Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/9g0RuAhI1fNQvW_tX2cA9KsVCx0.roa
File: 9g0RuAhI1fNQvW_tX2cA9KsVCx0.roa (raw, json)
Hash identifier: YnvgXxyIePWapMxnLlGgNEVH3IFJIFLihla3+27uYv8=
Subject key identifier: F6:0D:11:B8:08:48:D5:F3:50:BD:6F:ED:5F:67:00:F4:AB:15:0B:1D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018B5345F80A2E51D6ACB97803C9F6833F4D
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/9g0RuAhI1fNQvW_tX2cA9KsVCx0.roa
Signing time: Sat 21 Oct 2023 17:26:16 +0000
ROA not before: Sat 21 Oct 2023 17:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 93.185.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:45:f8:0a:2e:51:d6:ac:b9:78:03:c9:f6:83:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 21 17:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f60d11b80848d5f350bd6fed5f6700f4ab150b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:a7:a6:92:07:f0:4c:d1:46:b7:48:64:f3:
ce:16:b9:4f:60:15:50:7e:96:0e:2a:3b:e8:10:7e:
e8:62:46:ce:f4:21:f6:6b:8d:8a:4e:5d:d1:d4:3c:
87:1f:2a:66:33:b3:91:26:02:3c:c9:e8:34:fc:21:
6f:f4:9c:59:3e:19:c1:16:11:58:ee:e7:05:88:6f:
13:2d:d7:d4:35:f8:2d:32:2d:87:61:d1:6d:53:f5:
89:0f:06:12:77:5c:2f:06:76:27:f1:e7:c2:b3:bc:
e4:34:27:55:0d:e5:4a:28:96:8e:46:df:31:e0:7f:
c5:82:4d:85:2d:59:dc:7f:31:d8:b6:6b:9a:43:15:
9a:3d:d9:f3:8e:a7:74:39:94:c1:e2:74:23:64:d7:
f1:4d:28:d2:57:9e:68:a7:f5:7e:e2:6d:cf:36:31:
65:69:a0:13:b0:e5:27:60:e7:58:b2:f7:b1:f6:3e:
50:e7:f9:04:9b:6b:0e:93:9b:37:e9:74:06:d4:10:
ba:7f:04:68:f1:84:37:86:4c:0d:1e:c2:c1:f4:c9:
35:5b:cb:75:e9:71:85:20:9c:c8:71:12:89:6a:80:
61:05:69:8c:d0:fa:30:92:2d:9b:67:eb:49:03:9a:
39:14:10:ed:00:42:0f:af:3c:d2:d5:0c:ff:83:2d:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:11:B8:08:48:D5:F3:50:BD:6F:ED:5F:67:00:F4:AB:15:0B:1D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/9g0RuAhI1fNQvW_tX2cA9KsVCx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.165.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:3f:c8:7f:06:34:af:09:3a:10:20:fb:af:47:4b:eb:72:89:
13:58:33:8d:86:6b:9f:11:2f:90:69:f2:ba:f4:84:03:4b:99:
f4:1c:45:b7:19:d6:f6:91:5a:6b:1a:ca:de:76:5d:10:5c:e4:
5f:6a:d7:92:f1:f3:0d:01:bd:e5:29:ac:e6:b5:69:e4:7e:f7:
55:3e:89:4c:8b:e1:e6:d9:95:54:26:58:1c:c7:28:46:6a:e4:
f3:e8:9d:8d:ae:0a:bd:38:0c:2d:55:fc:f5:ac:6e:b4:a1:d8:
d3:78:32:8b:2d:5e:eb:4f:00:86:60:5c:bd:c7:7f:c8:47:c9:
5c:26:08:f1:6b:f3:e1:58:74:74:96:a1:2c:2d:bf:f8:3c:73:
b3:c5:95:56:13:cf:7a:a5:e0:ad:ea:31:b1:52:70:d5:6d:b2:
91:5a:d0:68:4e:7f:3f:5a:45:0b:43:3c:cc:c3:2b:19:54:1d:
58:b9:47:5d:58:44:1f:3a:91:1c:22:15:4a:a8:f7:3f:46:82:
06:a0:88:a2:10:6a:61:4f:ea:28:2a:77:e1:1c:c8:26:3e:9d:
e1:40:cd:09:7e:f5:83:54:be:87:4d:fe:34:2a:ef:4b:7e:e7:
3f:c6:b4:5d:dc:d7:be:22:dc:38:5a:cf:11:e7:34:5b:fa:3b:
d0:28:aa:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtTRfgKLlHWrLl4A8n2gz9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjMxMDIxMTcyNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjBkMTFiODA4NDhkNWYzNTBiZDZmZWQ1ZjY3MDBmNGFiMTUwYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ6nppIH8EzRRrdIZPPOFrlPYBVQ
fpYOKjvoEH7oYkbO9CH2a42KTl3R1DyHHypmM7ORJgI8yeg0/CFv9JxZPhnBFhFY
7ucFiG8TLdfUNfgtMi2HYdFtU/WJDwYSd1wvBnYn8efCs7zkNCdVDeVKKJaORt8x
4H/Fgk2FLVncfzHYtmuaQxWaPdnzjqd0OZTB4nQjZNfxTSjSV55op/V+4m3PNjFl
aaATsOUnYOdYsvex9j5Q5/kEm2sOk5s36XQG1BC6fwRo8YQ3hkwNHsLB9Mk1W8t1
6XGFIJzIcRKJaoBhBWmM0Powki2bZ+tJA5o5FBDtAEIPrzzS1Qz/gy0k9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYNEbgISNXzUL1v7V9nAPSrFQsdMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvOWcwUnVBaEkxZk5RdldfdFgyY0E5S3NWQ3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbmlMA0G
CSqGSIb3DQEBCwUAA4IBAQDRP8h/BjSvCToQIPuvR0vrcokTWDONhmufES+QafK6
9IQDS5n0HEW3Gdb2kVprGsredl0QXORfateS8fMNAb3lKazmtWnkfvdVPolMi+Hm
2ZVUJlgcxyhGauTz6J2Nrgq9OAwtVfz1rG60odjTeDKLLV7rTwCGYFy9x3/IR8lc
Jgjxa/PhWHR0lqEsLb/4PHOzxZVWE896peCt6jGxUnDVbbKRWtBoTn8/WkULQzzM
wysZVB1YuUddWEQfOpEcIhVKqPc/RoIGoIiiEGphT+ooKnfhHMgmPp3hQM0JfvWD
VL6HTf40Ku9Lfuc/xrRd3Ne+Itw4Ws8R5zRb+jvQKKpk
Generated at Fri Nov 3 20:27:03 2023 by rpki-client on console-fra.rpki-client.org