Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1mYQTZveHm_Y-x4iUHiSn1WWjlU.roa
File: 1mYQTZveHm_Y-x4iUHiSn1WWjlU.roa (raw, json)
Hash identifier: Jn4NY0qaI5ocpPWAjygvA2XN1MyJb9xHlQK/CwXgcPQ=
Subject key identifier: D6:66:10:4D:9B:DE:1E:6F:D8:FB:1E:22:50:78:92:9F:55:96:8E:55
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01858249A7410366BA9B72BF826595F60700
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1mYQTZveHm_Y-x4iUHiSn1WWjlU.roa
Signing time: Thu 05 Jan 2023 14:15:43 +0000
ROA not before: Thu 05 Jan 2023 14:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 185.199.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 16:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:49:a7:41:03:66:ba:9b:72:bf:82:65:95:f6:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 5 14:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d666104d9bde1e6fd8fb1e225078929f55968e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:fd:fe:7a:7e:7a:f1:41:ab:94:a2:4c:8b:
51:79:9d:96:20:44:05:07:0d:b5:fb:78:ca:2e:72:
a6:36:e7:10:91:77:8f:35:bf:75:14:d6:88:d7:77:
98:fe:b1:db:81:bf:3f:4d:2c:3f:0c:66:ca:bd:a3:
35:ce:02:2a:f8:44:d1:d1:80:ff:e6:a7:8b:a2:20:
48:82:75:ab:61:85:ac:ed:ed:d2:f7:0e:a3:39:36:
e8:07:1d:3b:a1:24:5f:fb:c9:1e:4c:35:a9:9d:53:
5f:f5:de:b4:e9:a3:5b:51:9a:98:d4:5a:68:8a:ee:
b0:b8:b2:c0:6e:54:0e:99:1b:50:21:bb:cc:71:9f:
f3:83:7a:bb:91:08:9b:1f:c7:52:ab:ed:21:dd:c4:
62:c6:c1:4f:ea:db:9c:af:c6:6d:fb:dd:e5:a5:7e:
ce:e3:8e:d2:74:8d:b3:8b:b6:31:76:f0:c2:85:19:
d9:5d:5e:2f:42:97:5d:b6:0c:b5:38:54:0f:9f:21:
21:4d:79:1d:96:64:cf:e0:1f:0d:b2:df:e0:23:dd:
ea:80:a1:0c:5e:71:42:ba:57:3a:03:0d:2f:d0:82:
57:bc:29:09:81:80:95:20:db:0b:96:c8:fa:32:7a:
eb:8f:72:3f:f5:51:7e:f2:44:a0:bc:ca:5c:5f:cb:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:10:4D:9B:DE:1E:6F:D8:FB:1E:22:50:78:92:9F:55:96:8E:55
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1mYQTZveHm_Y-x4iUHiSn1WWjlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d2:4c:26:03:3f:48:8f:ca:b3:b9:84:a3:cc:b5:2c:00:13:
47:75:c1:af:68:e1:09:c6:5f:7c:d3:08:b8:d0:dd:60:d4:62:
92:76:ab:1f:36:fd:9f:3d:cb:91:40:35:67:e6:e8:8e:f5:5f:
44:1d:f3:1e:6b:a8:52:80:3b:cc:cc:8d:5d:34:43:97:3a:27:
7c:80:53:b8:29:e6:60:bb:e7:e5:8f:3f:cd:b4:25:e7:df:ef:
20:17:3f:43:e7:8a:73:b3:77:8e:f3:94:e7:3d:49:4f:42:c5:
bc:36:b6:33:6f:a8:c0:e2:4e:84:ce:56:0a:0f:0f:95:49:b3:
a6:9f:b9:ec:41:db:7a:2f:ff:20:c6:92:1f:d3:12:f3:2a:d3:
57:5a:b1:60:58:94:42:84:fd:a3:00:8c:15:a1:10:70:2c:39:
59:03:d8:91:a5:4f:09:17:9c:67:94:6e:c0:e0:e3:54:38:c6:
3b:ad:aa:de:2c:72:47:0b:c0:d3:97:64:71:1b:68:e4:16:f4:
f0:de:e1:7f:c0:72:4e:1b:59:25:7d:49:8e:1e:3b:ce:c8:8a:
92:d7:b1:6c:79:54:1d:00:b8:6d:d9:47:48:82:d0:fe:65:9f:
3c:e8:21:a5:74:a0:bd:4d:57:17:2e:e0:13:af:cd:cb:97:7e:
e6:d4:7d:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWCSadBA2a6m3K/gmWV9gcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwMTA1MTQxNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjY2MTA0ZDliZGUxZTZmZDhmYjFlMjI1MDc4OTI5ZjU1OTY4ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbz9/np+evFBq5SiTItReZ2WIEQF
Bw21+3jKLnKmNucQkXePNb91FNaI13eY/rHbgb8/TSw/DGbKvaM1zgIq+ETR0YD/
5qeLoiBIgnWrYYWs7e3S9w6jOTboBx07oSRf+8keTDWpnVNf9d606aNbUZqY1Fpo
iu6wuLLAblQOmRtQIbvMcZ/zg3q7kQibH8dSq+0h3cRixsFP6tucr8Zt+93lpX7O
447SdI2zi7YxdvDChRnZXV4vQpddtgy1OFQPnyEhTXkdlmTP4B8Nst/gI93qgKEM
XnFCulc6Aw0v0IJXvCkJgYCVINsLlsj6Mnrrj3I/9VF+8kSgvMpcX8t1bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZmEE2b3h5v2PseIlB4kp9Vlo5VMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvMW1ZUVRadmVIbV9ZLXg0aVVIaVNuMVdXamxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuceUMA0G
CSqGSIb3DQEBCwUAA4IBAQA/0kwmAz9Ij8qzuYSjzLUsABNHdcGvaOEJxl980wi4
0N1g1GKSdqsfNv2fPcuRQDVn5uiO9V9EHfMea6hSgDvMzI1dNEOXOid8gFO4KeZg
u+fljz/NtCXn3+8gFz9D54pzs3eO85TnPUlPQsW8NrYzb6jA4k6EzlYKDw+VSbOm
n7nsQdt6L/8gxpIf0xLzKtNXWrFgWJRChP2jAIwVoRBwLDlZA9iRpU8JF5xnlG7A
4ONUOMY7rareLHJHC8DTl2RxG2jkFvTw3uF/wHJOG1klfUmOHjvOyIqS17FseVQd
ALht2UdIgtD+ZZ886CGldKC9TVcXLuATr83Ll37m1H2a
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org