Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/00yzTLup39zUGnrw4xVgzuAlUwE.roa
File: 00yzTLup39zUGnrw4xVgzuAlUwE.roa (raw, json)
Hash identifier: 340e+/5sys+8Eko7fNmXrtHgMHc2j3xbbZSqBGUrHZo=
Subject key identifier: D3:4C:B3:4C:BB:A9:DF:DC:D4:1A:7A:F0:E3:15:60:CE:E0:25:53:01
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 01876FEC951F7E3B34792DB28B771D697769
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/00yzTLup39zUGnrw4xVgzuAlUwE.roa
Signing time: Tue 11 Apr 2023 10:46:28 +0000
ROA not before: Tue 11 Apr 2023 10:46:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12357
IP address blocks: 185.195.179.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
185.195.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 11 Apr 2023 16:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:ec:95:1f:7e:3b:34:79:2d:b2:8b:77:1d:69:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 11 10:46:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34cb34cbba9dfdcd41a7af0e31560cee0255301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:17:9e:2a:24:04:36:f9:f1:9a:5a:c5:78:
ed:1d:0d:c1:2b:e1:e0:d7:d0:a4:d2:5a:b9:01:f7:
2f:31:fd:99:65:06:fa:26:f0:65:10:9a:36:5d:3a:
ea:53:d2:8c:c8:df:84:c0:59:22:46:80:b7:08:80:
f8:89:57:79:10:99:a7:e1:19:87:35:cc:ac:61:6e:
3e:e6:c0:b7:1f:0b:04:a9:f4:6f:f3:9f:4f:77:51:
2d:2b:de:bb:2e:02:a3:a1:2d:71:04:c7:a7:cd:46:
9b:65:ae:a3:c5:a0:7b:04:26:48:c4:f1:0f:96:65:
a8:c5:7b:4f:84:24:8d:db:c1:d8:98:40:98:99:04:
86:cd:ff:2f:69:bd:2d:4d:ba:fe:85:5f:ce:0d:1b:
8f:ed:aa:2c:04:f7:41:0a:a3:79:e3:86:55:c9:11:
6d:86:f5:c5:01:11:db:76:a1:f7:98:49:6e:d9:3c:
ed:f1:cc:83:fc:01:45:15:00:2d:9d:a8:19:86:f2:
ca:3e:bc:4a:ce:a9:f4:08:dc:45:09:1e:64:d8:13:
4e:61:16:23:d8:51:6d:f7:1c:46:ef:13:86:84:d7:
30:b9:8c:17:2e:0a:70:f1:d5:e9:9c:47:b5:ca:a1:
6b:07:3e:87:96:05:57:bb:40:1e:c7:7d:9f:77:4b:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:B3:4C:BB:A9:DF:DC:D4:1A:7A:F0:E3:15:60:CE:E0:25:53:01
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/00yzTLup39zUGnrw4xVgzuAlUwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:30:e2:60:ec:b1:4e:87:12:3a:34:26:a8:53:4c:10:57:0b:
4a:9d:70:00:44:e7:40:f8:d0:f4:d3:f8:75:40:b3:8f:3a:a5:
d7:0e:6e:9c:fd:48:71:1d:54:93:be:67:a1:a6:36:e9:80:2b:
28:58:63:6d:c9:2e:84:e8:36:2f:8b:dc:e2:e3:5f:73:27:36:
73:12:86:d6:76:49:be:9b:ea:b5:2d:98:f2:53:83:8c:c7:68:
47:42:79:91:97:e3:7c:ab:7b:04:23:f8:39:23:d9:95:08:ca:
f0:f4:b9:1c:06:cc:0d:66:a6:18:65:35:a4:6c:8e:60:4a:58:
4f:9d:4f:ab:19:b9:5d:e6:ac:24:dc:cc:b2:2e:52:25:ae:44:
00:1b:d3:0f:b4:8e:2f:2f:62:97:53:96:bd:2d:a3:4c:32:dc:
11:66:50:99:f4:c3:f6:41:cb:8c:bd:ff:ff:49:fa:fc:5b:41:
23:51:22:33:5f:b3:5c:6d:ab:8b:99:34:39:9f:18:0b:71:bb:
75:08:a7:9a:48:0d:1a:73:be:83:fe:71:e3:20:b7:90:35:04:
61:c4:cd:a4:f8:23:19:99:6c:99:11:d0:6b:72:49:fd:e4:fd:
57:c3:57:66:81:2d:08:cd:40:ae:3d:9b:1a:fb:dd:b2:a2:9a:
5e:60:57:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdv7JUffjs0eS2yi3cdaXdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjMwNDExMTA0NjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzRjYjM0Y2JiYTlkZmRjZDQxYTdhZjBlMzE1NjBjZWUwMjU1MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIgXniokBDb58ZpaxXjtHQ3BK+Hg
19Ck0lq5AfcvMf2ZZQb6JvBlEJo2XTrqU9KMyN+EwFkiRoC3CID4iVd5EJmn4RmH
NcysYW4+5sC3HwsEqfRv859Pd1EtK967LgKjoS1xBMenzUabZa6jxaB7BCZIxPEP
lmWoxXtPhCSN28HYmECYmQSGzf8vab0tTbr+hV/ODRuP7aosBPdBCqN544ZVyRFt
hvXFARHbdqH3mElu2Tzt8cyD/AFFFQAtnagZhvLKPrxKzqn0CNxFCR5k2BNOYRYj
2FFt9xxG7xOGhNcwuYwXLgpw8dXpnEe1yqFrBz6HlgVXu0Aex32fd0sImQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNMs0y7qd/c1Bp68OMVYM7gJVMBMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvMDB5elRMdXAzOXpVR25ydzR4Vmd6dUFsVXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucOwMA0G
CSqGSIb3DQEBCwUAA4IBAQAsMOJg7LFOhxI6NCaoU0wQVwtKnXAAROdA+ND00/h1
QLOPOqXXDm6c/UhxHVSTvmehpjbpgCsoWGNtyS6E6DYvi9zi419zJzZzEobWdkm+
m+q1LZjyU4OMx2hHQnmRl+N8q3sEI/g5I9mVCMrw9LkcBswNZqYYZTWkbI5gSlhP
nU+rGbld5qwk3MyyLlIlrkQAG9MPtI4vL2KXU5a9LaNMMtwRZlCZ9MP2QcuMvf//
Sfr8W0EjUSIzX7NcbauLmTQ5nxgLcbt1CKeaSA0ac76D/nHjILeQNQRhxM2k+CMZ
mWyZEdBrckn95P1Xw1dmgS0IzUCuPZsa+92yoppeYFcL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org