Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/NzozQY7PyOuXo5_0XhRP7u-AExc.roa
File: NzozQY7PyOuXo5_0XhRP7u-AExc.roa (raw, json)
Hash identifier: X09HYPF1OhvovnWdUUjU4YWCKumpkvh7uvyWrNNa2dM=
Subject key identifier: 37:3A:33:41:8E:CF:C8:EB:97:A3:9F:F4:5E:14:4F:EE:EF:80:13:17
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 0185975EA02CF808645B45D446ACCCF59023
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/NzozQY7PyOuXo5_0XhRP7u-AExc.roa
Signing time: Mon 09 Jan 2023 16:30:39 +0000
ROA not before: Mon 09 Jan 2023 16:30:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:5e:a0:2c:f8:08:64:5b:45:d4:46:ac:cc:f5:90:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 9 16:30:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=373a33418ecfc8eb97a39ff45e144feeef801317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:c1:75:db:14:1f:d2:21:8b:75:d4:bc:4f:
90:1b:f4:3c:7f:65:06:53:17:3e:c9:18:19:22:a5:
0c:0e:a7:66:68:f5:3a:13:64:92:85:9d:06:cf:c1:
b8:5a:61:35:4a:de:a6:5f:88:8d:e3:3c:f7:af:21:
41:7c:0c:c0:13:ae:3c:77:e7:a9:77:13:b1:ed:3b:
c0:1c:00:88:3a:d7:a8:d7:dd:cb:c8:9e:9e:dd:75:
0f:49:24:5b:1c:fb:c9:8b:60:82:f7:b6:d1:da:d2:
ca:b5:38:3b:73:29:dc:eb:1b:ba:30:bb:83:99:de:
a4:8d:97:f5:9a:18:db:4f:8e:f1:60:2e:bf:66:61:
13:fd:3d:b5:5f:b1:a8:24:ff:e2:a9:05:e8:ef:ec:
c3:13:8d:1e:9f:4c:4f:05:74:d4:b7:e0:9f:bd:77:
78:4c:2c:af:a1:ee:f0:95:91:32:4a:f2:4c:0a:63:
b7:1a:77:82:f7:4d:9d:3d:a2:7a:bc:f4:0c:67:5e:
a4:43:9c:79:6a:ce:82:90:50:f3:1c:8b:3a:1b:d9:
ce:65:08:34:85:68:ac:cc:a2:e2:68:2c:e8:a4:9a:
82:57:91:b8:33:b0:a9:8e:dc:5b:31:95:ee:9d:17:
8b:d5:11:70:1c:56:63:9a:32:4d:fb:96:6a:73:d5:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:33:41:8E:CF:C8:EB:97:A3:9F:F4:5E:14:4F:EE:EF:80:13:17
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/NzozQY7PyOuXo5_0XhRP7u-AExc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ff:ac:51:a1:46:3e:db:ed:fb:73:6a:31:15:01:95:24:ae:
9e:43:db:0a:9e:60:c9:66:91:0d:3d:d4:34:bf:e6:84:59:a8:
31:ef:39:16:7b:a7:1c:69:aa:08:41:1e:cb:11:d7:6a:e9:70:
8b:55:ed:6d:2b:64:83:60:f5:70:db:c8:c4:ee:bc:e2:d1:bc:
6d:03:f8:26:ea:3c:ca:17:9f:41:8b:47:88:9e:b8:ca:0f:ad:
8a:9b:0d:27:72:b7:8c:69:bf:ad:34:dd:4d:10:e2:18:ed:87:
bc:38:5c:c9:c3:8a:30:c6:46:12:4a:00:9a:24:34:67:e7:e3:
7d:e4:aa:91:f7:4a:34:a2:c3:a0:dd:f5:a1:72:4e:c9:e6:be:
5d:4b:db:30:2b:5b:78:bc:b7:31:70:a3:a2:a9:4d:5b:3c:a6:
a2:9d:65:36:45:aa:54:9f:a0:85:91:9e:0f:08:90:af:2c:6b:
72:81:e6:06:df:18:47:50:c9:b9:3e:a6:97:bb:25:1d:27:bb:
e0:1e:c9:66:08:56:2d:99:4e:eb:b4:d1:4b:49:e6:d0:a7:ea:
b5:53:a7:25:b7:12:46:5a:04:fa:d5:6d:3c:c9:66:11:b5:63:
21:0c:76:a1:af:79:ff:a0:24:27:79:0d:2d:4c:58:17:16:ac:
25:aa:23:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWXXqAs+AhkW0XURqzM9ZAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjMwMTA5MTYzMDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzNhMzM0MThlY2ZjOGViOTdhMzlmZjQ1ZTE0NGZlZWVmODAxMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxnBddsUH9Ihi3XUvE+QG/Q8f2UG
Uxc+yRgZIqUMDqdmaPU6E2SShZ0Gz8G4WmE1St6mX4iN4zz3ryFBfAzAE648d+ep
dxOx7TvAHACIOteo193LyJ6e3XUPSSRbHPvJi2CC97bR2tLKtTg7cync6xu6MLuD
md6kjZf1mhjbT47xYC6/ZmET/T21X7GoJP/iqQXo7+zDE40en0xPBXTUt+CfvXd4
TCyvoe7wlZEySvJMCmO3GneC902dPaJ6vPQMZ16kQ5x5as6CkFDzHIs6G9nOZQg0
hWiszKLiaCzopJqCV5G4M7CpjtxbMZXunReL1RFwHFZjmjJN+5Zqc9WmmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDc6M0GOz8jrl6Of9F4UT+7vgBMXMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEvTnpvelFZN1B5T3VYbzVfMFhoUlA3dS1BRXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGmMA0G
CSqGSIb3DQEBCwUAA4IBAQAp/6xRoUY+2+37c2oxFQGVJK6eQ9sKnmDJZpENPdQ0
v+aEWagx7zkWe6ccaaoIQR7LEddq6XCLVe1tK2SDYPVw28jE7rzi0bxtA/gm6jzK
F59Bi0eInrjKD62Kmw0ncreMab+tNN1NEOIY7Ye8OFzJw4owxkYSSgCaJDRn5+N9
5KqR90o0osOg3fWhck7J5r5dS9swK1t4vLcxcKOiqU1bPKainWU2RapUn6CFkZ4P
CJCvLGtygeYG3xhHUMm5PqaXuyUdJ7vgHslmCFYtmU7rtNFLSebQp+q1U6cltxJG
WgT61W08yWYRtWMhDHahr3n/oCQneQ0tTFgXFqwlqiO1
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:21 2024 by rpki-client on console-ams.rpki-client.org