Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-Z5KCRJDvIB68qrmB2nujTRYM2g.roa
File: 1-Z5KCRJDvIB68qrmB2nujTRYM2g.roa (raw, json)
Hash identifier: kbAHqGK+u0c80yM0Rgtf1WiKZM+NY88XhtV8vyyyfmg=
Subject key identifier: F9:9E:4A:09:12:43:BC:80:7A:F2:AA:E6:07:69:EE:8D:34:58:33:68
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0186DA9FDD38ADA6D4EE46F91A7641D3EA27
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-Z5KCRJDvIB68qrmB2nujTRYM2g.roa
Signing time: Mon 13 Mar 2023 10:59:15 +0000
ROA not before: Mon 13 Mar 2023 10:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150752
IP address blocks: 185.113.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 15:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:9f:dd:38:ad:a6:d4:ee:46:f9:1a:76:41:d3:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 13 10:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f99e4a091243bc807af2aae60769ee8d34583368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:74:b6:ff:8f:aa:cd:ee:87:ed:e5:08:dd:
09:50:71:4d:50:80:8a:fc:6b:f9:b4:5b:a1:1c:06:
04:bb:8c:92:65:0f:a9:2e:5f:71:07:76:94:5a:04:
a8:2e:4e:21:ee:e6:3c:45:04:db:3b:a6:d6:39:9b:
3b:ee:ff:fb:37:5e:92:22:8a:b4:3a:70:a6:f4:a4:
13:0f:41:38:cb:b7:87:04:db:5f:e9:d6:db:3e:f7:
59:29:52:53:b3:d4:da:9a:b0:4d:3a:b7:9a:43:0c:
f1:09:46:e3:07:57:46:94:f2:23:cd:f4:83:63:44:
9c:56:3a:dd:81:96:39:dd:d3:c9:1b:11:6a:d1:9a:
be:5a:fe:5c:f6:f4:93:a2:c9:a5:5e:7f:92:d8:d1:
ff:45:2d:eb:70:10:4c:96:40:15:91:3c:f9:d7:26:
46:57:a5:3b:4f:31:d8:18:bf:1d:0a:38:6c:0c:22:
7d:b3:0f:2f:08:be:5d:a2:58:2b:c1:96:3a:d4:eb:
8a:61:61:69:db:75:b1:1f:85:75:63:43:25:0d:33:
25:36:aa:e9:ac:b7:48:e2:16:ca:d4:62:1e:67:27:
20:38:84:73:ed:76:b2:76:3f:90:ed:b6:34:e8:40:
61:78:6f:cf:31:d5:2f:77:81:51:ce:89:be:7d:a6:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:4A:09:12:43:BC:80:7A:F2:AA:E6:07:69:EE:8D:34:58:33:68
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-Z5KCRJDvIB68qrmB2nujTRYM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b3:46:f4:84:04:a6:d3:90:2b:52:9c:40:ff:2f:47:73:c4:
6b:d6:53:2d:a3:60:fd:64:1c:fa:8a:9d:ea:13:2a:4b:71:7e:
0c:ed:c4:c2:fd:cc:bb:13:23:65:40:93:05:4a:eb:6f:b3:32:
6f:71:b6:0a:78:c6:7b:f3:bf:7f:6d:f3:ae:c4:7b:81:6a:9c:
23:ef:65:9a:f1:f3:9c:cf:2e:ed:39:44:ff:e6:74:e0:2a:fa:
f7:b4:79:80:0b:a1:74:f5:46:7a:37:e5:a8:46:9e:95:c6:13:
12:50:b3:f5:a4:e6:94:5f:46:57:ed:bb:14:3f:b9:5d:cc:b8:
8c:1d:6f:24:e8:10:e5:59:6f:8d:e6:d8:e5:e1:fe:20:94:93:
82:e8:d9:4c:d0:fc:33:59:52:78:6c:56:85:f3:4c:a2:12:91:
81:ae:be:ac:39:80:f5:aa:d1:03:50:57:7f:f1:4e:c0:f4:40:
9d:78:d4:4d:0d:b8:a9:a3:21:88:94:a5:79:e9:58:24:04:cd:
f7:0c:2e:2d:c2:99:c1:da:32:b8:87:ef:8e:c8:39:69:77:e7:
50:60:89:ca:c9:ab:d4:90:b6:a9:af:16:c9:b5:03:ff:7d:01:
ca:94:4c:75:f3:e2:af:49:03:aa:90:09:47:28:9e:b2:7b:1b:
bf:f4:78:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYban904rabU7kb5GnZB0+onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjMwMzEzMTA1OTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTllNGEwOTEyNDNiYzgwN2FmMmFhZTYwNzY5ZWU4ZDM0NTgzMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfd0tv+Pqs3uh+3lCN0JUHFNUICK
/Gv5tFuhHAYEu4ySZQ+pLl9xB3aUWgSoLk4h7uY8RQTbO6bWOZs77v/7N16SIoq0
OnCm9KQTD0E4y7eHBNtf6dbbPvdZKVJTs9TamrBNOreaQwzxCUbjB1dGlPIjzfSD
Y0ScVjrdgZY53dPJGxFq0Zq+Wv5c9vSTosmlXn+S2NH/RS3rcBBMlkAVkTz51yZG
V6U7TzHYGL8dCjhsDCJ9sw8vCL5dolgrwZY61OuKYWFp23WxH4V1Y0MlDTMlNqrp
rLdI4hbK1GIeZycgOIRz7Xaydj+Q7bY06EBheG/PMdUvd4FRzom+fabrewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmeSgkSQ7yAevKq5gdp7o00WDNoMB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEvMS1aNUtDUkpEdklCNjhxcm1CMm51alRSWU0yZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2QvMzg4ZmQ4LWM4MWYtNGU3MS1hZjUyLWMwYjFhZDQzNWI5
NS8xL3BfMF9pVE5kejRLR1pyS1ByWXJwazcxRWlIZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlxCzAN
BgkqhkiG9w0BAQsFAAOCAQEAPLNG9IQEptOQK1KcQP8vR3PEa9ZTLaNg/WQc+oqd
6hMqS3F+DO3Ewv3MuxMjZUCTBUrrb7Myb3G2CnjGe/O/f23zrsR7gWqcI+9lmvHz
nM8u7TlE/+Z04Cr697R5gAuhdPVGejflqEaelcYTElCz9aTmlF9GV+27FD+5Xcy4
jB1vJOgQ5VlvjebY5eH+IJSTgujZTND8M1lSeGxWhfNMohKRga6+rDmA9arRA1BX
f/FOwPRAnXjUTQ24qaMhiJSleelYJATN9wwuLcKZwdoyuIfvjsg5aXfnUGCJysmr
1JC2qa8WybUD/30BypRMdfPir0kDqpAJRyiesnsbv/R4pA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:21 2024 by rpki-client on console-fra.rpki-client.org