:43:DA:42:8E:9E:10
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018CC56DE96EAC6CF24895A079244147F6E2
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/231Xz_UTBLPvIivwzihD2kKOnhA.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.183.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 17:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e9:6e:ac:6c:f2:48:95:a0:79:24:41:47:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db7d57cff51304b3ef222bf0ce2843da428e9e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:d6:c8:c0:18:86:14:e7:34:ae:95:61:05:
0e:5e:74:ba:09:f6:a6:4b:a0:99:d3:76:8d:ed:22:
b2:ce:cf:f9:29:21:ce:d3:5e:68:bd:8f:d6:5f:55:
24:c9:c5:4d:0d:9e:cd:1f:5e:0e:29:cc:0e:33:84:
70:83:66:6b:43:5e:0f:21:9c:48:73:1f:7d:81:83:
89:91:bc:bb:30:31:5a:38:2c:fc:e3:81:f4:5b:cb:
83:14:de:18:10:6c:3f:56:3a:61:ca:83:73:7b:c2:
29:f5:d2:6f:7a:bd:83:fe:2d:69:6f:ee:e5:b3:7b:
79:41:46:67:df:76:f9:af:bd:37:05:f7:73:b0:b4:
4f:51:a5:ee:35:04:59:8f:87:51:f9:e8:4e:98:d9:
68:cd:8e:59:ca:74:4e:8d:ab:cd:05:39:db:2c:35:
19:10:f7:09:59:37:97:8f:0a:1c:af:aa:f9:45:21:
89:39:96:6e:15:dc:48:29:2c:91:4a:e7:12:e4:97:
7d:49:2d:11:dc:c5:4e:34:17:90:b6:43:64:08:69:
73:ac:09:b1:c0:fa:41:76:6d:aa:9a:c6:f9:71:3c:
08:98:ed:7e:7f:3b:15:e8:85:32:42:98:c7:e7:3f:
50:71:91:b7:07:72:eb:b6:a2:17:e5:7f:24:7e:a3:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:57:CF:F5:13:04:B3:EF:22:2B:F0:CE:28:43:DA:42:8E:9E:10
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/231Xz_UTBLPvIivwzihD2kKOnhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.182.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:af:a3:f5:c1:a5:8e:a6:a7:05:66:22:99:bb:75:64:5c:a9:
51:24:1c:1d:f1:1f:a5:5f:27:88:4a:f7:2c:8f:c2:41:a5:91:
9d:1a:90:d5:1b:b7:34:30:9f:a9:94:fb:7f:53:ad:2b:9e:2b:
34:62:c8:93:54:e1:0a:27:2a:e8:57:26:59:18:46:8d:b4:35:
9f:5a:cc:90:d5:0e:2e:66:60:6d:34:6f:af:90:da:71:38:d8:
bf:b4:84:8a:4d:2e:a8:b0:21:f7:e0:55:90:d5:26:5e:a8:55:
c9:b2:7e:a2:67:7f:57:9c:27:7f:35:74:3f:8e:98:b6:e3:9e:
67:ed:60:18:2c:73:e5:ae:21:6b:bd:b2:f1:da:46:6f:e1:f6:
2d:33:61:5c:cd:70:12:29:f4:9e:6b:6c:dc:94:78:38:7a:0a:
e6:ff:a8:dc:8f:9a:7a:22:bb:20:ce:e1:b4:db:e7:5e:3f:0e:
3e:ce:e9:6a:6b:7a:00:50:4c:15:7b:47:16:86:4b:0c:a1:c6:
b8:f4:67:25:16:94:55:75:5b:95:ac:27:a8:b9:8f:10:e4:f3:
a3:f6:7f:5a:b7:12:af:8c:81:87:c9:05:10:a0:32:ae:6a:aa:
b3:3d:b4:b3:75:6e:c8:0f:5e:5d:d4:5a:55:c3:a5:ff:bc:63:
0d:b8:bf:e1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbelurGzySJWgeSRBR/biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjQwMTAxMTQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjdkNTdjZmY1MTMwNGIzZWYyMjJiZjBjZTI4NDNkYTQyOGU5ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoljWyMAYhhTnNK6VYQUOXnS6Cfam
S6CZ03aN7SKyzs/5KSHO015ovY/WX1UkycVNDZ7NH14OKcwOM4Rwg2ZrQ14PIZxI
cx99gYOJkby7MDFaOCz844H0W8uDFN4YEGw/VjphyoNze8Ip9dJver2D/i1pb+7l
s3t5QUZn33b5r703BfdzsLRPUaXuNQRZj4dR+ehOmNlozY5ZynROjavNBTnbLDUZ
EPcJWTeXjwocr6r5RSGJOZZuFdxIKSyRSucS5Jd9SS0R3MVONBeQtkNkCGlzrAmx
wPpBdm2qmsb5cTwImO1+fzsV6IUyQpjH5z9QcZG3B3LrtqIX5X8kfqNA9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNt9V8/1EwSz7yIr8M4oQ9pCjp4QMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvMjMxWHpfVVRCTFB2SWl2d3ppaEQya0tPbmhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYUlAwQB
uam2AwQAua4UMA0GCSqGSIb3DQEBCwUAA4IBAQBbr6P1waWOpqcFZiKZu3VkXKlR
JBwd8R+lXyeISvcsj8JBpZGdGpDVG7c0MJ+plPt/U60rnis0YsiTVOEKJyroVyZZ
GEaNtDWfWsyQ1Q4uZmBtNG+vkNpxONi/tISKTS6osCH34FWQ1SZeqFXJsn6iZ39X
nCd/NXQ/jpi2455n7WAYLHPlriFrvbLx2kZv4fYtM2FczXASKfSea2zclHg4egrm
/6jcj5p6IrsgzuG02+dePw4+zulqa3oAUEwVe0cWhksMoca49GclFpRVdVuVrCeo
uY8Q5POj9n9atxKvjIGHyQUQoDKuaqqzPbSzdW7ID15d1FpVw6X/vGMNuL/h
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org