Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7TXxSHUsZnRw_NZ3liB30WhIPOs.roa
File: 7TXxSHUsZnRw_NZ3liB30WhIPOs.roa (raw, json)
Hash identifier: 0ko2lnLpQo+E2r4WWMKXQcrXof1YQfjvB9wF1mAIbhI=
Subject key identifier: ED:35:F1:48:75:2C:66:74:70:FC:D6:77:96:20:77:D1:68:48:3C:EB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE806ED2E4047CBBD3ACAF5C590DA1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7TXxSHUsZnRw_NZ3liB30WhIPOs.roa
Signing time: Mon 02 Jan 2023 09:44:45 +0000
ROA not before: Mon 02 Jan 2023 09:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213030
IP address blocks: 185.235.165.0/24 maxlen: 24
185.245.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jul 2023 03:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:80:6e:d2:e4:04:7c:bb:d3:ac:af:5c:59:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed35f148752c667470fcd677962077d168483ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:f7:bb:96:fc:3c:3f:e3:d5:71:29:46:2a:
4c:a2:76:8c:34:32:2b:b1:a9:1d:f9:ba:7e:d8:c3:
8f:45:1a:bd:12:94:14:2b:da:75:36:53:91:e8:7e:
dc:e5:1f:c7:38:5f:ac:33:d3:eb:42:72:ec:2e:e2:
6d:eb:df:e4:21:11:6b:70:46:f6:66:e4:ef:4b:ef:
5e:2f:90:14:0c:8a:3c:d6:4c:bb:89:c9:21:41:07:
0b:09:ba:ff:9d:9c:a8:8c:c5:73:f8:da:23:01:a9:
35:a0:eb:e9:82:6f:62:94:0e:6b:3b:d4:f0:fc:e8:
b6:09:97:a8:5f:28:78:ef:55:e6:b1:63:23:46:96:
a6:97:02:75:73:ea:28:16:b5:50:21:57:d4:a0:bb:
b3:0e:a7:ca:2b:1c:50:3f:cb:11:b9:8a:74:a1:b9:
e5:98:09:15:19:40:4b:03:c3:ff:76:39:b8:61:68:
3f:7e:10:29:c8:a1:85:41:88:40:7d:cd:a4:ae:0e:
c4:8e:b8:d9:63:ed:07:4a:15:13:2b:8a:22:bb:26:
6d:40:e5:f7:22:dd:dc:01:28:0b:ff:16:45:79:b3:
91:66:c9:14:6a:01:0e:47:c9:61:5b:03:7d:20:68:
60:db:99:51:a6:42:fc:f0:77:67:a9:ee:b7:9f:0e:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:F1:48:75:2C:66:74:70:FC:D6:77:96:20:77:D1:68:48:3C:EB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7TXxSHUsZnRw_NZ3liB30WhIPOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.165.0/24
185.245.0.0/22
Signature Algorithm: sha256WithRSAEncryption
81:90:39:05:68:46:48:dc:eb:d8:33:60:2c:12:d4:92:92:38:
62:82:9e:05:d7:49:bf:a6:80:95:2c:86:42:a2:28:5e:16:e9:
2d:71:5d:c7:03:42:a1:60:c9:a5:76:f4:75:47:4c:de:64:29:
20:6a:f7:3d:01:bb:09:65:6c:9d:8c:fb:60:2c:ab:82:45:78:
2d:73:96:1e:ab:8d:a8:93:e8:2c:29:49:ec:3e:ad:31:bd:3f:
d8:70:65:a4:90:ca:2e:2e:46:f3:d7:b5:61:97:cb:85:ad:9b:
e3:c1:94:a5:ef:8a:fe:3f:17:06:db:91:12:12:38:e0:d4:87:
d8:f9:bb:05:81:df:d9:47:78:2d:97:09:2e:ed:5c:d4:4d:99:
27:33:4c:f7:b6:cf:2d:85:1f:f9:c2:ae:a3:5e:35:41:ce:30:
f2:57:99:a9:85:15:d6:42:93:91:f7:63:f1:73:f8:33:d6:00:
5e:ee:32:dc:e9:fa:fa:4b:af:ff:54:5c:51:1c:72:0c:04:51:
1c:b4:e8:20:76:b4:1d:e8:ba:b7:c6:78:50:ba:b2:52:bd:a9:
09:10:14:c8:d4:2d:3f:7b:bc:60:19:58:c0:d3:b9:0a:8a:45:
e5:ee:f2:0a:67:c7:c1:f8:18:37:fc:9b:76:66:5f:f9:19:c2:
a2:97:b6:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx3oBu0uQEfLvTrK9cWQ2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwMTAyMDk0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDM1ZjE0ODc1MmM2Njc0NzBmY2Q2Nzc5NjIwNzdkMTY4NDgzY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO/3u5b8PD/j1XEpRipMonaMNDIr
sakd+bp+2MOPRRq9EpQUK9p1NlOR6H7c5R/HOF+sM9PrQnLsLuJt69/kIRFrcEb2
ZuTvS+9eL5AUDIo81ky7ickhQQcLCbr/nZyojMVz+NojAak1oOvpgm9ilA5rO9Tw
/Oi2CZeoXyh471XmsWMjRpamlwJ1c+ooFrVQIVfUoLuzDqfKKxxQP8sRuYp0obnl
mAkVGUBLA8P/djm4YWg/fhApyKGFQYhAfc2krg7EjrjZY+0HShUTK4oiuyZtQOX3
It3cASgL/xZFebORZskUagEOR8lhWwN9IGhg25lRpkL88Hdnqe63nw5gOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO018Uh1LGZ0cPzWd5Ygd9FoSDzrMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvN1RYeFNIVXNablJ3X05aM2xpQjMwV2hJUE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueulAwQC
ufUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBkDkFaEZI3OvYM2AsEtSSkjhigp4F10m/
poCVLIZCoiheFuktcV3HA0KhYMmldvR1R0zeZCkgavc9AbsJZWydjPtgLKuCRXgt
c5Yeq42ok+gsKUnsPq0xvT/YcGWkkMouLkbz17Vhl8uFrZvjwZSl74r+PxcG25ES
Ejjg1IfY+bsFgd/ZR3gtlwku7VzUTZknM0z3ts8thR/5wq6jXjVBzjDyV5mphRXW
QpOR92Pxc/gz1gBe7jLc6fr6S6//VFxRHHIMBFEctOggdrQd6Lq3xnhQurJSvakJ
EBTI1C0/e7xgGVjA07kKikXl7vIKZ8fB+Bg3/Jt2Zl/5GcKil7ZF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org