Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/xOt7ThKleZNQ_pga6myA1ZQ60X0.roa
File: xOt7ThKleZNQ_pga6myA1ZQ60X0.roa (raw, json)
Hash identifier: saNd/sI462Q4ivCFVoQWFyoMRlUM9RW8J2qCPPyqSWY=
Subject key identifier: C4:EB:7B:4E:12:A5:79:93:50:FE:98:1A:EA:6C:80:D5:94:3A:D1:7D
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0187B39A3A7CA1B880A02A5A198370779965
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/xOt7ThKleZNQ_pga6myA1ZQ60X0.roa
Signing time: Mon 24 Apr 2023 14:10:41 +0000
ROA not before: Mon 24 Apr 2023 14:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 185.113.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 18:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:9a:3a:7c:a1:b8:80:a0:2a:5a:19:83:70:77:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Apr 24 14:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4eb7b4e12a5799350fe981aea6c80d5943ad17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:84:d2:58:43:a7:47:b5:a5:cf:b6:46:9e:
0a:65:3d:bd:f4:e5:df:c8:80:d7:ef:f6:7c:15:ee:
6a:85:4f:b8:0d:50:71:61:49:e7:61:2e:7b:6a:49:
68:e5:03:b0:0d:ce:a6:86:49:8b:98:66:0f:88:ac:
90:f6:ac:92:c5:f0:32:04:7d:a7:c5:e8:35:22:59:
3e:b1:8c:31:b7:24:7c:0b:4d:10:80:66:54:0b:e1:
70:2d:28:f5:88:fc:cf:18:8a:69:d2:c3:1f:08:6f:
0b:36:37:f0:18:63:2a:2e:61:0f:68:6e:d8:ae:78:
16:3e:1a:28:50:aa:1a:a0:52:e8:67:09:94:88:92:
c6:28:63:e0:13:eb:7b:02:e5:c3:d4:fd:19:e0:6c:
e8:34:46:5b:b9:3b:a8:d2:ba:e5:11:39:5e:06:bc:
35:2e:d7:a3:b2:de:a2:59:3b:71:25:0e:ae:42:1b:
f4:32:d6:3c:22:98:c4:a9:c7:f1:ed:c3:a7:02:b1:
e9:81:0f:48:dc:b4:4a:1d:7a:2d:03:b0:63:ee:63:
38:d3:77:6c:be:fa:1a:b8:e2:51:c2:41:c1:96:f2:
c1:29:8d:22:5b:fe:e5:d9:b4:dd:62:02:b8:83:37:
25:33:63:79:d4:c8:ab:93:51:e5:fd:9c:f9:ac:3e:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:7B:4E:12:A5:79:93:50:FE:98:1A:EA:6C:80:D5:94:3A:D1:7D
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/xOt7ThKleZNQ_pga6myA1ZQ60X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ed:35:4f:35:f8:ec:0a:b2:9e:ef:61:b2:c5:7d:76:e6:1b:
f5:1b:a1:e6:4e:29:2c:bf:97:73:05:f3:61:a8:3a:71:a2:d2:
7e:6c:d3:f2:f2:43:0d:1d:65:61:ba:66:7c:b6:31:75:a6:79:
dd:67:b8:d1:e1:8b:82:ee:0e:17:d2:de:fb:23:7a:44:a2:4a:
e0:2d:ea:05:e9:bc:07:d5:78:19:1e:01:63:60:3d:90:ed:a2:
ca:06:16:d8:d5:25:64:03:10:91:bd:0e:cc:29:36:41:4a:83:
34:60:63:aa:22:ae:f0:71:66:18:3c:83:12:c4:43:c5:f7:8c:
8e:59:dc:8e:31:50:93:da:2d:24:fd:32:a2:2c:c0:c8:8b:4a:
10:84:09:6e:cc:cd:d9:19:7e:9f:79:2f:68:da:8a:eb:94:14:
87:f2:da:de:50:4e:49:31:92:30:20:6b:68:70:de:b8:31:cd:
91:5d:20:7f:46:76:2a:ac:fd:6c:c4:43:11:0d:1b:76:39:66:
7e:19:8f:cb:3f:3a:a2:5f:c2:e5:52:27:22:8a:41:f3:30:dd:
43:ba:1f:54:1e:0f:c5:1d:37:33:7d:ca:9f:ca:8d:e7:4d:a8:
7f:78:75:1d:5c:38:65:da:da:98:85:44:89:90:0d:22:6f:80:
27:3e:c4:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYezmjp8obiAoCpaGYNwd5llMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjMwNDI0MTQxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGViN2I0ZTEyYTU3OTkzNTBmZTk4MWFlYTZjODBkNTk0M2FkMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGeE0lhDp0e1pc+2Rp4KZT299OXf
yIDX7/Z8Fe5qhU+4DVBxYUnnYS57aklo5QOwDc6mhkmLmGYPiKyQ9qySxfAyBH2n
xeg1Ilk+sYwxtyR8C00QgGZUC+FwLSj1iPzPGIpp0sMfCG8LNjfwGGMqLmEPaG7Y
rngWPhooUKoaoFLoZwmUiJLGKGPgE+t7AuXD1P0Z4GzoNEZbuTuo0rrlETleBrw1
Ltejst6iWTtxJQ6uQhv0MtY8IpjEqcfx7cOnArHpgQ9I3LRKHXotA7Bj7mM403ds
vvoauOJRwkHBlvLBKY0iW/7l2bTdYgK4gzclM2N51Mirk1Hl/Zz5rD4IdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTre04SpXmTUP6YGupsgNWUOtF9MB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEveE90N1RoS2xlWk5RX3BnYTZteUExWlE2MFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1
LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXELMA0G
CSqGSIb3DQEBCwUAA4IBAQB97TVPNfjsCrKe72GyxX125hv1G6HmTiksv5dzBfNh
qDpxotJ+bNPy8kMNHWVhumZ8tjF1pnndZ7jR4YuC7g4X0t77I3pEokrgLeoF6bwH
1XgZHgFjYD2Q7aLKBhbY1SVkAxCRvQ7MKTZBSoM0YGOqIq7wcWYYPIMSxEPF94yO
WdyOMVCT2i0k/TKiLMDIi0oQhAluzM3ZGX6feS9o2orrlBSH8treUE5JMZIwIGto
cN64Mc2RXSB/RnYqrP1sxEMRDRt2OWZ+GY/LPzqiX8LlUiciikHzMN1Duh9UHg/F
HTczfcqfyo3nTah/eHUdXDhl2tqYhUSJkA0ib4AnPsTn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:21 2024 by rpki-client on console-fra.rpki-client.org