Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/9y-jFnHa_96cRl-ebMjkOv53UqI.roa
File: 9y-jFnHa_96cRl-ebMjkOv53UqI.roa (raw, json)
Hash identifier: QOdabZJEpHMUN/BDBJigMzC+oECyDkBXlL1HRR/p57c=
Subject key identifier: F7:2F:A3:16:71:DA:FF:DE:9C:46:5F:9E:6C:C8:E4:3A:FE:77:52:A2
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 0185727114D64F61E17DCB684BF2C47197DE
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/9y-jFnHa_96cRl-ebMjkOv53UqI.roa
Signing time: Mon 02 Jan 2023 12:24:51 +0000
ROA not before: Mon 02 Jan 2023 12:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206449
IP address blocks: 185.186.111.0/24 maxlen: 24
185.186.108.0/24 maxlen: 24
185.186.109.0/24 maxlen: 24
185.186.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:14:d6:4f:61:e1:7d:cb:68:4b:f2:c4:71:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 2 12:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f72fa31671daffde9c465f9e6cc8e43afe7752a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:62:8c:83:52:28:21:34:c9:2b:06:01:ca:
ee:6a:61:60:41:ee:24:87:41:20:7d:73:63:06:29:
be:2f:8d:11:8c:b8:fa:f3:32:3c:ae:06:b7:07:74:
f2:a5:2e:1d:40:f7:e8:9a:31:71:e4:41:fd:18:8c:
93:ce:a0:70:8c:4a:3e:d9:23:c8:f8:70:50:5f:6f:
d7:9e:69:ac:7b:99:60:b0:5d:fd:34:f4:59:6e:f9:
3b:0d:a3:7a:46:3a:93:43:85:35:11:0d:d5:33:27:
cb:93:0b:e1:ad:65:32:e8:48:0e:91:00:90:aa:fe:
be:14:37:b1:3a:7a:3c:23:78:a0:60:5d:06:35:45:
0a:b8:99:a2:39:61:5b:50:d6:c1:04:fc:91:18:f5:
7a:0e:34:09:a4:54:17:2a:6e:1b:48:50:5e:8b:b8:
ab:8e:50:59:ae:4c:a3:84:53:34:30:00:1b:d2:f0:
b2:f1:06:ab:24:b3:e2:35:eb:c6:c4:4d:df:87:9f:
26:e2:27:ec:ba:04:ca:31:da:9c:8a:9f:9c:e4:79:
7d:5a:e4:c1:00:39:c6:7c:1c:3b:66:3d:72:36:ec:
79:23:fd:78:ef:b0:da:76:f5:d1:25:11:a5:a2:ea:
61:33:04:60:f1:49:91:05:7d:e1:e8:87:89:c4:de:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:A3:16:71:DA:FF:DE:9C:46:5F:9E:6C:C8:E4:3A:FE:77:52:A2
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/9y-jFnHa_96cRl-ebMjkOv53UqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:df:f3:67:c4:13:1b:e6:78:58:cf:21:81:75:9f:81:d4:db:
0a:db:c8:a1:d9:86:02:6b:01:78:45:fb:0f:08:db:83:7a:f6:
bb:87:94:87:31:2d:71:c6:e7:54:57:d3:43:52:40:96:09:de:
69:4c:a1:72:b0:d7:0a:3b:cc:54:b2:26:c1:07:f8:3f:93:74:
82:3c:60:11:56:84:1e:e4:9e:b5:23:d3:a3:64:a9:17:96:c5:
55:d6:0e:48:53:83:4d:19:2d:f9:29:01:87:0f:7d:8d:0a:92:
d5:c1:b7:7b:09:8b:66:a5:30:64:2c:fc:d9:2f:a7:16:df:16:
c5:e3:82:d7:b6:64:ac:f6:12:ad:3a:f8:d4:64:8e:e4:29:98:
bb:83:a5:57:8a:eb:8f:63:50:42:3b:71:8e:b4:e4:4e:a8:eb:
3d:6b:94:41:70:1a:b7:7f:22:e7:0c:36:d6:1d:e9:e2:46:70:
e9:33:fc:d5:cb:14:32:a2:97:c0:6c:15:da:9a:13:4f:f1:a7:
1b:63:07:5f:30:53:f3:85:db:da:5d:6e:a7:cf:1d:ec:68:f2:
b1:19:61:df:0b:6f:84:ab:c5:28:c6:0d:29:d9:7c:1e:7c:f4:
6e:18:51:64:b7:ba:1c:df:53:b8:ee:ff:2f:46:a5:57:27:ee:
23:39:ac:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycRTWT2HhfctoS/LEcZfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm
MmUwNzUwHhcNMjMwMTAyMTIyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzJmYTMxNjcxZGFmZmRlOWM0NjVmOWU2Y2M4ZTQzYWZlNzc1MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl9ijINSKCE0ySsGAcruamFgQe4k
h0EgfXNjBim+L40RjLj68zI8rga3B3TypS4dQPfomjFx5EH9GIyTzqBwjEo+2SPI
+HBQX2/Xnmmse5lgsF39NPRZbvk7DaN6RjqTQ4U1EQ3VMyfLkwvhrWUy6EgOkQCQ
qv6+FDexOno8I3igYF0GNUUKuJmiOWFbUNbBBPyRGPV6DjQJpFQXKm4bSFBei7ir
jlBZrkyjhFM0MAAb0vCy8QarJLPiNevGxE3fh58m4ifsugTKMdqcip+c5Hl9WuTB
ADnGfBw7Zj1yNux5I/1477DadvXRJRGlouphMwRg8UmRBX3h6IeJxN5OkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcvoxZx2v/enEZfnmzI5Dr+d1KiMB8GA1UdIwQY
MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt
MDNhZGZiYzY4YzkxLzEvOXktakZuSGFfOTZjUmwtZWJNamtPdjUzVXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx
LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubpsMA0G
CSqGSIb3DQEBCwUAA4IBAQCO3/NnxBMb5nhYzyGBdZ+B1NsK28ih2YYCawF4RfsP
CNuDeva7h5SHMS1xxudUV9NDUkCWCd5pTKFysNcKO8xUsibBB/g/k3SCPGARVoQe
5J61I9OjZKkXlsVV1g5IU4NNGS35KQGHD32NCpLVwbd7CYtmpTBkLPzZL6cW3xbF
44LXtmSs9hKtOvjUZI7kKZi7g6VXiuuPY1BCO3GOtOROqOs9a5RBcBq3fyLnDDbW
HeniRnDpM/zVyxQyopfAbBXamhNP8acbYwdfMFPzhdvaXW6nzx3saPKxGWHfC2+E
q8Uoxg0p2XwefPRuGFFkt7oc31O47v8vRqVXJ+4jOaxF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org