Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/7uvFNcS_DfMGQ7oe3jwbHAX8sFo.roa
File: 7uvFNcS_DfMGQ7oe3jwbHAX8sFo.roa (raw, json)
Hash identifier: vg+CgmbQ5ed+4izX8u+94leZdXj21l8If0jFQ52xuYs=
Subject key identifier: EE:EB:C5:35:C4:BF:0D:F3:06:43:BA:1E:DE:3C:1B:1C:05:FC:B0:5A
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 0188051B844D0221C09E638F6A3414BB9000
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/7uvFNcS_DfMGQ7oe3jwbHAX8sFo.roa
Signing time: Wed 10 May 2023 10:01:09 +0000
ROA not before: Wed 10 May 2023 10:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201985
IP address blocks: 185.57.16.0/24 maxlen: 24
185.57.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:1b:84:4d:02:21:c0:9e:63:8f:6a:34:14:bb:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: May 10 10:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeebc535c4bf0df30643ba1ede3c1b1c05fcb05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:d0:e9:34:dc:19:cb:66:c8:83:a0:35:49:
0e:e6:55:91:67:a6:1b:58:5e:57:a2:00:29:5b:19:
8e:47:49:bf:c9:d2:a2:dc:b1:7a:e5:75:fc:25:40:
4f:8d:af:90:76:98:d0:c2:be:bc:ae:55:99:4c:9e:
d5:e6:06:db:e1:4c:bb:d3:33:96:b2:ee:32:50:1d:
d3:b1:fc:f6:11:0b:09:92:05:66:1d:ab:1c:ab:2e:
e6:44:c6:cd:a1:eb:63:f0:1f:b7:21:26:4a:bc:32:
ba:7f:36:29:f5:3f:e6:ad:e0:c3:09:94:ca:a9:00:
01:63:b7:04:eb:78:a0:de:ae:d7:fe:3b:39:be:7c:
88:2b:00:9c:18:0c:bf:07:c6:01:dc:ca:e3:ed:40:
b8:fc:95:14:e4:3b:4c:4a:fd:81:1a:46:a7:df:8a:
06:5f:d8:80:ff:6c:68:04:02:ef:8d:bf:bc:3e:23:
97:8c:81:1c:b3:cd:b9:5e:70:5e:59:9d:fb:14:22:
3e:6c:fc:16:c3:aa:ef:28:d8:85:18:56:db:e1:3c:
0f:77:60:8e:4f:ac:3a:4e:0b:e3:2a:8b:c7:be:5d:
2e:af:5a:9b:a3:fa:5e:f9:b4:a9:b3:ff:a5:04:64:
2f:8b:0d:d0:f2:7e:2a:ed:b2:b5:e8:69:cb:e9:c9:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:C5:35:C4:BF:0D:F3:06:43:BA:1E:DE:3C:1B:1C:05:FC:B0:5A
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/7uvFNcS_DfMGQ7oe3jwbHAX8sFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:0f:34:04:63:c1:0d:db:65:1b:5e:91:3c:a9:0c:12:29:76:
d7:61:7e:ab:c2:a2:a0:e1:bf:8a:d8:ee:dc:cf:d7:0e:26:e3:
7d:1c:35:09:1f:c2:33:ca:3e:0f:2a:24:74:b1:a2:d5:e7:99:
9f:e5:60:2a:55:8e:54:3c:f6:9d:49:07:98:3c:fb:a4:91:ef:
b8:52:fe:9f:0c:f0:48:8a:93:4a:e7:f6:f7:a7:e1:a2:b7:ab:
ce:c7:4e:27:69:46:67:0c:47:0d:16:58:0b:86:ec:e8:f5:7a:
96:9a:76:86:4f:9c:24:0b:d0:ae:03:c8:a0:70:8b:5c:17:4d:
49:b9:e8:dc:f7:ea:36:e8:13:0f:f4:ed:02:c1:ce:02:b1:b9:
ee:79:53:0a:ab:d1:da:c0:94:29:3f:50:f1:0e:4e:10:5e:85:
3b:43:0a:e1:74:ef:38:fa:d9:66:7e:15:b2:58:3c:3b:65:72:
b2:18:c8:0d:b2:82:19:5d:ae:ef:6b:90:55:00:99:2c:35:2e:
0d:bf:85:57:5a:ce:4a:99:68:9c:92:a8:63:38:f0:2e:88:96:
a6:a6:8a:88:86:2e:28:e2:aa:f4:c7:a2:24:97:d7:f0:82:32:
ec:49:bc:f4:eb:0c:b2:22:5d:f6:70:30:59:87:3c:d0:2c:0f:
e6:95:83:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgFG4RNAiHAnmOPajQUu5AAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0
YTlhMTMwHhcNMjMwNTEwMTAwMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWViYzUzNWM0YmYwZGYzMDY0M2JhMWVkZTNjMWIxYzA1ZmNiMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjbQ6TTcGctmyIOgNUkO5lWRZ6Yb
WF5XogApWxmOR0m/ydKi3LF65XX8JUBPja+QdpjQwr68rlWZTJ7V5gbb4Uy70zOW
su4yUB3Tsfz2EQsJkgVmHascqy7mRMbNoetj8B+3ISZKvDK6fzYp9T/mreDDCZTK
qQABY7cE63ig3q7X/js5vnyIKwCcGAy/B8YB3Mrj7UC4/JUU5DtMSv2BGkan34oG
X9iA/2xoBALvjb+8PiOXjIEcs825XnBeWZ37FCI+bPwWw6rvKNiFGFbb4TwPd2CO
T6w6TgvjKovHvl0ur1qbo/pe+bSps/+lBGQviw3Q8n4q7bK16GnL6cnKYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7rxTXEvw3zBkO6Ht48GxwF/LBaMB8GA1UdIwQY
MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt
NTNhYjg4YzVmMmM3LzEvN3V2Rk5jU19EZk1HUTdvZTNqd2JIQVg4c0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3
LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTkQMA0G
CSqGSIb3DQEBCwUAA4IBAQCkDzQEY8EN22UbXpE8qQwSKXbXYX6rwqKg4b+K2O7c
z9cOJuN9HDUJH8Izyj4PKiR0saLV55mf5WAqVY5UPPadSQeYPPukke+4Uv6fDPBI
ipNK5/b3p+Git6vOx04naUZnDEcNFlgLhuzo9XqWmnaGT5wkC9CuA8igcItcF01J
uejc9+o26BMP9O0Cwc4CsbnueVMKq9HawJQpP1DxDk4QXoU7QwrhdO84+tlmfhWy
WDw7ZXKyGMgNsoIZXa7va5BVAJksNS4Nv4VXWs5KmWickqhjOPAuiJampoqIhi4o
4qr0x6Ikl9fwgjLsSbz06wyyIl32cDBZhzzQLA/mlYP6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:47 2024 by rpki-client on console-fra.rpki-client.org