Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vZgIfwkwOIh0tRd9bBgOEd4JeIk.roa
File: vZgIfwkwOIh0tRd9bBgOEd4JeIk.roa (raw, json)
Hash identifier: P8U0uvWXq26tyX2jF7LMAPUaftomlogt2WLuZk2q4eg=
Subject key identifier: BD:98:08:7F:09:30:38:88:74:B5:17:7D:6C:18:0E:11:DE:09:78:89
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 01856DD3F2900A8613ADB0D379D4FA54DC79
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vZgIfwkwOIh0tRd9bBgOEd4JeIk.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 185.197.197.0/24 maxlen: 24
185.197.196.0/24 maxlen: 24
185.197.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f2:90:0a:86:13:ad:b0:d3:79:d4:fa:54:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd98087f0930388874b5177d6c180e11de097889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:17:51:d6:3a:51:94:65:97:b5:52:e8:be:
0d:54:6f:34:a6:69:dc:03:c9:ae:64:3f:3c:59:93:
41:1b:1b:2d:9d:3d:e2:6e:1e:0f:5f:ff:15:92:43:
d7:d6:9f:13:1e:1b:ee:56:a0:a2:56:61:1a:fa:06:
0c:c2:d7:b3:68:59:97:96:39:9b:62:76:41:96:56:
d6:74:b9:4b:b9:f3:a1:54:34:02:ed:13:2f:74:9e:
94:bb:93:86:3b:a5:cc:a4:38:73:80:11:83:24:92:
fb:74:ea:89:c4:aa:37:80:bd:77:a0:98:89:81:d7:
84:52:eb:1a:6a:6e:55:00:d2:67:6b:87:6f:09:da:
26:54:40:e0:6e:d9:bb:6a:75:22:3e:53:bd:ca:ca:
d2:62:c0:34:07:0a:11:82:d2:b0:3c:e4:f6:2b:5a:
b6:d2:56:ca:ee:24:11:f3:ef:a4:4b:e3:50:f9:d3:
57:a3:ed:15:01:a7:20:96:7e:aa:e1:f8:b9:6a:42:
a8:0e:90:4e:88:66:7a:2e:30:f1:d8:6d:9b:98:c6:
c5:01:72:f3:69:22:eb:d9:8a:15:7b:e0:e9:40:b8:
74:a6:40:5b:c8:ba:ff:27:75:e5:f8:10:dc:b8:98:
28:2a:51:5f:db:e7:fe:f5:4d:38:24:e3:f6:0e:8d:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:08:7F:09:30:38:88:74:B5:17:7D:6C:18:0E:11:DE:09:78:89
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vZgIfwkwOIh0tRd9bBgOEd4JeIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.196.0-185.197.198.255
Signature Algorithm: sha256WithRSAEncryption
93:4f:10:68:7d:77:d5:86:f4:52:83:cc:31:a6:d3:c5:80:71:
78:db:5a:65:72:61:a1:57:3d:f5:00:87:c7:84:6d:e4:de:68:
24:4a:86:96:cf:a1:49:78:1e:40:b8:f5:86:67:16:0b:77:d1:
2c:72:1b:29:c5:62:1d:db:e0:5c:ef:a3:2a:6c:52:c6:28:b5:
6e:f7:42:26:c8:cc:f3:74:7e:62:8e:a0:a4:8d:67:15:16:a9:
a2:83:5a:e4:ed:f0:4b:15:e9:87:79:bd:02:10:7c:05:13:54:
f3:dd:82:30:6a:ef:d0:fa:fb:07:94:a5:70:fe:c7:8c:64:48:
87:c5:7a:f9:12:2e:03:77:da:14:8d:28:33:76:12:0e:0f:af:
df:35:04:8d:b4:8f:69:8d:2c:7d:59:4c:08:94:1d:22:fa:d8:
37:c8:f7:e4:9b:1d:af:df:23:69:60:1a:d2:f5:85:17:5a:e0:
40:5c:34:03:19:84:28:94:d7:c0:17:30:e1:80:8f:83:da:fe:
21:8b:ca:9e:0a:0d:9d:34:12:c2:04:c0:19:0f:04:41:3f:d4:
19:f4:62:df:a9:62:08:e3:04:4a:93:1c:37:c1:3e:de:c2:e8:
00:05:7e:3a:47:5e:09:ce:8e:4a:e3:73:f7:b7:16:98:d3:0c:
47:75:36:1c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVt0/KQCoYTrbDTedT6VNx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjMwMTAxMTQ1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDk4MDg3ZjA5MzAzODg4NzRiNTE3N2Q2YzE4MGUxMWRlMDk3ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEkXUdY6UZRll7VS6L4NVG80pmnc
A8muZD88WZNBGxstnT3ibh4PX/8VkkPX1p8THhvuVqCiVmEa+gYMwtezaFmXljmb
YnZBllbWdLlLufOhVDQC7RMvdJ6Uu5OGO6XMpDhzgBGDJJL7dOqJxKo3gL13oJiJ
gdeEUusaam5VANJna4dvCdomVEDgbtm7anUiPlO9ysrSYsA0BwoRgtKwPOT2K1q2
0lbK7iQR8++kS+NQ+dNXo+0VAacgln6q4fi5akKoDpBOiGZ6LjDx2G2bmMbFAXLz
aSLr2YoVe+DpQLh0pkBbyLr/J3Xl+BDcuJgoKlFf2+f+9U04JOP2Do0nVQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL2YCH8JMDiIdLUXfWwYDhHeCXiJMB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvdlpnSWZ3a3dPSWgwdFJkOWJCZ09FZDRKZUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5xcQD
BAC5xcYwDQYJKoZIhvcNAQELBQADggEBAJNPEGh9d9WG9FKDzDGm08WAcXjbWmVy
YaFXPfUAh8eEbeTeaCRKhpbPoUl4HkC49YZnFgt30SxyGynFYh3b4FzvoypsUsYo
tW73QibIzPN0fmKOoKSNZxUWqaKDWuTt8EsV6Yd5vQIQfAUTVPPdgjBq79D6+weU
pXD+x4xkSIfFevkSLgN32hSNKDN2Eg4Pr981BI20j2mNLH1ZTAiUHSL62DfI9+Sb
Ha/fI2lgGtL1hRda4EBcNAMZhCiU18AXMOGAj4Pa/iGLyp4KDZ00EsIEwBkPBEE/
1Bn0Yt+pYgjjBEqTHDfBPt7C6AAFfjpHXgnOjkrjc/e3FpjTDEd1Nhw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:33 2024 by rpki-client on console-ams.rpki-client.org