Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/DrS9aHQ04453TbBeg5YX-9Oljnk.roa
File: DrS9aHQ04453TbBeg5YX-9Oljnk.roa (raw, json)
Hash identifier: JGpKJr62vs42HRHg2/4OIRfq5H18lXCSsTxQT2r5/TQ=
Subject key identifier: 0E:B4:BD:68:74:34:E3:8E:77:4D:B0:5E:83:96:17:FB:D3:A5:8E:79
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 018A798E2186D125A863708B336EF86FE1C6
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/DrS9aHQ04453TbBeg5YX-9Oljnk.roa
Signing time: Sat 09 Sep 2023 10:47:52 +0000
ROA not before: Sat 09 Sep 2023 10:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Sep 2023 20:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:8e:21:86:d1:25:a8:63:70:8b:33:6e:f8:6f:e1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Sep 9 10:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eb4bd687434e38e774db05e839617fbd3a58e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:dd:ff:f2:64:6a:31:6d:87:31:22:70:a9:
ef:0f:97:77:e1:3a:f2:9a:01:01:b8:b3:fa:11:9e:
c6:fc:de:35:50:77:32:23:7b:b4:a8:8f:e3:bc:82:
1d:db:93:d2:c5:75:df:22:d6:2b:f2:61:e9:85:18:
f4:00:a1:5a:6e:1c:03:d8:17:b4:21:52:a5:cc:9e:
33:34:77:11:4e:78:4c:a2:8c:f4:4e:6f:9f:65:61:
b7:25:c2:ce:86:e6:49:24:6e:6d:05:12:34:46:e3:
a5:0b:df:c2:56:af:22:43:83:bd:aa:1b:3e:4e:76:
18:58:c7:85:61:bb:98:49:d9:56:be:de:bf:b4:97:
b0:c6:c7:dd:64:b3:cc:a8:2d:92:47:7d:21:77:77:
4e:e3:31:88:e3:76:8f:d8:1d:ab:f4:c6:5c:95:97:
59:1c:91:71:4e:d9:0c:be:6e:ea:0b:f7:d5:21:5d:
01:2a:13:f4:fd:52:f5:b8:d5:42:41:65:19:42:f0:
a6:3e:3d:c6:bd:06:08:1b:88:cb:38:40:2f:b6:b9:
e6:3d:4a:b5:01:b7:ab:c1:04:eb:fd:45:40:9b:f1:
83:4c:91:37:48:69:b3:4f:c3:ee:4f:21:05:a8:2f:
da:fb:af:ec:03:5f:38:4c:fd:15:da:23:73:c6:9c:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:BD:68:74:34:E3:8E:77:4D:B0:5E:83:96:17:FB:D3:A5:8E:79
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/DrS9aHQ04453TbBeg5YX-9Oljnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b6:94:72:3a:7a:e4:21:a7:54:44:fe:30:c9:c6:90:21:f1:
8c:d8:09:54:2f:83:a5:ee:0d:45:49:b5:1c:c1:c9:94:a1:1e:
72:cd:c6:43:a1:87:ed:72:32:95:92:7a:72:08:5b:f7:82:2d:
28:6d:6e:81:5c:83:25:56:4e:e8:70:d7:34:66:bb:d1:dd:51:
8a:ed:10:17:59:a7:9f:48:f4:ad:4f:b5:be:f9:92:cf:fc:2b:
10:e5:5f:a9:ee:c0:ed:87:f9:3d:3b:f5:da:b5:ed:76:d5:55:
ad:ee:2d:83:25:dd:bd:9f:6d:1f:40:94:20:1e:58:cd:b5:7d:
a7:9b:62:16:3d:df:f4:45:77:7d:67:5f:92:a2:09:6a:a2:7f:
9e:e6:ae:0b:30:29:07:69:4c:f6:15:17:46:ba:37:a7:4f:5d:
6c:6f:bb:ef:b8:84:47:2d:35:d7:a2:f1:eb:b7:1d:71:d6:83:
91:c9:1a:ba:d5:4f:55:fc:5d:1c:72:ed:d3:7c:67:e5:57:ee:
99:24:47:48:54:b9:70:06:35:9e:ae:d3:7a:a6:05:1a:3e:f7:
71:c5:40:e6:1e:01:18:bb:ea:e0:11:f3:30:38:ca:6d:7a:7d:
ca:ed:f0:ea:c7:f6:89:a6:3b:e2:01:ce:d3:a8:78:87:2e:cc:
40:3f:e4:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp5jiGG0SWoY3CLM274b+HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjMwOTA5MTA0NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWI0YmQ2ODc0MzRlMzhlNzc0ZGIwNWU4Mzk2MTdmYmQzYTU4ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrzd//JkajFthzEicKnvD5d34Try
mgEBuLP6EZ7G/N41UHcyI3u0qI/jvIId25PSxXXfItYr8mHphRj0AKFabhwD2Be0
IVKlzJ4zNHcRTnhMooz0Tm+fZWG3JcLOhuZJJG5tBRI0RuOlC9/CVq8iQ4O9qhs+
TnYYWMeFYbuYSdlWvt6/tJewxsfdZLPMqC2SR30hd3dO4zGI43aP2B2r9MZclZdZ
HJFxTtkMvm7qC/fVIV0BKhP0/VL1uNVCQWUZQvCmPj3GvQYIG4jLOEAvtrnmPUq1
AberwQTr/UVAm/GDTJE3SGmzT8PuTyEFqC/a+6/sA184TP0V2iNzxpzZhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA60vWh0NOOOd02wXoOWF/vTpY55MB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvRHJTOWFIUTA0NDUzVGJCZWc1WVgtOU9sam5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWMUMA0G
CSqGSIb3DQEBCwUAA4IBAQB/tpRyOnrkIadURP4wycaQIfGM2AlUL4Ol7g1FSbUc
wcmUoR5yzcZDoYftcjKVknpyCFv3gi0obW6BXIMlVk7ocNc0ZrvR3VGK7RAXWaef
SPStT7W++ZLP/CsQ5V+p7sDth/k9O/Xate121VWt7i2DJd29n20fQJQgHljNtX2n
m2IWPd/0RXd9Z1+Soglqon+e5q4LMCkHaUz2FRdGujenT11sb7vvuIRHLTXXovHr
tx1x1oORyRq61U9V/F0ccu3TfGflV+6ZJEdIVLlwBjWertN6pgUaPvdxxUDmHgEY
u+rgEfMwOMpten3K7fDqx/aJpjviAc7TqHiHLsxAP+TU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org