Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/OfBwl9gjl8pQnKoqsTaTe1p4wTM.roa
File: OfBwl9gjl8pQnKoqsTaTe1p4wTM.roa (raw, json)
Hash identifier: fmvztD0XdYLlERdtnJc8PFoyvH3RSiz+ciFfJAVRYT8=
Subject key identifier: 39:F0:70:97:D8:23:97:CA:50:9C:AA:2A:B1:36:93:7B:5A:78:C1:33
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0185729F033F5FD380F0D0EECE6284D650B0
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/OfBwl9gjl8pQnKoqsTaTe1p4wTM.roa
Signing time: Mon 02 Jan 2023 13:15:01 +0000
ROA not before: Mon 02 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200571
IP address blocks: 185.97.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 07:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9f:03:3f:5f:d3:80:f0:d0:ee:ce:62:84:d6:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f07097d82397ca509caa2ab136937b5a78c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:25:e6:85:c0:64:23:2b:79:d7:80:ee:52:
05:cf:16:12:41:8c:79:06:f7:cc:fd:82:76:1b:0f:
a2:d7:7f:11:80:6f:06:e0:dc:a7:99:c0:dc:07:8f:
c6:7b:39:54:03:ba:fa:c0:83:cd:15:98:34:c4:f5:
42:fe:4c:24:87:ff:33:c1:6d:41:6c:72:3e:fd:ec:
b6:37:7d:da:5c:8c:f3:94:7a:0d:98:79:eb:f1:bd:
ad:9f:ac:4b:d2:7a:99:d8:78:aa:1a:db:52:1b:21:
31:27:da:42:88:d3:ca:ac:0e:c2:7b:c6:cb:3f:7a:
c8:29:81:8f:a9:03:1c:e5:fe:8d:3a:d8:ca:a8:8f:
1c:28:27:71:cc:bd:f3:4a:48:e9:19:09:f9:df:25:
7d:87:cc:29:14:ee:6d:fc:8f:4e:4a:07:9e:d7:89:
89:b2:aa:d7:ac:6c:4d:54:d7:15:02:3d:3b:82:e4:
ad:1b:7b:14:13:9e:09:cb:1f:f3:35:19:f1:2f:c3:
77:27:31:b9:1b:2b:b5:5f:5c:aa:05:81:7b:d3:d8:
4b:b8:c5:64:93:c8:61:9d:19:5d:33:8f:cf:02:e0:
93:dd:a7:93:c5:0c:c5:bb:fc:15:97:9e:03:63:0d:
11:bd:ae:9e:bd:a8:e4:6d:0d:57:fb:06:f3:47:21:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:70:97:D8:23:97:CA:50:9C:AA:2A:B1:36:93:7B:5A:78:C1:33
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/OfBwl9gjl8pQnKoqsTaTe1p4wTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b2:af:35:22:d2:95:dc:69:f2:ec:8b:ca:ae:57:a5:62:ba:
c7:8e:86:40:f6:c7:34:72:79:46:74:56:62:73:16:4d:f2:7a:
52:c1:2f:c0:5e:1e:31:3a:e5:b5:b5:c2:b4:9f:56:ee:3c:92:
2e:76:07:00:73:54:b4:e2:d6:6a:62:85:8f:fd:43:ae:76:7a:
44:69:4b:d0:16:fa:21:75:4e:90:7f:43:a0:47:9c:e6:c2:46:
f5:e2:62:54:3c:f6:6d:d6:87:1d:ec:7a:cf:1c:00:a3:90:35:
19:02:5d:9d:de:1f:05:04:c0:ee:d1:51:40:bd:5b:a7:47:0f:
17:41:a4:33:0b:a9:de:6a:5e:ac:4d:77:c4:44:71:1e:4f:ba:
af:26:d6:6b:56:1a:56:80:ea:d0:a9:0e:b6:d4:c0:7a:02:cc:
a2:b6:fe:fc:a5:d6:ed:3f:04:85:79:5b:16:00:62:11:24:21:
25:12:f6:bb:e5:5f:1e:f2:21:4a:d7:85:69:38:55:10:37:64:
43:88:56:08:f7:df:44:56:73:01:06:44:30:1f:f2:99:94:b3:
ad:47:34:6a:73:7a:6a:77:1e:da:58:0f:fb:b8:01:ee:a6:e3:
a9:3b:67:34:c1:31:17:54:09:9c:44:dd:64:a2:30:e8:58:0c:
28:00:08:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVynwM/X9OA8NDuzmKE1lCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5
ZmVmOWEwHhcNMjMwMTAyMTMxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWYwNzA5N2Q4MjM5N2NhNTA5Y2FhMmFiMTM2OTM3YjVhNzhjMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49sl5oXAZCMredeA7lIFzxYSQYx5
BvfM/YJ2Gw+i138RgG8G4NynmcDcB4/GezlUA7r6wIPNFZg0xPVC/kwkh/8zwW1B
bHI+/ey2N33aXIzzlHoNmHnr8b2tn6xL0nqZ2HiqGttSGyExJ9pCiNPKrA7Ce8bL
P3rIKYGPqQMc5f6NOtjKqI8cKCdxzL3zSkjpGQn53yV9h8wpFO5t/I9OSgee14mJ
sqrXrGxNVNcVAj07guStG3sUE54Jyx/zNRnxL8N3JzG5Gyu1X1yqBYF709hLuMVk
k8hhnRldM4/PAuCT3aeTxQzFu/wVl54DYw0Rva6evajkbQ1X+wbzRyElswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDnwcJfYI5fKUJyqKrE2k3taeMEzMB8GA1UdIwQY
MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et
ODE3ZDg0ZTUzZDUzLzEvT2ZCd2w5Z2psOHBRbktvcXNUYVRlMXA0d1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz
LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWELMA0G
CSqGSIb3DQEBCwUAA4IBAQArsq81ItKV3Gny7IvKrlelYrrHjoZA9sc0cnlGdFZi
cxZN8npSwS/AXh4xOuW1tcK0n1buPJIudgcAc1S04tZqYoWP/UOudnpEaUvQFvoh
dU6Qf0OgR5zmwkb14mJUPPZt1ocd7HrPHACjkDUZAl2d3h8FBMDu0VFAvVunRw8X
QaQzC6neal6sTXfERHEeT7qvJtZrVhpWgOrQqQ621MB6Asyitv78pdbtPwSFeVsW
AGIRJCElEva75V8e8iFK14VpOFUQN2RDiFYI999EVnMBBkQwH/KZlLOtRzRqc3pq
dx7aWA/7uAHupuOpO2c0wTEXVAmcRN1kojDoWAwoAAhK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org