Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/a9xzyotOt9sBmcvwqj5FYmJww-U.roa
File: a9xzyotOt9sBmcvwqj5FYmJww-U.roa (raw, json)
Hash identifier: +A5EFy0xPjMA0t2L815fbv2WrAh8+Kk4i4asgPPkj3c=
Subject key identifier: 6B:DC:73:CA:8B:4E:B7:DB:01:99:CB:F0:AA:3E:45:62:62:70:C3:E5
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 01856E8B609C17B3027A658E3663CACB6D66
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/a9xzyotOt9sBmcvwqj5FYmJww-U.roa
Signing time: Sun 01 Jan 2023 18:15:06 +0000
ROA not before: Sun 01 Jan 2023 18:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15791
IP address blocks: 185.109.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:60:9c:17:b3:02:7a:65:8e:36:63:ca:cb:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 1 18:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdc73ca8b4eb7db0199cbf0aa3e45626270c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:f9:42:18:8b:c2:29:38:fb:ea:24:f9:f4:
df:28:b4:d3:53:0e:1e:e3:3d:01:70:02:36:15:26:
8c:25:c4:c1:e2:78:2b:22:b2:a0:97:2b:93:12:23:
a8:4c:70:ce:0e:f3:4d:71:4a:02:6b:d6:44:05:0b:
99:a7:8c:25:e6:b3:5a:14:17:f0:71:35:03:03:b1:
77:a0:66:fb:c3:de:07:48:ff:74:61:38:5e:d7:06:
2c:f5:f0:59:88:ce:2e:4c:50:d3:5b:b6:d3:d3:df:
ef:e3:8e:3f:a3:0d:58:57:e7:a7:88:bb:bf:d5:56:
c7:9c:12:c3:a4:82:6f:25:5f:7c:d1:84:85:d4:68:
45:be:8f:c2:6a:4e:cc:d7:fd:48:7b:fa:69:d4:d8:
17:22:15:5c:be:96:8f:6b:26:00:f8:b4:73:3c:c4:
c5:d0:3e:95:a3:87:c6:fe:b0:79:7a:1b:4a:fe:d3:
64:0b:f1:ef:1a:69:ce:be:db:ed:fb:ea:a3:e2:12:
4d:a7:74:4a:f3:f9:4a:99:ff:bb:18:56:19:93:28:
d0:92:6e:68:50:1c:da:94:ac:48:4d:98:55:38:97:
ca:39:00:6b:9c:31:2e:a3:e3:ed:5f:23:fb:c0:a6:
f1:5e:f6:f9:78:a6:cf:40:de:a1:a5:50:db:90:f5:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:73:CA:8B:4E:B7:DB:01:99:CB:F0:AA:3E:45:62:62:70:C3:E5
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/a9xzyotOt9sBmcvwqj5FYmJww-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:68:6d:c5:47:1c:08:73:5f:09:e5:86:45:ff:9f:b6:29:da:
9f:ac:18:6b:bf:7f:35:fa:be:1d:e9:cc:99:70:a2:0c:a6:bc:
f4:8b:3d:f5:8c:08:c8:a5:ae:db:6e:07:f4:0c:6a:73:9b:8f:
42:37:5c:51:6c:12:84:03:a8:5d:ad:69:5c:c4:35:7e:4e:7c:
57:d8:71:cb:44:af:ba:ae:c9:09:32:07:9f:64:14:bd:47:4c:
41:d2:b7:a6:82:cf:e6:de:df:12:85:34:3e:74:77:a7:ab:ad:
3e:d1:2e:7d:31:28:ec:e8:9f:55:8b:60:7b:09:da:7e:91:59:
ff:b9:85:8d:2e:ba:5e:e1:a7:65:ad:b4:7e:64:a9:b4:3e:39:
20:18:9f:06:29:c4:e6:88:8f:1e:8c:66:4c:60:05:99:d6:b1:
11:91:03:89:14:18:c0:1a:b7:47:64:a1:02:74:24:01:6b:a7:
d6:de:76:8e:9c:51:e1:00:3b:6b:c5:c0:d4:2e:ae:13:18:b4:
78:00:89:fe:1b:58:f9:5c:1a:24:7f:20:69:25:aa:74:49:d9:
15:c8:25:2f:76:d8:8a:59:72:aa:36:a8:6d:52:6c:48:60:0f:
0c:8c:0b:eb:c1:a7:93:32:27:ab:8a:a4:60:25:e6:2e:80:89:
df:40:6c:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVui2CcF7MCemWONmPKy21mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGI1MTNmN2U0NDZlMGNkNmRjZmU1NjgyOWJiYzlmZTQ5
OGQzZTgwHhcNMjMwMTAxMTgxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRjNzNjYThiNGViN2RiMDE5OWNiZjBhYTNlNDU2MjYyNzBjM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZv5QhiLwik4++ok+fTfKLTTUw4e
4z0BcAI2FSaMJcTB4ngrIrKglyuTEiOoTHDODvNNcUoCa9ZEBQuZp4wl5rNaFBfw
cTUDA7F3oGb7w94HSP90YThe1wYs9fBZiM4uTFDTW7bT09/v444/ow1YV+eniLu/
1VbHnBLDpIJvJV980YSF1GhFvo/Cak7M1/1Ie/pp1NgXIhVcvpaPayYA+LRzPMTF
0D6Vo4fG/rB5ehtK/tNkC/HvGmnOvtvt++qj4hJNp3RK8/lKmf+7GFYZkyjQkm5o
UBzalKxITZhVOJfKOQBrnDEuo+PtXyP7wKbxXvb5eKbPQN6hpVDbkPUd8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvcc8qLTrfbAZnL8Ko+RWJicMPlMB8GA1UdIwQY
MBaAFEpLUT9+RG4M1tz+VoKbvJ/kmNPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvYTl4enlvdE90OXNCbWN2d3FqNUZZbUp3dy1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW3oMA0G
CSqGSIb3DQEBCwUAA4IBAQDSaG3FRxwIc18J5YZF/5+2KdqfrBhrv381+r4d6cyZ
cKIMprz0iz31jAjIpa7bbgf0DGpzm49CN1xRbBKEA6hdrWlcxDV+TnxX2HHLRK+6
rskJMgefZBS9R0xB0remgs/m3t8ShTQ+dHenq60+0S59MSjs6J9Vi2B7Cdp+kVn/
uYWNLrpe4adlrbR+ZKm0PjkgGJ8GKcTmiI8ejGZMYAWZ1rERkQOJFBjAGrdHZKEC
dCQBa6fW3naOnFHhADtrxcDULq4TGLR4AIn+G1j5XBokfyBpJap0SdkVyCUvdtiK
WXKqNqhtUmxIYA8MjAvrwaeTMieriqRgJeYugInfQGzN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:59 2024 by rpki-client on console-ams.rpki-client.org