Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/rufX8OmK95geNczStLOP6yqVsoI.roa
File: rufX8OmK95geNczStLOP6yqVsoI.roa (raw, json)
Hash identifier: wPSKqAratjAcJK/gaRt7k/h5DO9/8tlt4rLHqj/vdOg=
Subject key identifier: AE:E7:D7:F0:E9:8A:F7:98:1E:35:CC:D2:B4:B3:8F:EB:2A:95:B2:82
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 01856E6F8DB46815D3D237032D611B03EED8
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/rufX8OmK95geNczStLOP6yqVsoI.roa
Signing time: Sun 01 Jan 2023 17:44:42 +0000
ROA not before: Sun 01 Jan 2023 17:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.55.190.0/24 maxlen: 24
185.55.188.0/24 maxlen: 24
185.55.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:8d:b4:68:15:d3:d2:37:03:2d:61:1b:03:ee:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 1 17:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee7d7f0e98af7981e35ccd2b4b38feb2a95b282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4b:40:26:51:f1:4d:5f:07:74:0a:91:9e:a7:
15:3f:65:19:cc:f0:12:20:47:18:da:83:27:0f:5c:
58:7d:e1:2f:d2:6f:04:01:6a:b1:55:b7:af:99:a4:
9f:16:e7:9b:9f:1b:36:4c:fc:df:d9:69:88:62:b1:
9f:86:75:f9:a4:29:5b:5a:82:f3:a7:03:50:90:c4:
03:a8:ad:94:fd:24:f1:9e:1e:c6:46:23:4e:17:f6:
89:b2:49:9b:3c:e8:b9:ce:59:a4:d3:a5:54:aa:c5:
0d:2a:5e:04:31:4d:cd:75:c1:b2:37:f1:53:ed:fa:
81:6d:14:49:c7:57:61:50:97:b9:5d:d2:32:a6:40:
c3:61:bd:13:f6:69:5c:2e:cc:c2:ba:3d:97:f5:4f:
0c:8b:44:61:14:c2:3c:bf:8f:65:16:57:39:a7:12:
ed:8e:bc:f7:09:70:47:0c:b0:7e:16:6f:37:27:9b:
cf:ce:9a:c9:4f:b8:97:51:88:ed:ef:28:8c:56:ee:
fd:83:46:8e:c9:c0:cc:09:54:ff:79:ba:19:da:4d:
ae:76:5f:26:ac:5e:69:46:88:c9:7f:80:c9:d4:bb:
a6:f9:37:80:08:90:05:aa:4a:9d:34:4c:81:65:d3:
fb:24:f0:d2:a8:b8:92:d5:81:7f:ec:e9:6f:2c:95:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:D7:F0:E9:8A:F7:98:1E:35:CC:D2:B4:B3:8F:EB:2A:95:B2:82
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/rufX8OmK95geNczStLOP6yqVsoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.188.0/24
185.55.190.0/23
Signature Algorithm: sha256WithRSAEncryption
52:96:2d:ab:9a:e8:23:7b:8e:d1:6e:dd:b8:8c:a9:1e:38:bc:
92:ba:c7:8e:a9:a0:af:68:68:46:0a:27:d4:ea:f9:08:a8:95:
e4:ca:df:81:a7:0d:f1:65:b7:76:71:70:4d:31:01:a9:6b:f0:
14:6a:55:94:5e:d2:bb:c3:b6:98:02:71:0c:75:f2:92:d7:c3:
5c:71:0d:da:f9:62:d1:77:0c:94:d7:46:e4:20:f0:ad:de:14:
2e:85:1e:f4:f0:18:8a:b0:0b:94:97:d2:36:5c:97:3a:72:b6:
42:eb:71:13:87:b1:b2:f2:22:1a:31:75:27:8c:96:2f:fb:d7:
98:d3:e4:42:59:ef:91:e7:ad:d0:d9:62:e6:a6:eb:e8:83:5c:
f8:a3:80:64:09:d1:04:c7:3c:13:7d:e8:cc:a2:71:ae:29:a2:
88:b8:cd:5f:e9:ea:1b:15:bc:c5:a2:00:71:6c:84:26:ff:97:
0d:fc:71:54:ed:84:29:7a:1d:b0:66:d0:60:90:85:0f:7a:d4:
82:17:7f:8c:71:27:a1:8e:e9:6d:b5:c5:1d:f2:3e:0a:19:fc:
51:da:bd:4a:54:67:8c:e7:71:9c:bd:1b:c7:14:95:f4:3a:be:
6f:45:1e:40:14:e2:19:45:df:71:c9:54:c4:49:21:0e:4e:8f:
a0:dc:ab:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVub420aBXT0jcDLWEbA+7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjMwMTAxMTc0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU3ZDdmMGU5OGFmNzk4MWUzNWNjZDJiNGIzOGZlYjJhOTViMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUtAJlHxTV8HdAqRnqcVP2UZzPAS
IEcY2oMnD1xYfeEv0m8EAWqxVbevmaSfFuebnxs2TPzf2WmIYrGfhnX5pClbWoLz
pwNQkMQDqK2U/STxnh7GRiNOF/aJskmbPOi5zlmk06VUqsUNKl4EMU3NdcGyN/FT
7fqBbRRJx1dhUJe5XdIypkDDYb0T9mlcLszCuj2X9U8Mi0RhFMI8v49lFlc5pxLt
jrz3CXBHDLB+Fm83J5vPzprJT7iXUYjt7yiMVu79g0aOycDMCVT/eboZ2k2udl8m
rF5pRojJf4DJ1Lum+TeACJAFqkqdNEyBZdP7JPDSqLiS1YF/7OlvLJU7JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7n1/DpiveYHjXM0rSzj+sqlbKCMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcnVmWDhPbUs5NWdlTmN6U3RMT1A2eXFWc29JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTe8AwQB
uTe+MA0GCSqGSIb3DQEBCwUAA4IBAQBSli2rmugje47Rbt24jKkeOLySuseOqaCv
aGhGCifU6vkIqJXkyt+Bpw3xZbd2cXBNMQGpa/AUalWUXtK7w7aYAnEMdfKS18Nc
cQ3a+WLRdwyU10bkIPCt3hQuhR708BiKsAuUl9I2XJc6crZC63ETh7Gy8iIaMXUn
jJYv+9eY0+RCWe+R563Q2WLmpuvog1z4o4BkCdEExzwTfejMonGuKaKIuM1f6eob
FbzFogBxbIQm/5cN/HFU7YQpeh2wZtBgkIUPetSCF3+McSehjulttcUd8j4KGfxR
2r1KVGeM53GcvRvHFJX0Or5vRR5AFOIZRd9xyVTESSEOTo+g3KvO
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:31 2024 by rpki-client on console-fra.rpki-client.org