Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/MerYrS_qIjJSqfrvDRWLqfCT7Fk.roa
File: MerYrS_qIjJSqfrvDRWLqfCT7Fk.roa (raw, json)
Hash identifier: xJTZaZZd2pTykQv/w4JpTXSwH5ZWb80Z4LYKl6PqVnk=
Subject key identifier: 31:EA:D8:AD:2F:EA:22:32:52:A9:FA:EF:0D:15:8B:A9:F0:93:EC:59
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 01856E0AF44CB59CA3E0DA9BC1635994D95D
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/MerYrS_qIjJSqfrvDRWLqfCT7Fk.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 185.233.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f4:4c:b5:9c:a3:e0:da:9b:c1:63:59:94:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31ead8ad2fea223252a9faef0d158ba9f093ec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:2f:24:4f:e2:2a:fb:6c:5a:23:cf:4d:52:
4c:ec:19:95:0d:30:f4:8a:d7:c5:97:dd:1f:e8:b4:
e3:75:6c:32:82:61:c5:c5:0d:1f:b4:2a:a7:cf:58:
67:1b:c9:29:f9:a4:e0:58:d2:dc:63:8a:76:80:31:
f4:b8:c3:df:dc:98:32:53:67:30:75:02:bc:31:66:
bc:ab:9e:de:3b:75:92:e6:4e:91:54:d8:4a:4e:fe:
14:43:60:d7:1a:e4:f3:7c:d7:b9:cf:8b:b0:46:4e:
df:13:ff:26:04:3e:c9:19:14:cc:f7:2d:3e:6d:ab:
3c:b0:cc:c0:93:4b:77:44:2a:d0:26:47:93:99:50:
b6:b8:c8:2e:58:f4:e1:1b:0e:d7:2a:a8:81:ac:f7:
fe:fb:84:c6:3a:70:5c:5c:80:b0:c5:eb:5c:b7:e6:
e2:c2:3d:89:d7:33:e0:04:e9:7a:48:42:1e:68:5f:
92:18:14:93:9a:6a:ee:8d:2d:5e:0d:2f:d3:6c:05:
97:4e:a6:a5:4d:16:91:06:46:9f:3a:f5:f1:bd:66:
28:19:4d:4f:87:c1:34:0d:55:c1:42:1e:d4:fa:7d:
aa:0d:b7:57:7c:3f:94:cc:29:a6:1f:75:c5:d5:f2:
e8:f8:09:20:10:08:f5:01:13:4b:5f:a0:41:5f:96:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:D8:AD:2F:EA:22:32:52:A9:FA:EF:0D:15:8B:A9:F0:93:EC:59
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/MerYrS_qIjJSqfrvDRWLqfCT7Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.133.0/24
Signature Algorithm: sha256WithRSAEncryption
78:63:4c:c7:c2:7d:81:4d:37:20:11:f9:1a:7b:8c:b7:65:10:
32:8f:13:a6:ff:90:bd:f5:5d:4f:73:66:2e:98:e0:0a:24:48:
9d:69:6a:a2:fd:1a:9d:01:b1:8f:0c:6b:38:ef:22:58:65:08:
63:8a:04:4d:da:8b:96:d7:7f:1c:c9:97:5e:a6:f0:6a:63:1f:
5b:3b:bb:e3:86:a5:6e:c1:ab:06:2a:66:25:30:c7:81:18:48:
17:23:6a:85:01:12:83:60:86:51:8c:ad:03:c5:df:85:d2:4f:
49:63:66:05:ec:92:35:d5:a2:b1:f7:21:9e:b7:4d:11:a8:64:
c3:59:da:31:54:5e:5f:0c:70:92:95:85:0b:66:7b:29:ba:4f:
37:e3:d3:fa:4d:38:cf:fd:8a:b9:32:a5:97:54:f1:fa:c2:fc:
35:b1:14:d7:69:c1:40:2f:bf:6e:9c:fb:7c:71:e8:67:03:ad:
c6:68:a6:5c:99:ba:1f:7a:32:23:0a:23:10:84:21:c9:de:3a:
7c:d1:57:96:cc:95:0d:8c:42:ce:46:3a:a8:0b:49:b4:94:8a:
a8:a8:e9:8d:e5:b8:74:85:8d:6e:fc:f5:e4:62:a0:76:60:2a:
25:7a:cd:aa:9d:4d:ba:27:c0:10:e6:54:c0:4a:ca:5d:a3:0f:
d8:98:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:51 2024 by rpki-client on console-ams.rpki-client.org