Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa
File: 9l-07lAEU29pOAaOmKVyvAKfaXE.roa (raw, json)
Hash identifier: McoRPkOHsJWTPzpYUBNwf3pabL4I8AuMky7wDe4/88w=
Subject key identifier: F6:5F:B4:EE:50:04:53:6F:69:38:06:8E:98:A5:72:BC:02:9F:69:71
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01856D661AA217071002EDFC23539A11B040
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa
Signing time: Sun 01 Jan 2023 12:54:45 +0000
ROA not before: Sun 01 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198171
IP address blocks: 185.102.76.0/22 maxlen: 22
2a00:ca80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:1a:a2:17:07:10:02:ed:fc:23:53:9a:11:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65fb4ee5004536f6938068e98a572bc029f6971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:d9:74:b8:f6:35:31:9f:91:6c:9c:b4:f7:
78:22:13:53:e5:c3:bc:d0:b8:b0:52:72:5e:28:6f:
46:fb:24:d4:1d:ec:75:e7:c3:c7:8b:1d:21:2f:7b:
a9:24:55:73:87:86:e2:ac:af:01:db:87:61:49:85:
ac:19:35:78:a6:3e:55:45:8a:99:85:c3:44:a1:28:
59:8d:58:44:c9:b5:33:cc:33:51:73:21:34:b4:a8:
48:79:01:49:f5:a5:2f:8b:30:f2:4b:6b:6d:ac:7b:
9a:ce:7e:9a:15:a9:e6:db:4c:2d:d4:e7:b0:ba:72:
f7:44:04:fe:7b:79:46:5b:4a:5c:b1:37:55:2b:f1:
e5:22:86:f7:8a:ef:a4:3b:a8:7a:6c:f8:a8:a4:22:
20:b9:d7:df:af:1d:02:9a:b9:ee:09:5c:ef:f2:2e:
d8:04:fd:11:30:a0:7c:0a:fc:73:4c:19:2c:a3:a4:
a8:f8:9f:a3:3a:96:61:a0:a0:dd:f4:89:01:26:5e:
ef:d8:79:4f:dd:74:af:33:bb:c9:9c:5b:d8:60:91:
d6:5b:85:60:9a:c9:ec:5f:bc:f3:c4:08:4f:a5:65:
d7:be:1f:6b:48:ba:b8:bf:3f:58:b4:c4:ec:86:45:
97:c0:65:bb:1b:c2:c8:7f:61:97:36:90:81:2c:ea:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:B4:EE:50:04:53:6F:69:38:06:8E:98:A5:72:BC:02:9F:69:71
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.76.0/22
IPv6:
2a00:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
c4:b6:90:0f:5e:e5:53:10:71:fa:46:51:b5:a5:f3:55:5a:c1:
f0:84:73:17:47:20:62:8c:0f:c9:16:b5:f2:6f:c7:b4:7d:2f:
b2:aa:d5:fb:c4:60:12:18:f7:74:05:5f:79:a9:94:bc:d5:68:
10:74:46:8f:5a:50:a5:41:d0:a5:3d:a3:7d:c7:02:35:cc:28:
fb:2d:db:0f:c5:0f:26:0d:42:b2:6f:d9:3d:2f:82:65:33:41:
37:c5:38:31:2c:22:f1:ad:f7:07:f4:d6:28:82:5a:f9:df:04:
30:81:7b:5b:39:0b:96:1d:4e:af:86:15:4c:70:16:04:79:df:
33:df:42:8e:7a:3d:8d:69:b1:20:56:1b:55:16:89:6a:b6:98:
20:0b:e0:20:26:1e:20:e5:44:6c:ee:19:e7:04:68:fe:f3:66:
6f:b6:a1:3a:bd:d7:0c:2d:a0:f9:7c:ea:a1:bb:39:47:c3:ac:
77:7a:28:60:03:38:b5:ce:0c:04:67:c8:11:a3:7f:1a:58:f5:
22:8b:33:07:6c:6e:4a:8c:d9:09:8f:31:98:ea:3b:cc:33:e1:
5a:37:a2:1b:10:39:55:c4:8a:d5:54:0d:f8:a5:8c:09:ef:99:
0d:a6:56:d7:d8:ca:48:dd:af:e6:ff:75:b5:13:63:24:b5:ce:
57:ec:a7:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtZhqiFwcQAu38I1OaEbBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjMwMTAxMTI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjVmYjRlZTUwMDQ1MzZmNjkzODA2OGU5OGE1NzJiYzAyOWY2OTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswzZdLj2NTGfkWyctPd4IhNT5cO8
0LiwUnJeKG9G+yTUHex158PHix0hL3upJFVzh4birK8B24dhSYWsGTV4pj5VRYqZ
hcNEoShZjVhEybUzzDNRcyE0tKhIeQFJ9aUvizDyS2ttrHuazn6aFanm20wt1Oew
unL3RAT+e3lGW0pcsTdVK/HlIob3iu+kO6h6bPiopCIgudffrx0CmrnuCVzv8i7Y
BP0RMKB8CvxzTBkso6So+J+jOpZhoKDd9IkBJl7v2HlP3XSvM7vJnFvYYJHWW4Vg
msnsX7zzxAhPpWXXvh9rSLq4vz9YtMTshkWXwGW7G8LIf2GXNpCBLOrhUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPZftO5QBFNvaTgGjpilcrwCn2lxMB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvOWwtMDdsQUVVMjlwT0FhT21LVnl2QUtmYVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWZMMA0E
AgACMAcDBQAqAMqAMA0GCSqGSIb3DQEBCwUAA4IBAQDEtpAPXuVTEHH6RlG1pfNV
WsHwhHMXRyBijA/JFrXyb8e0fS+yqtX7xGASGPd0BV95qZS81WgQdEaPWlClQdCl
PaN9xwI1zCj7LdsPxQ8mDUKyb9k9L4JlM0E3xTgxLCLxrfcH9NYoglr53wQwgXtb
OQuWHU6vhhVMcBYEed8z30KOej2NabEgVhtVFolqtpggC+AgJh4g5URs7hnnBGj+
82ZvtqE6vdcMLaD5fOqhuzlHw6x3eihgAzi1zgwEZ8gRo38aWPUiizMHbG5KjNkJ
jzGY6jvMM+FaN6IbEDlVxIrVVA34pYwJ75kNplbX2MpI3a/m/3W1E2Mktc5X7Kfs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:56 2024 by rpki-client on console-ams.rpki-client.org