Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/XOrC6pVEUtP7UZXvwz9oRGpIPx4.roa
File: XOrC6pVEUtP7UZXvwz9oRGpIPx4.roa (raw, json)
Hash identifier: jH/15Ju1dZN5b8I0bNNCSPRWDuc4yyVLFUJPjeWOvBg=
Subject key identifier: 5C:EA:C2:EA:95:44:52:D3:FB:51:95:EF:C3:3F:68:44:6A:48:3F:1E
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018A0465F2491EE5CA0E31CC4CCF1B9C407C
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/XOrC6pVEUtP7UZXvwz9oRGpIPx4.roa
Signing time: Thu 17 Aug 2023 16:48:24 +0000
ROA not before: Thu 17 Aug 2023 16:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.139.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 08:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:65:f2:49:1e:e5:ca:0e:31:cc:4c:cf:1b:9c:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Aug 17 16:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ceac2ea954452d3fb5195efc33f68446a483f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:9e:53:c5:53:1b:91:1b:40:ca:c3:83:74:
2b:2b:64:11:df:0a:38:88:a2:d1:bf:1c:de:e6:77:
7d:09:10:53:7f:8a:f5:39:b8:0c:28:22:e7:37:9c:
07:79:57:4a:eb:80:18:3b:12:94:fc:1d:f8:b2:eb:
b8:b5:47:6c:76:06:1e:51:aa:30:d8:c4:ec:67:f8:
22:ee:b3:0e:67:84:82:f4:5e:13:37:cf:a2:51:e0:
b9:47:17:b9:69:36:98:d5:5d:8d:06:7c:1f:b2:37:
a8:84:9e:97:d8:eb:1f:e2:29:ee:f5:04:69:8d:34:
fc:04:29:d4:0f:94:2b:33:32:c0:aa:c0:5f:06:85:
d0:f4:17:ec:cd:54:f4:5b:fd:16:bc:62:33:e3:a0:
cc:c5:aa:ba:e8:8b:c7:12:04:ab:8b:06:6f:4e:a4:
50:54:c5:38:13:be:75:80:39:2a:9d:f0:ba:3c:0a:
b1:a1:58:ca:71:72:fc:01:fa:8f:b7:1c:41:e1:43:
0c:10:35:82:01:80:55:b2:7f:b7:cd:ae:e9:15:e2:
76:80:95:5f:90:76:c4:67:c3:b3:d0:8b:1d:47:ed:
55:71:0c:2c:4a:e8:0d:b0:cf:3b:61:6f:39:cf:cd:
05:ba:21:1d:0f:56:f6:71:70:b9:32:17:e4:bb:70:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:C2:EA:95:44:52:D3:FB:51:95:EF:C3:3F:68:44:6A:48:3F:1E
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/XOrC6pVEUtP7UZXvwz9oRGpIPx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a3:87:e7:26:73:04:3d:58:61:1d:fe:9f:53:89:2e:ac:29:
09:fa:74:a5:df:94:23:76:9d:ff:ed:77:c7:aa:6a:76:ca:6f:
26:96:3b:07:53:bb:dc:6b:8a:b0:fa:06:6d:19:bb:49:5a:ec:
27:32:56:fb:e5:e8:c6:f3:30:85:e7:f7:a2:5b:1c:5d:39:c1:
1b:b4:d6:e7:32:4a:06:0d:d2:93:9d:ae:f8:7e:55:60:50:8d:
c7:4e:71:3d:7c:52:67:ab:60:52:6b:f3:d4:95:97:c8:ee:fc:
5d:9e:b4:e8:09:e5:4e:9b:51:6f:b5:ec:6a:90:5d:fe:dc:a7:
d5:92:f1:80:3a:fc:c3:53:a3:ed:5e:ed:60:46:a7:32:d3:e3:
ea:6f:20:19:a1:52:60:b4:88:ca:06:71:5d:51:be:0b:40:97:
06:b9:c0:be:fd:33:c9:7c:cc:ae:1f:66:7e:e3:c1:ff:b5:eb:
45:68:0c:88:24:ec:2d:da:48:9b:ff:52:a3:a2:4c:62:18:e6:
96:60:69:26:8c:8b:16:ce:66:75:07:cb:c7:92:91:e6:58:70:
6a:f7:5a:71:62:f3:9e:be:68:39:f2:af:dd:7c:7b:c5:c1:57:
d1:42:b6:65:6b:dc:dd:2e:ed:4a:ac:44:b1:6c:ae:07:fa:8f:
50:0e:fe:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoEZfJJHuXKDjHMTM8bnEB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll
NjQwZDUwHhcNMjMwODE3MTY0ODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2VhYzJlYTk1NDQ1MmQzZmI1MTk1ZWZjMzNmNjg0NDZhNDgzZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXOeU8VTG5EbQMrDg3QrK2QR3wo4
iKLRvxze5nd9CRBTf4r1ObgMKCLnN5wHeVdK64AYOxKU/B34suu4tUdsdgYeUaow
2MTsZ/gi7rMOZ4SC9F4TN8+iUeC5Rxe5aTaY1V2NBnwfsjeohJ6X2Osf4inu9QRp
jTT8BCnUD5QrMzLAqsBfBoXQ9BfszVT0W/0WvGIz46DMxaq66IvHEgSriwZvTqRQ
VMU4E751gDkqnfC6PAqxoVjKcXL8AfqPtxxB4UMMEDWCAYBVsn+3za7pFeJ2gJVf
kHbEZ8Oz0IsdR+1VcQwsSugNsM87YW85z80FuiEdD1b2cXC5Mhfku3BsJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzqwuqVRFLT+1GV78M/aERqSD8eMB8GA1UdIwQY
MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt
NzBhNTU2YmE4YTExLzEvWE9yQzZwVkVVdFA3VVpYdnd6OW9SR3BJUHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx
LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsiMA0G
CSqGSIb3DQEBCwUAA4IBAQBbo4fnJnMEPVhhHf6fU4kurCkJ+nSl35Qjdp3/7XfH
qmp2ym8mljsHU7vca4qw+gZtGbtJWuwnMlb75ejG8zCF5/eiWxxdOcEbtNbnMkoG
DdKTna74flVgUI3HTnE9fFJnq2BSa/PUlZfI7vxdnrToCeVOm1FvtexqkF3+3KfV
kvGAOvzDU6PtXu1gRqcy0+PqbyAZoVJgtIjKBnFdUb4LQJcGucC+/TPJfMyuH2Z+
48H/tetFaAyIJOwt2kib/1KjokxiGOaWYGkmjIsWzmZ1B8vHkpHmWHBq91pxYvOe
vmg58q/dfHvFwVfRQrZla9zdLu1KrESxbK4H+o9QDv6Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org