Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/erV74omY_Bc4n0uwXgBS5zfYoMY.roa
File: erV74omY_Bc4n0uwXgBS5zfYoMY.roa (raw, json)
Hash identifier: /7wziVe0kWNFgea6vSuzwiSC+vshJieBCyHGGBsR3/I=
Subject key identifier: 7A:B5:7B:E2:89:98:FC:17:38:9F:4B:B0:5E:00:52:E7:37:D8:A0:C6
Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial: 01856D017F6790D7A73EAF22CFA408B8CF8F
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/erV74omY_Bc4n0uwXgBS5zfYoMY.roa
Signing time: Sun 01 Jan 2023 11:04:52 +0000
ROA not before: Sun 01 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205718
IP address blocks: 185.205.112.0/22 maxlen: 22
2a09:1780::/34 maxlen: 34
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:7f:67:90:d7:a7:3e:af:22:cf:a4:08:b8:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Validity
Not Before: Jan 1 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab57be28998fc17389f4bb05e0052e737d8a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:bb:8c:d1:74:aa:f9:51:75:e2:6d:6c:2b:
66:51:86:aa:56:26:2d:89:68:b5:d1:91:7c:2d:46:
0b:98:0c:d9:7b:76:6e:50:82:c4:a7:87:1a:57:84:
2d:9c:13:d0:a8:e5:a5:35:49:cc:74:c5:c7:67:8c:
b2:2b:09:e5:d5:dc:ed:57:de:c8:30:19:52:b1:73:
cd:a3:67:b7:3f:82:71:d8:ba:3c:02:34:0f:4b:49:
82:a3:6d:89:53:dc:bb:fa:6c:8a:60:dc:26:1c:b2:
d1:59:82:56:2b:87:4a:2f:00:73:7a:0a:73:e1:1d:
d8:51:f0:f8:4a:62:2b:39:ec:f2:fd:e4:15:e0:20:
ae:9a:42:1d:69:fc:b0:d9:c6:d4:46:7a:ec:f0:f5:
10:ee:38:8c:98:a3:52:49:68:8a:da:65:cb:88:59:
71:3c:b8:c0:cc:42:7a:23:e6:32:45:87:78:fc:a5:
72:10:44:90:a2:44:4f:65:91:89:78:ed:de:2d:4f:
82:62:d8:b5:f9:0f:ac:d2:66:42:04:54:98:21:7f:
1c:8f:69:c5:e5:f6:c2:a2:33:e9:42:cc:4f:af:b0:
c5:51:0e:ed:36:9f:a8:be:07:88:14:5f:88:37:77:
63:42:84:e1:ef:33:93:cf:8c:76:7b:f6:24:7e:81:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:7B:E2:89:98:FC:17:38:9F:4B:B0:5E:00:52:E7:37:D8:A0:C6
X509v3 Authority Key Identifier:
keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/erV74omY_Bc4n0uwXgBS5zfYoMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.112.0/22
IPv6:
2a09:1780::/34
Signature Algorithm: sha256WithRSAEncryption
37:21:d1:b0:0a:3c:72:ba:34:d9:65:12:17:a1:35:6e:84:7b:
d9:01:e6:72:f4:d8:0f:e5:ea:59:6f:eb:6b:87:aa:45:49:ae:
8c:20:11:89:3b:a2:0c:f6:20:eb:75:37:2b:10:b2:c6:d4:37:
1e:5a:9f:03:9b:58:13:ff:fd:af:e9:b9:ca:7b:d6:ed:77:a0:
89:91:e0:07:d5:d7:88:48:a3:f4:27:7f:5b:9b:e4:26:aa:72:
1f:29:b4:2a:87:29:57:81:87:29:2a:ab:35:9c:0e:c9:5d:71:
37:a9:de:14:2f:20:57:d8:16:b4:4c:57:ae:15:d8:ae:4b:32:
9c:da:7c:dd:d4:0d:3b:19:f1:d7:a8:be:51:cf:31:03:c6:b0:
b7:10:78:aa:05:e2:71:04:1f:f8:ab:aa:2a:ff:5e:d2:8b:7d:
43:0d:ab:96:f0:bf:19:79:cc:4c:f6:e5:41:e1:47:3c:e8:69:
a3:4e:03:d8:72:84:37:69:5a:5f:79:f7:b8:33:ce:ee:d5:95:
b3:eb:6e:22:03:04:ed:dc:00:5f:70:ea:a0:5d:20:fe:3d:73:
5d:c5:c7:25:f8:66:19:d6:02:5a:63:fe:7e:af:7e:0d:f7:06:
c4:93:3c:ac:20:53:d1:ba:f1:ef:d9:a5:be:50:82:46:ec:73:
19:46:2b:72
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVtAX9nkNenPq8iz6QIuM+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi
NjFhNmQwHhcNMjMwMTAxMTEwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI1N2JlMjg5OThmYzE3Mzg5ZjRiYjA1ZTAwNTJlNzM3ZDhhMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+7jNF0qvlRdeJtbCtmUYaqViYt
iWi10ZF8LUYLmAzZe3ZuUILEp4caV4QtnBPQqOWlNUnMdMXHZ4yyKwnl1dztV97I
MBlSsXPNo2e3P4Jx2Lo8AjQPS0mCo22JU9y7+myKYNwmHLLRWYJWK4dKLwBzegpz
4R3YUfD4SmIrOezy/eQV4CCumkIdafyw2cbURnrs8PUQ7jiMmKNSSWiK2mXLiFlx
PLjAzEJ6I+YyRYd4/KVyEESQokRPZZGJeO3eLU+CYti1+Q+s0mZCBFSYIX8cj2nF
5fbCojPpQsxPr7DFUQ7tNp+ovgeIFF+IN3djQoTh7zOTz4x2e/YkfoFXRQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFHq1e+KJmPwXOJ9LsF4AUuc32KDGMB8GA1UdIwQY
MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt
ZDI2MjgwM2NmNjQ0LzEvZXJWNzRvbVlfQmM0bjB1d1hnQlM1emZZb01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0
LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuc1wMA4E
AgACMAgDBgYqCReAADANBgkqhkiG9w0BAQsFAAOCAQEANyHRsAo8cro02WUSF6E1
boR72QHmcvTYD+XqWW/ra4eqRUmujCARiTuiDPYg63U3KxCyxtQ3HlqfA5tYE//9
r+m5ynvW7XegiZHgB9XXiEij9Cd/W5vkJqpyHym0KocpV4GHKSqrNZwOyV1xN6ne
FC8gV9gWtExXrhXYrksynNp83dQNOxnx16i+Uc8xA8awtxB4qgXicQQf+KuqKv9e
0ot9Qw2rlvC/GXnMTPblQeFHPOhpo04D2HKEN2laX3n3uDPO7tWVs+tuIgME7dwA
X3DqoF0g/j1zXcXHJfhmGdYCWmP+fq9+DfcGxJM8rCBT0brx79mlvlCCRuxzGUYr
cg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:40 2024 by rpki-client on console-fra.rpki-client.org