Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7Q6s8VwudokZkCa_0m4_ekpOdyM.roa
File: 7Q6s8VwudokZkCa_0m4_ekpOdyM.roa (raw, json)
Hash identifier: 0ePw4BYY1K0ZPaKp6z/GkU+4MRWlpTUjS9ArWloA+Y4=
Subject key identifier: ED:0E:AC:F1:5C:2E:76:89:19:90:26:BF:D2:6E:3F:7A:4A:4E:77:23
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 018570E74434926FB5BA156D33E3716350E3
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7Q6s8VwudokZkCa_0m4_ekpOdyM.roa
Signing time: Mon 02 Jan 2023 05:14:42 +0000
ROA not before: Mon 02 Jan 2023 05:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10122
IP address blocks: 185.155.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:44:34:92:6f:b5:ba:15:6d:33:e3:71:63:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 2 05:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0eacf15c2e7689199026bfd26e3f7a4a4e7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:2f:69:8b:7f:a5:2a:32:e7:a2:15:93:91:
f7:c2:15:58:51:33:da:60:75:af:64:82:04:cd:35:
9d:f6:3d:23:c1:cb:0d:6e:bf:00:aa:29:b2:b9:cb:
ce:3a:bf:28:d9:f3:7d:95:e2:e3:27:cc:20:c4:54:
fe:81:a5:29:fe:0a:ec:27:93:fc:e2:1d:b7:2d:d4:
3e:c5:81:11:21:95:1b:5a:6b:56:9a:34:84:c8:44:
5a:a4:ca:bd:56:28:6e:86:ec:a8:96:e4:eb:0f:f0:
8e:f6:c4:05:28:14:e2:93:58:51:22:f8:dd:3f:6c:
a1:f5:f4:22:af:a3:b2:d2:7c:bd:1e:6e:df:cb:0d:
15:c4:39:d0:35:e6:15:48:74:d4:ce:55:3b:87:7a:
ab:80:ae:29:37:38:07:13:42:da:8f:c3:6e:3e:d2:
01:e3:59:8c:de:90:9c:d9:d4:82:bc:56:6e:83:25:
30:88:41:99:e4:dd:72:85:e4:6c:0d:1d:e2:af:bc:
4a:43:c9:75:67:85:c8:a8:cb:ab:8c:9d:13:24:0e:
00:a2:46:21:d5:9f:8b:98:0d:45:80:88:5c:f0:09:
a9:77:b3:a2:46:96:50:6f:76:19:49:02:87:ef:66:
2c:80:bf:f6:16:fa:6a:cd:e5:ee:b5:91:17:86:94:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:AC:F1:5C:2E:76:89:19:90:26:BF:D2:6E:3F:7A:4A:4E:77:23
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7Q6s8VwudokZkCa_0m4_ekpOdyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ba:f2:3d:ef:f0:8b:84:74:d6:a1:b7:1c:79:0b:da:93:a7:
c1:b6:c7:34:e2:df:03:a9:5c:e4:e8:7e:6b:cf:a0:a1:6b:41:
46:df:e3:4d:ed:36:b1:9a:94:1a:09:5d:93:a7:71:c3:03:db:
cf:b5:e3:67:98:1e:53:31:7c:a3:32:07:c6:8c:a3:16:7a:c2:
f4:e9:14:c0:8f:9f:9a:9d:80:1c:8d:d4:55:d2:47:e2:3b:cd:
84:db:5c:cc:d3:19:03:3b:69:39:5d:0d:07:39:8f:c4:f5:84:
df:bb:38:6b:f4:80:c6:72:65:7d:35:51:3b:19:a0:87:0b:ff:
e9:3d:14:50:48:66:79:a9:0b:28:6f:2f:42:b8:f5:a9:42:4c:
d3:d2:8e:8e:f9:85:2f:b2:ab:81:19:d6:d9:3b:3e:65:7b:47:
5a:f1:97:05:94:b3:43:e3:e1:cb:b3:0a:d2:e5:c9:6e:00:1d:
82:99:76:6f:41:84:68:05:f4:e6:41:14:cf:dd:29:9d:b6:a4:
ad:f7:da:e7:a8:a0:f2:9b:25:a8:85:17:65:b9:9b:59:53:33:
26:5d:c8:bc:39:37:8f:86:5c:8e:0d:67:4f:a4:c3:55:57:94:
6e:33:df:df:fc:2f:8f:94:ce:2d:28:53:fb:f6:0b:9c:08:3a:
25:07:7b:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw50Q0km+1uhVtM+NxY1DjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjMwMTAyMDUxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDBlYWNmMTVjMmU3Njg5MTk5MDI2YmZkMjZlM2Y3YTRhNGU3NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4wvaYt/pSoy56IVk5H3whVYUTPa
YHWvZIIEzTWd9j0jwcsNbr8AqimyucvOOr8o2fN9leLjJ8wgxFT+gaUp/grsJ5P8
4h23LdQ+xYERIZUbWmtWmjSEyERapMq9VihuhuyoluTrD/CO9sQFKBTik1hRIvjd
P2yh9fQir6Oy0ny9Hm7fyw0VxDnQNeYVSHTUzlU7h3qrgK4pNzgHE0Laj8NuPtIB
41mM3pCc2dSCvFZugyUwiEGZ5N1yheRsDR3ir7xKQ8l1Z4XIqMurjJ0TJA4AokYh
1Z+LmA1FgIhc8Ampd7OiRpZQb3YZSQKH72YsgL/2FvpqzeXutZEXhpSm/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0OrPFcLnaJGZAmv9JuP3pKTncjMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN1E2czhWd3Vkb2taa0NhXzBtNF9la3BPZHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZuJMA0G
CSqGSIb3DQEBCwUAA4IBAQBNuvI97/CLhHTWobcceQvak6fBtsc04t8DqVzk6H5r
z6Cha0FG3+NN7TaxmpQaCV2Tp3HDA9vPteNnmB5TMXyjMgfGjKMWesL06RTAj5+a
nYAcjdRV0kfiO82E21zM0xkDO2k5XQ0HOY/E9YTfuzhr9IDGcmV9NVE7GaCHC//p
PRRQSGZ5qQsoby9CuPWpQkzT0o6O+YUvsquBGdbZOz5le0da8ZcFlLND4+HLswrS
5cluAB2CmXZvQYRoBfTmQRTP3SmdtqSt99rnqKDymyWohRdluZtZUzMmXci8OTeP
hlyODWdPpMNVV5RuM9/f/C+PlM4tKFP79gucCDolB3sl
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:08 2024 by rpki-client on console-ams.rpki-client.org