Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/0Sq9_jTHUCQWTeMrmiI2JNVNBPg.roa
File: 0Sq9_jTHUCQWTeMrmiI2JNVNBPg.roa (raw, json)
Hash identifier: CX1t/1K0uy5XAArzJXgUS2KNRt/9jMVGWpY+KcwlnKk=
Subject key identifier: D1:2A:BD:FE:34:C7:50:24:16:4D:E3:2B:9A:22:36:24:D5:4D:04:F8
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0185729ED338A03CB14826B341C3875356B7
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/0Sq9_jTHUCQWTeMrmiI2JNVNBPg.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42338
IP address blocks: 185.203.32.0/24 maxlen: 24
185.203.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 22:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d3:38:a0:3c:b1:48:26:b3:41:c3:87:53:56:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12abdfe34c75024164de32b9a223624d54d04f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:ca:4e:e9:68:ec:07:77:1e:93:3b:3e:3c:
30:ae:76:2a:a8:76:5b:2b:40:c1:80:13:d2:ff:8c:
4c:55:3f:d3:15:77:53:12:8d:ca:92:86:e9:3d:99:
50:11:c7:a9:7e:2e:dc:36:2e:bd:6e:9f:9d:a1:51:
81:48:ad:27:5a:46:39:01:57:a6:2d:0f:cc:37:2b:
3f:62:f1:87:40:26:d3:34:02:f0:e0:0e:2b:20:df:
ce:1c:77:09:cf:f4:54:a9:4f:18:19:b2:c2:1f:e9:
2e:c9:74:d1:bf:54:de:7d:ea:1a:e4:b1:ae:a3:5d:
12:38:46:e0:c1:7f:69:81:c8:00:a0:9a:0f:52:f7:
d2:c8:ac:3d:a2:6f:aa:8d:67:05:5d:4b:e1:aa:65:
c9:88:00:6a:3f:ea:13:1b:0e:3c:1b:9f:ba:42:18:
48:3a:b1:12:9f:4f:9c:30:6e:32:d3:09:d8:ab:fd:
d4:8c:1d:cd:2f:71:41:4a:24:3a:4e:db:94:62:c6:
27:22:f6:5f:b2:40:27:f9:0d:cb:49:51:52:fe:fe:
56:cb:8e:bb:9e:2c:bf:4b:c0:53:d3:6c:66:cc:34:
f2:0a:69:c4:91:7c:74:85:88:05:a5:68:0a:9e:7e:
69:22:a5:5e:af:2d:80:8d:f9:0a:30:54:85:12:5d:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:BD:FE:34:C7:50:24:16:4D:E3:2B:9A:22:36:24:D5:4D:04:F8
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/0Sq9_jTHUCQWTeMrmiI2JNVNBPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.32.0/23
Signature Algorithm: sha256WithRSAEncryption
65:80:81:74:a6:a7:e3:15:fb:ce:de:d5:e3:79:ed:3a:73:7d:
2b:70:83:64:09:77:3a:c3:aa:42:2c:42:b8:80:0d:99:ea:f8:
ce:81:1e:5d:bf:9c:11:93:69:ae:47:ed:bd:f3:ec:6f:aa:fd:
9a:c8:6c:66:c0:8f:b3:c1:98:38:17:71:75:66:d5:6d:8d:47:
7c:1a:1d:65:a5:cb:fa:ec:5d:0d:13:69:3c:47:5d:dd:47:c7:
af:70:92:9b:a3:17:64:74:90:4f:43:f6:82:b8:ee:b9:51:10:
86:04:04:a0:fc:e8:c8:e2:fe:ba:1f:cb:27:65:18:6a:2c:22:
6d:00:a9:2f:90:65:27:f1:e1:35:e9:b5:73:b2:fd:1d:b9:62:
8d:f2:67:12:c7:8a:4b:c5:67:d8:bb:30:fd:b6:8a:c8:eb:e5:
33:ba:a3:7e:27:0a:73:25:bc:dd:9b:44:77:00:15:98:e8:95:
41:06:1f:02:f8:15:76:5e:85:83:c0:65:79:83:0e:e0:13:a7:
8e:d5:34:25:b3:5c:bc:59:03:ae:fb:dc:99:23:86:ee:e8:d3:
8c:4e:68:55:d7:a9:96:9e:92:07:06:c2:ab:ef:23:e4:65:59:
73:62:a9:13:40:0c:9c:43:b6:25:24:96:b2:dc:13:f3:05:38:
fd:38:8e:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyntM4oDyxSCazQcOHU1a3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjMwMTAyMTMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTJhYmRmZTM0Yzc1MDI0MTY0ZGUzMmI5YTIyMzYyNGQ1NGQwNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxnKTulo7Ad3HpM7PjwwrnYqqHZb
K0DBgBPS/4xMVT/TFXdTEo3KkobpPZlQEcepfi7cNi69bp+doVGBSK0nWkY5AVem
LQ/MNys/YvGHQCbTNALw4A4rIN/OHHcJz/RUqU8YGbLCH+kuyXTRv1Tefeoa5LGu
o10SOEbgwX9pgcgAoJoPUvfSyKw9om+qjWcFXUvhqmXJiABqP+oTGw48G5+6QhhI
OrESn0+cMG4y0wnYq/3UjB3NL3FBSiQ6TtuUYsYnIvZfskAn+Q3LSVFS/v5Wy467
niy/S8BT02xmzDTyCmnEkXx0hYgFpWgKnn5pIqVery2AjfkKMFSFEl3IkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEqvf40x1AkFk3jK5oiNiTVTQT4MB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvMFNxOV9qVEhVQ1FXVGVNcm1pSTJKTlZOQlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucsgMA0G
CSqGSIb3DQEBCwUAA4IBAQBlgIF0pqfjFfvO3tXjee06c30rcINkCXc6w6pCLEK4
gA2Z6vjOgR5dv5wRk2muR+298+xvqv2ayGxmwI+zwZg4F3F1ZtVtjUd8Gh1lpcv6
7F0NE2k8R13dR8evcJKboxdkdJBPQ/aCuO65URCGBASg/OjI4v66H8snZRhqLCJt
AKkvkGUn8eE16bVzsv0duWKN8mcSx4pLxWfYuzD9torI6+UzuqN+JwpzJbzdm0R3
ABWY6JVBBh8C+BV2XoWDwGV5gw7gE6eO1TQls1y8WQOu+9yZI4bu6NOMTmhV16mW
npIHBsKr7yPkZVlzYqkTQAycQ7YlJJay3BPzBTj9OI7q
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:59 2024 by rpki-client on console-ams.rpki-client.org