Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1ENDUzxLs_E2RpNXkAZsdVwmYOY.roa
File: 1ENDUzxLs_E2RpNXkAZsdVwmYOY.roa (raw, json)
Hash identifier: 75mLiK4ziZ0wDQ6B5hyVo1B0WiNorSSDAuM4vkS0eLY=
Subject key identifier: D4:43:43:53:3C:4B:B3:F1:36:46:93:57:90:06:6C:75:5C:26:60:E6
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188E2C49ECADC510F584BC281CCA220E96C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1ENDUzxLs_E2RpNXkAZsdVwmYOY.roa
Signing time: Thu 22 Jun 2023 11:01:56 +0000
ROA not before: Thu 22 Jun 2023 11:01:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 185.225.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 11:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:c4:9e:ca:dc:51:0f:58:4b:c2:81:cc:a2:20:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 22 11:01:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44343533c4bb3f13646935790066c755c2660e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:0e:d5:44:a7:69:d8:44:e9:aa:f5:6e:5b:
cf:30:be:1d:9f:f3:0c:2a:84:09:16:05:18:7b:a2:
da:31:c7:18:15:da:2a:43:26:95:17:0d:9e:22:6d:
23:53:09:07:f4:f6:f3:74:64:d4:b6:b8:01:23:c9:
84:c8:01:b1:1b:b4:7d:6d:54:a3:d3:65:4c:d4:4b:
ca:53:11:e1:1e:43:0e:62:c7:a5:82:ec:5f:1f:e7:
fd:44:5d:b7:26:c1:28:28:17:f6:cb:2f:68:dd:b7:
27:87:0e:ad:9b:c1:c8:95:7b:65:3d:18:fb:e0:65:
cf:ab:7d:8b:d1:ea:bd:14:64:1e:59:9a:ad:3f:0b:
9a:ea:21:8d:b0:13:97:b1:d3:c0:87:a8:61:94:57:
00:d8:c5:f2:47:e7:19:af:fe:d5:b6:c4:27:55:f9:
60:b1:5d:56:be:08:3d:ac:19:7f:de:a7:ce:61:be:
80:07:eb:f0:69:79:11:31:fb:dc:bd:a7:1f:b0:9e:
2f:38:05:3e:ef:9f:cf:9f:c9:8e:a8:47:91:b9:a2:
24:4b:59:42:da:93:f7:50:8b:a7:a8:77:c8:f4:dd:
02:f0:bb:e1:f2:67:78:2c:8a:d9:d5:a6:2d:19:f7:
42:00:95:7f:dc:c8:3a:19:b6:34:26:29:82:63:3f:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:43:53:3C:4B:B3:F1:36:46:93:57:90:06:6C:75:5C:26:60:E6
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1ENDUzxLs_E2RpNXkAZsdVwmYOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7d:75:67:7e:ef:8e:0f:4e:77:0e:64:7d:c9:5f:73:ef:bc:
8d:84:f3:55:d0:7b:9e:5b:93:cd:5b:66:be:9b:14:c6:54:ff:
84:38:5e:58:44:ac:9d:b2:1c:5e:9b:a5:07:c6:59:c1:25:14:
74:ed:ee:46:bc:b5:d4:03:ae:c6:04:48:10:86:02:1e:d5:36:
7a:4d:6b:5b:ef:52:ba:c6:65:d5:d6:46:2e:e3:42:72:43:ea:
83:0f:52:c2:f4:49:14:0d:24:35:17:2a:8c:39:65:47:fb:b9:
3e:0a:1f:1b:58:0a:f7:20:e8:a6:3b:c3:77:0d:04:02:6d:4c:
8b:5f:d7:19:28:86:09:28:dd:3f:dd:cd:0e:ba:88:0f:97:c7:
b2:be:6a:80:bd:54:97:5c:99:1d:13:7b:dc:c0:76:4e:e7:bf:
76:a6:6d:66:0b:8a:71:f5:ac:4d:6e:8b:57:67:59:a6:9c:55:
de:9d:e5:e5:25:ab:21:38:e8:bc:dd:3d:a5:70:24:24:64:a2:
1d:5e:41:e1:0f:a5:a3:87:85:d2:fb:d0:72:dd:67:3b:76:e6:
1f:1b:0b:09:06:42:49:db:a6:cd:7a:39:4f:62:64:32:a3:04:
11:44:dd:16:f6:79:0f:91:89:b4:d8:01:bd:d4:11:8d:ea:d8:
88:1d:8b:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjixJ7K3FEPWEvCgcyiIOlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNjIyMTEwMTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDQzNDM1MzNjNGJiM2YxMzY0NjkzNTc5MDA2NmM3NTVjMjY2MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo4O1USnadhE6ar1blvPML4dn/MM
KoQJFgUYe6LaMccYFdoqQyaVFw2eIm0jUwkH9PbzdGTUtrgBI8mEyAGxG7R9bVSj
02VM1EvKUxHhHkMOYselguxfH+f9RF23JsEoKBf2yy9o3bcnhw6tm8HIlXtlPRj7
4GXPq32L0eq9FGQeWZqtPwua6iGNsBOXsdPAh6hhlFcA2MXyR+cZr/7VtsQnVflg
sV1Wvgg9rBl/3qfOYb6AB+vwaXkRMfvcvacfsJ4vOAU+75/Pn8mOqEeRuaIkS1lC
2pP3UIunqHfI9N0C8Lvh8md4LIrZ1aYtGfdCAJV/3Mg6GbY0JimCYz+ckQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNRDQ1M8S7PxNkaTV5AGbHVcJmDmMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvMUVORFV6eExzX0UyUnBOWGtBWnNkVndtWU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueGpMA0G
CSqGSIb3DQEBCwUAA4IBAQBafXVnfu+OD053DmR9yV9z77yNhPNV0HueW5PNW2a+
mxTGVP+EOF5YRKydshxem6UHxlnBJRR07e5GvLXUA67GBEgQhgIe1TZ6TWtb71K6
xmXV1kYu40JyQ+qDD1LC9EkUDSQ1FyqMOWVH+7k+Ch8bWAr3IOimO8N3DQQCbUyL
X9cZKIYJKN0/3c0OuogPl8eyvmqAvVSXXJkdE3vcwHZO5792pm1mC4px9axNbotX
Z1mmnFXeneXlJashOOi83T2lcCQkZKIdXkHhD6Wjh4XS+9By3Wc7duYfGwsJBkJJ
26bNejlPYmQyowQRRN0W9nkPkYm02AG91BGN6tiIHYtQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org