Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/9x2pOdxVThSAiDwoyE6ZeIYRKZ0.roa
File: 9x2pOdxVThSAiDwoyE6ZeIYRKZ0.roa (raw, json)
Hash identifier: EtV+YfowxLlIlf8Ma3EHdO0WSBrWUMn6MUMkvmuhbR0=
Subject key identifier: F7:1D:A9:39:DC:55:4E:14:80:88:3C:28:C8:4E:99:78:86:11:29:9D
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 01856E267FD0C70647F201EC4F168DC80183
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/9x2pOdxVThSAiDwoyE6ZeIYRKZ0.roa
Signing time: Sun 01 Jan 2023 16:24:54 +0000
ROA not before: Sun 01 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211104
IP address blocks: 185.182.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7f:d0:c7:06:47:f2:01:ec:4f:16:8d:c8:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jan 1 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f71da939dc554e1480883c28c84e99788611299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:93:0d:a1:61:8e:45:86:c7:a0:5e:d3:5b:
4a:ba:d0:1a:5a:f8:f0:60:8c:e1:cd:86:45:df:2a:
b1:66:b2:c4:b8:b4:34:b7:b6:08:4a:97:43:5f:c0:
92:fc:dd:84:f6:fd:88:ca:b8:bb:67:f3:dd:90:0a:
05:a6:b3:09:e9:02:b7:97:61:37:b1:62:56:c2:92:
d9:d9:ff:a6:be:22:bf:3e:4b:76:93:62:f6:05:b7:
4f:2b:9b:c8:74:ae:41:cf:38:c8:60:e8:19:08:7d:
24:fd:19:5d:12:ed:8b:e5:1d:dc:f1:4d:0b:36:ac:
01:97:f7:56:f8:35:d5:1b:17:c9:62:1f:d7:85:97:
63:eb:6d:a5:43:54:aa:32:da:ae:94:25:cf:fa:c3:
8f:13:d6:d0:b2:c8:59:01:c3:dc:3d:43:cb:a5:65:
0f:67:54:68:ad:b2:c4:e4:1b:dd:26:6b:9b:0d:d1:
0c:e1:74:5b:45:fa:01:ef:8b:4b:c9:31:f6:42:c2:
e2:b5:30:1f:0d:fa:e9:b9:3f:a7:57:a6:a7:bf:b7:
b0:86:bc:2f:e0:e0:88:84:22:be:57:48:92:33:be:
50:42:61:b4:9d:89:03:b4:7b:d6:16:cc:99:7c:b6:
1a:7e:2b:1e:1e:09:53:c3:5e:d8:1e:5a:e8:85:ff:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:A9:39:DC:55:4E:14:80:88:3C:28:C8:4E:99:78:86:11:29:9D
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/9x2pOdxVThSAiDwoyE6ZeIYRKZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.156.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1e:64:47:7e:1c:d5:b3:6a:04:c3:51:9c:f5:c2:b9:7f:57:
bd:95:70:18:ba:c1:35:62:f3:4d:96:dd:27:42:a4:15:5b:4d:
bc:61:09:7e:b4:7c:16:be:49:20:69:2a:c5:41:9a:ee:1b:e2:
94:69:d9:7f:59:77:1c:0d:60:80:b0:56:4d:77:2d:9b:49:63:
33:cb:4a:68:49:60:60:e6:0a:a8:0a:25:12:3e:dc:1f:e6:a4:
ab:35:51:7f:51:3e:0f:9c:e7:31:9a:70:c0:f6:3a:ce:18:f8:
9e:90:0e:e1:1d:b6:05:d5:58:8c:9d:4e:dd:7a:cd:ce:0b:b2:
d7:09:07:a7:be:10:f3:95:18:ea:0e:8d:33:63:80:6c:43:83:
ae:40:45:19:13:73:27:d3:49:aa:8a:52:f5:e7:9a:8e:65:18:
54:ca:6d:36:b7:b6:70:73:e5:df:0b:2e:0c:59:0c:24:38:65:
dc:a4:44:18:8a:8c:cc:7f:64:26:09:70:51:34:1d:0c:56:28:
b8:60:ee:9d:b8:31:00:b9:40:e0:b5:1b:a4:b0:57:cb:ff:ed:
a7:a0:39:9c:20:ca:fe:25:78:d0:86:71:d8:5e:74:ce:25:aa:
f3:0c:db:23:87:4e:d1:e5:16:55:44:5a:fe:f0:70:ea:e6:15:
6e:0e:10:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuJn/QxwZH8gHsTxaNyAGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy
MjIyMzcwHhcNMjMwMTAxMTYyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFkYTkzOWRjNTU0ZTE0ODA4ODNjMjhjODRlOTk3ODg2MTEyOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnCTDaFhjkWGx6Be01tKutAaWvjw
YIzhzYZF3yqxZrLEuLQ0t7YISpdDX8CS/N2E9v2Iyri7Z/PdkAoFprMJ6QK3l2E3
sWJWwpLZ2f+mviK/Pkt2k2L2BbdPK5vIdK5BzzjIYOgZCH0k/RldEu2L5R3c8U0L
NqwBl/dW+DXVGxfJYh/XhZdj622lQ1SqMtqulCXP+sOPE9bQsshZAcPcPUPLpWUP
Z1RorbLE5BvdJmubDdEM4XRbRfoB74tLyTH2QsLitTAfDfrpuT+nV6anv7ewhrwv
4OCIhCK+V0iSM75QQmG0nYkDtHvWFsyZfLYafiseHglTw17YHlrohf9oFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcdqTncVU4UgIg8KMhOmXiGESmdMB8GA1UdIwQY
MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt
MDM5NjFlMmIwNjAxLzEvOXgycE9keFZUaFNBaUR3b3lFNlplSVlSS1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx
LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubacMA0G
CSqGSIb3DQEBCwUAA4IBAQBQHmRHfhzVs2oEw1Gc9cK5f1e9lXAYusE1YvNNlt0n
QqQVW028YQl+tHwWvkkgaSrFQZruG+KUadl/WXccDWCAsFZNdy2bSWMzy0poSWBg
5gqoCiUSPtwf5qSrNVF/UT4PnOcxmnDA9jrOGPiekA7hHbYF1ViMnU7des3OC7LX
CQenvhDzlRjqDo0zY4BsQ4OuQEUZE3Mn00mqilL155qOZRhUym02t7Zwc+XfCy4M
WQwkOGXcpEQYiozMf2QmCXBRNB0MVii4YO6duDEAuUDgtRuksFfL/+2noDmcIMr+
JXjQhnHYXnTOJarzDNsjh07R5RZVRFr+8HDq5hVuDhDn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:05 2024 by rpki-client on console-ams.rpki-client.org