Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/eiCllXtKZIPpDutFtXtxhyDt4Hk.roa
File: eiCllXtKZIPpDutFtXtxhyDt4Hk.roa (raw, json)
Hash identifier: /+XeDH9u18EO8LY6WXWLx+9SgKl/svmnsMGG/2+4mfg=
Subject key identifier: 7A:20:A5:95:7B:4A:64:83:E9:0E:EB:45:B5:7B:71:87:20:ED:E0:79
Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Certificate serial: 018570E75AD595BEBCD84DCA7784E8684234
Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/eiCllXtKZIPpDutFtXtxhyDt4Hk.roa
Signing time: Mon 02 Jan 2023 05:14:48 +0000
ROA not before: Mon 02 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211625
IP address blocks: 185.75.4.0/22 maxlen: 22
185.235.9.0/24 maxlen: 24
2a10:b7c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5a:d5:95:be:bc:d8:4d:ca:77:84:e8:68:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Validity
Not Before: Jan 2 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a20a5957b4a6483e90eeb45b57b718720ede079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:b3:b2:f4:21:33:e1:30:ff:3c:f2:ce:d2:
93:fb:44:3d:ee:87:d3:a4:e9:73:21:3f:ae:61:eb:
7a:83:41:b5:d5:47:e7:17:de:7c:25:9e:cd:82:28:
f1:f8:4d:63:55:2d:35:d4:06:55:8e:45:51:79:87:
1a:7c:b2:b7:f2:47:fb:53:b3:62:8f:1c:54:f6:d8:
d4:c6:c9:95:04:f1:fc:20:a0:f5:38:29:c2:8d:0f:
5b:68:6e:65:8e:b0:ba:5f:c4:5e:bb:b7:c5:81:b4:
ce:82:38:59:85:84:1e:b8:80:e5:03:e7:54:6e:c5:
e6:e6:ab:f5:40:19:ae:6a:05:b5:62:f3:51:0a:a4:
b9:cd:f5:e3:50:2d:3b:c9:61:3c:ff:42:92:9d:20:
75:1d:25:60:80:4c:4b:5b:4c:ce:7f:ff:1f:fd:ec:
8d:59:90:e2:ba:62:dc:43:85:21:d1:9c:71:5a:de:
e1:94:17:69:bb:e3:dc:ce:b0:80:64:d8:9c:0f:93:
af:15:a3:05:fd:92:5f:0e:65:f7:8b:14:a0:65:2a:
5f:8c:68:ef:97:e6:cc:84:b7:83:46:59:60:eb:64:
92:f1:9b:d6:73:b7:46:e9:0a:30:1b:e1:7a:ff:ec:
24:d7:3e:75:5d:84:91:d0:85:6c:da:7a:f2:86:6e:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:A5:95:7B:4A:64:83:E9:0E:EB:45:B5:7B:71:87:20:ED:E0:79
X509v3 Authority Key Identifier:
keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/eiCllXtKZIPpDutFtXtxhyDt4Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.4.0/22
185.235.9.0/24
IPv6:
2a10:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:d7:4c:44:4e:f1:2c:84:70:9a:1d:21:ff:30:a7:35:c5:2a:
f9:26:fb:fa:52:7d:5c:38:ad:31:75:ba:37:c9:4e:63:12:03:
da:cf:f8:89:3a:b4:3b:d9:ca:c2:d2:bb:b2:8e:a0:f7:2a:c4:
51:a5:32:f8:9c:6a:68:3d:59:29:32:be:c2:0c:24:5f:9c:3b:
a7:57:9a:a7:e1:ef:3c:3c:aa:5c:c6:ea:42:70:0e:a9:67:1a:
43:8f:e4:22:1c:1f:32:84:cd:c7:1e:0f:06:39:7f:b4:44:a8:
04:9e:c6:b9:38:94:d4:27:aa:41:f2:8f:84:88:f9:7c:23:d8:
93:ee:ba:9d:be:29:dd:a0:1f:04:11:25:4b:92:11:67:81:09:
ac:54:fd:3c:ed:c7:fe:0d:21:22:47:c6:b6:d6:63:84:d0:49:
4f:31:44:73:87:3c:6b:fc:ab:b7:42:b7:8a:58:2c:55:66:b5:
9b:db:e4:db:2e:45:43:4a:a0:7b:8c:f6:1c:d3:35:54:3c:e0:
bd:31:22:8c:29:07:04:bc:2d:c5:37:59:41:2e:dd:ba:37:94:
16:fa:4f:e9:2e:ee:66:bd:6c:88:e8:60:91:bc:af:33:4d:7f:
1b:14:03:83:52:11:17:a9:e6:6c:38:93:4f:c9:15:04:44:31:
97:b0:2f:07
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVw51rVlb682E3Kd4ToaEI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw
ZmVhYjUwHhcNMjMwMTAyMDUxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTIwYTU5NTdiNGE2NDgzZTkwZWViNDViNTdiNzE4NzIwZWRlMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC2zsvQhM+Ew/zzyztKT+0Q97ofT
pOlzIT+uYet6g0G11UfnF958JZ7Ngijx+E1jVS011AZVjkVReYcafLK38kf7U7Ni
jxxU9tjUxsmVBPH8IKD1OCnCjQ9baG5ljrC6X8Reu7fFgbTOgjhZhYQeuIDlA+dU
bsXm5qv1QBmuagW1YvNRCqS5zfXjUC07yWE8/0KSnSB1HSVggExLW0zOf/8f/eyN
WZDiumLcQ4Uh0ZxxWt7hlBdpu+PczrCAZNicD5OvFaMF/ZJfDmX3ixSgZSpfjGjv
l+bMhLeDRllg62SS8ZvWc7dG6QowG+F6/+wk1z51XYSR0IVs2nryhm4mJQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHogpZV7SmSD6Q7rRbV7cYcg7eB5MB8GA1UdIwQY
MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt
Yjc5OTY4ZTBlMTc0LzEvZWlDbGxYdEtaSVBwRHV0RnRYdHhoeUR0NEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0
LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUsEAwQA
uesJMA0EAgACMAcDBQMqELfAMA0GCSqGSIb3DQEBCwUAA4IBAQBI10xETvEshHCa
HSH/MKc1xSr5Jvv6Un1cOK0xdbo3yU5jEgPaz/iJOrQ72crC0ruyjqD3KsRRpTL4
nGpoPVkpMr7CDCRfnDunV5qn4e88PKpcxupCcA6pZxpDj+QiHB8yhM3HHg8GOX+0
RKgEnsa5OJTUJ6pB8o+EiPl8I9iT7rqdvindoB8EESVLkhFngQmsVP087cf+DSEi
R8a21mOE0ElPMURzhzxr/Ku3QreKWCxVZrWb2+TbLkVDSqB7jPYc0zVUPOC9MSKM
KQcEvC3FN1lBLt26N5QW+k/pLu5mvWyI6GCRvK8zTX8bFAODUhEXqeZsOJNPyRUE
RDGXsC8H
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:22 2024 by rpki-client on console-ams.rpki-client.org