Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/T2-_11aQpHJtKqchItT5vZJd0lg.roa
File: T2-_11aQpHJtKqchItT5vZJd0lg.roa (raw, json)
Hash identifier: 7352E6wq2I3gER/n0KOiIPSZOTmu7odLfOc3c1DWlbA=
Subject key identifier: 4F:6F:BF:D7:56:90:A4:72:6D:2A:A7:21:22:D4:F9:BD:92:5D:D2:58
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0188B25908E181C56E014FD580881A3E316F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/T2-_11aQpHJtKqchItT5vZJd0lg.roa
Signing time: Tue 13 Jun 2023 01:22:39 +0000
ROA not before: Tue 13 Jun 2023 01:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212708
IP address blocks: 185.235.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 09:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:59:08:e1:81:c5:6e:01:4f:d5:80:88:1a:3e:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 13 01:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f6fbfd75690a4726d2aa72122d4f9bd925dd258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:28:b8:bf:b5:f3:a1:8b:54:b3:58:77:83:
a8:3a:3a:a1:b5:18:4d:e6:24:7b:74:da:fa:b5:94:
89:8f:62:29:7f:b9:45:46:0b:07:c4:05:5b:2a:88:
de:2a:a2:db:58:4d:99:99:a3:5b:e6:e1:0e:9d:81:
87:fe:c2:94:8e:3c:70:44:47:07:71:b5:21:a8:85:
62:d9:cb:f0:b9:5e:46:57:cd:d1:a5:10:99:d3:fd:
6e:48:69:78:d5:1e:04:6d:97:4d:8d:15:bd:0f:d8:
b8:a9:76:ae:c5:62:7f:89:76:80:c4:7e:57:2a:d0:
97:a7:0f:5b:27:f2:65:7f:c7:37:94:95:54:7a:3d:
cf:7d:71:8b:11:82:fb:61:85:74:2d:be:9c:bc:2c:
5b:5b:f8:da:0c:c7:43:6b:ec:7a:19:10:9a:6d:e1:
99:fb:52:8f:df:95:10:cb:6a:ce:de:a8:fe:d8:ff:
b2:19:ac:31:27:b3:e6:8f:c4:ac:aa:be:cf:38:e5:
03:c7:ed:81:f2:cb:32:e8:e4:a5:8b:b5:86:de:1d:
c4:17:ae:70:04:cd:a0:ed:d3:97:4f:ac:e1:4c:96:
6f:1e:8c:1d:32:14:76:a8:b0:48:1e:a6:c0:95:b8:
6d:93:82:14:e2:0f:89:d3:cd:c2:4e:f6:bd:e7:9e:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:BF:D7:56:90:A4:72:6D:2A:A7:21:22:D4:F9:BD:92:5D:D2:58
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/T2-_11aQpHJtKqchItT5vZJd0lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2d:3a:62:a2:98:82:fc:da:18:7f:ab:71:3a:f2:fa:9f:39:
ba:bd:d1:bb:37:b9:7b:18:87:56:56:0e:f1:95:cd:70:14:2d:
c4:11:0c:bb:67:af:45:a0:8e:ad:eb:33:bb:cf:40:7a:81:09:
01:78:3a:e7:89:c6:ee:ed:26:27:1c:ae:29:c7:8a:0a:98:f0:
34:f1:33:e6:81:8f:f9:1c:14:4b:c0:2c:f5:00:3b:f2:2d:17:
29:56:da:52:d9:a3:c2:e0:a5:07:31:8a:30:b8:25:e6:b7:05:
c4:3e:97:ed:90:d0:1a:37:bb:78:dc:1d:6a:f5:32:67:04:80:
aa:79:95:ba:7a:43:e0:d0:f3:91:cd:10:1a:94:85:7e:f8:9c:
78:5a:e4:1f:c0:5b:b3:73:f1:27:f5:79:ed:bd:ac:3c:c2:2f:
e4:c0:cd:58:0e:fc:ea:b1:12:7d:30:a9:8d:1e:ba:fe:f1:cf:
72:36:c2:30:b7:48:9a:16:90:bc:8f:d9:de:cb:40:46:39:ec:
a6:7e:3a:b9:16:28:df:f2:14:ec:cb:b4:b8:7a:ba:ea:a7:d8:
c2:ef:b8:7a:4e:4f:77:cb:23:3a:e5:98:93:17:62:26:17:f9:
ea:34:7a:5f:ba:d4:36:cc:5c:31:2c:75:b2:74:36:7a:43:aa:
ea:67:e4:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiyWQjhgcVuAU/VgIgaPjFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwNjEzMDEyMjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjZmYmZkNzU2OTBhNDcyNmQyYWE3MjEyMmQ0ZjliZDkyNWRkMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyYouL+186GLVLNYd4OoOjqhtRhN
5iR7dNr6tZSJj2Ipf7lFRgsHxAVbKojeKqLbWE2ZmaNb5uEOnYGH/sKUjjxwREcH
cbUhqIVi2cvwuV5GV83RpRCZ0/1uSGl41R4EbZdNjRW9D9i4qXauxWJ/iXaAxH5X
KtCXpw9bJ/Jlf8c3lJVUej3PfXGLEYL7YYV0Lb6cvCxbW/jaDMdDa+x6GRCabeGZ
+1KP35UQy2rO3qj+2P+yGawxJ7Pmj8Ssqr7POOUDx+2B8ssy6OSli7WG3h3EF65w
BM2g7dOXT6zhTJZvHowdMhR2qLBIHqbAlbhtk4IU4g+J083CTva95568zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9vv9dWkKRybSqnISLU+b2SXdJYMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvVDItXzExYVFwSEp0S3FjaEl0VDV2WkpkMGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueukMA0G
CSqGSIb3DQEBCwUAA4IBAQBdLTpiopiC/NoYf6txOvL6nzm6vdG7N7l7GIdWVg7x
lc1wFC3EEQy7Z69FoI6t6zO7z0B6gQkBeDrnicbu7SYnHK4px4oKmPA08TPmgY/5
HBRLwCz1ADvyLRcpVtpS2aPC4KUHMYowuCXmtwXEPpftkNAaN7t43B1q9TJnBICq
eZW6ekPg0PORzRAalIV++Jx4WuQfwFuzc/En9Xntvaw8wi/kwM1YDvzqsRJ9MKmN
Hrr+8c9yNsIwt0iaFpC8j9ney0BGOeymfjq5Fijf8hTsy7S4errqp9jC77h6Tk93
yyM65ZiTF2ImF/nqNHpfutQ2zFwxLHWydDZ6Q6rqZ+Sb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org