Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/azoMXrFKCQU68cbpWnVXcOZ3i9U.roa
File: azoMXrFKCQU68cbpWnVXcOZ3i9U.roa (raw, json)
Hash identifier: Ksew7ETrRcGlxz4D8NAbRTgad+QXtzQGD5Lyx9mf+Yw=
Subject key identifier: 6B:3A:0C:5E:B1:4A:09:05:3A:F1:C6:E9:5A:75:57:70:E6:77:8B:D5
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 018901E78699C7C61C963FB8BBEE3E4668D1
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/azoMXrFKCQU68cbpWnVXcOZ3i9U.roa
Signing time: Wed 28 Jun 2023 12:08:17 +0000
ROA not before: Wed 28 Jun 2023 12:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.113.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:e7:86:99:c7:c6:1c:96:3f:b8:bb:ee:3e:46:68:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 28 12:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b3a0c5eb14a09053af1c6e95a755770e6778bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:c7:ce:ec:6c:e7:cb:c0:c6:86:4a:67:26:
4f:be:e9:ad:59:f7:f9:38:53:7b:9d:fc:7c:7a:90:
43:7a:e3:91:d5:3f:7a:b5:bb:8e:0f:b7:87:a3:14:
39:ba:e8:13:0d:10:1b:da:ba:2c:ad:17:43:2c:7e:
bf:d2:e4:81:d0:20:32:fe:75:6c:05:86:64:ed:14:
77:b7:2e:73:b0:c8:a4:76:a7:f7:f4:3c:02:2a:0c:
95:db:f5:93:80:e6:58:ce:6f:9a:23:0b:05:34:59:
cf:56:7b:48:36:9c:a7:f3:14:4f:91:04:42:1e:d2:
ec:84:63:a8:39:dc:5e:be:36:0d:42:f5:4b:43:c4:
33:2e:b0:64:b6:be:a8:e1:75:b9:21:7e:b5:64:f2:
ca:4d:7d:ad:ba:a6:69:10:73:63:80:f8:81:83:34:
33:de:68:25:b9:4f:3a:80:00:a4:10:c6:c5:5e:9f:
29:b5:de:a9:41:b7:e4:1d:55:97:32:57:f3:26:3e:
54:c9:77:8e:52:05:46:9a:97:db:94:89:c0:16:17:
da:e6:64:13:9f:3c:4b:a3:fa:6f:8b:ff:fe:5d:03:
2a:b2:96:59:9e:5c:b9:d6:8c:50:6f:e9:60:f2:ed:
07:e1:df:51:66:d1:ce:b0:07:5d:8f:4f:b1:24:46:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:0C:5E:B1:4A:09:05:3A:F1:C6:E9:5A:75:57:70:E6:77:8B:D5
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/azoMXrFKCQU68cbpWnVXcOZ3i9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.189.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4f:8a:49:5d:f4:a6:ff:a4:c0:75:48:bf:30:e9:35:ab:b4:
05:9b:b2:9a:bb:0e:50:e3:22:bc:f7:1d:39:f4:6c:f6:59:17:
fe:30:0b:cc:72:a2:0c:43:4c:f6:71:20:99:cc:89:1f:f1:a2:
a1:89:44:43:1b:08:8b:d7:c1:a4:86:f4:42:82:79:3c:8a:67:
dc:f4:f2:7f:1f:dc:0c:c5:75:6e:c4:f3:79:74:9a:e1:38:71:
ab:6b:e3:5e:2e:e5:5f:32:65:73:64:4e:12:5a:a0:29:3f:68:
4e:d9:63:83:a6:9e:81:14:c8:61:d3:e3:12:89:e6:bc:f0:11:
4b:d3:1c:07:4e:ee:ba:aa:c4:6a:90:a4:24:d1:15:19:6d:21:
d4:26:06:3b:bc:95:e7:7d:46:1a:60:12:9d:be:9c:e9:df:ec:
8d:82:ec:b1:7e:0b:af:b9:92:26:4a:c4:f2:86:e5:d0:18:c8:
a1:1c:3c:d1:12:4c:bc:90:54:6f:50:51:45:51:f5:69:d6:ac:
19:1f:1d:dd:4f:d6:21:0b:37:e5:4e:ae:74:5c:49:78:4e:81:
9d:f1:d4:34:dc:70:8f:3b:aa:23:09:a4:bf:29:11:b8:34:82:
3d:0f:f2:63:3a:1a:cc:52:f3:88:2f:e2:67:58:5b:05:04:e3:
c6:d1:e9:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkB54aZx8Yclj+4u+4+RmjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1
MzFkYjkwHhcNMjMwNjI4MTIwODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjNhMGM1ZWIxNGEwOTA1M2FmMWM2ZTk1YTc1NTc3MGU2Nzc4YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHHzuxs58vAxoZKZyZPvumtWff5
OFN7nfx8epBDeuOR1T96tbuOD7eHoxQ5uugTDRAb2rosrRdDLH6/0uSB0CAy/nVs
BYZk7RR3ty5zsMikdqf39DwCKgyV2/WTgOZYzm+aIwsFNFnPVntINpyn8xRPkQRC
HtLshGOoOdxevjYNQvVLQ8QzLrBktr6o4XW5IX61ZPLKTX2tuqZpEHNjgPiBgzQz
3mgluU86gACkEMbFXp8ptd6pQbfkHVWXMlfzJj5UyXeOUgVGmpfblInAFhfa5mQT
nzxLo/pvi//+XQMqspZZnly51oxQb+lg8u0H4d9RZtHOsAddj0+xJEZW5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGs6DF6xSgkFOvHG6Vp1V3Dmd4vVMB8GA1UdIwQY
MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et
OWU5NmFmNmQ2YThmLzEvYXpvTVhyRktDUVU2OGNicFduVlhjT1ozaTlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm
LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXG9MA0G
CSqGSIb3DQEBCwUAA4IBAQBxT4pJXfSm/6TAdUi/MOk1q7QFm7Kauw5Q4yK89x05
9Gz2WRf+MAvMcqIMQ0z2cSCZzIkf8aKhiURDGwiL18GkhvRCgnk8imfc9PJ/H9wM
xXVuxPN5dJrhOHGra+NeLuVfMmVzZE4SWqApP2hO2WODpp6BFMhh0+MSiea88BFL
0xwHTu66qsRqkKQk0RUZbSHUJgY7vJXnfUYaYBKdvpzp3+yNguyxfguvuZImSsTy
huXQGMihHDzREky8kFRvUFFFUfVp1qwZHx3dT9YhCzflTq50XEl4ToGd8dQ03HCP
O6ojCaS/KRG4NII9D/JjOhrMUvOIL+JnWFsFBOPG0emW
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:28 2024 by rpki-client on console-ams.rpki-client.org