Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/seSK_Rglx1uSVYOcxCQ-0EO9AS8.roa
File: seSK_Rglx1uSVYOcxCQ-0EO9AS8.roa (raw, json)
Hash identifier: AS7kNHYv3DN2oxof/8tlqB/Cgj8lnA+kVh1McFmxyMo=
Subject key identifier: B1:E4:8A:FD:18:25:C7:5B:92:55:83:9C:C4:24:3E:D0:43:BD:01:2F
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 01856B9C69E42A83740F22BDF09EE2568AD3
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/seSK_Rglx1uSVYOcxCQ-0EO9AS8.roa
Signing time: Sun 01 Jan 2023 04:34:50 +0000
ROA not before: Sun 01 Jan 2023 04:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.72.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:69:e4:2a:83:74:0f:22:bd:f0:9e:e2:56:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Jan 1 04:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1e48afd1825c75b9255839cc4243ed043bd012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:b1:10:a8:66:31:73:dc:18:ac:1f:6f:2b:
c5:84:b3:a1:b9:31:e6:66:6b:42:c6:cf:11:e3:dd:
a7:06:a1:9b:07:5d:51:34:bf:3d:b7:6b:d9:55:44:
4d:f7:f6:a9:5b:b8:8a:6d:63:6f:c6:5b:37:62:f5:
21:fb:1b:01:20:a7:42:a7:c1:f9:82:30:ee:d3:92:
ac:7b:6c:49:c0:ee:12:5f:8e:cd:a9:17:3d:dc:12:
94:aa:3d:c7:58:e8:a0:88:aa:2d:00:42:b7:55:cb:
dd:0e:f5:27:bc:37:35:f8:89:45:2e:01:de:f3:76:
83:7a:23:13:24:e8:8b:76:60:88:40:69:31:b1:3a:
76:63:13:af:9c:77:ba:3d:5d:b2:1e:f2:48:35:e9:
7a:83:8a:0e:e7:66:44:13:54:9b:82:19:b2:78:18:
bf:e4:1f:43:9a:36:2e:fc:3d:eb:e8:c2:97:9d:20:
43:2c:aa:41:1d:08:ea:67:2a:b2:c9:9b:39:8f:27:
5c:00:8f:78:3a:94:fc:8e:31:ff:75:28:8a:cf:ad:
2d:03:41:83:c4:9e:28:d9:bd:e1:5b:1a:97:2f:9e:
da:3e:0e:49:c2:20:0f:15:ef:80:0c:74:ba:ac:2e:
aa:3b:b0:77:56:db:fa:c3:52:25:88:d0:e2:a5:d0:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:8A:FD:18:25:C7:5B:92:55:83:9C:C4:24:3E:D0:43:BD:01:2F
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/seSK_Rglx1uSVYOcxCQ-0EO9AS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.49.0/24
Signature Algorithm: sha256WithRSAEncryption
df:47:27:79:6a:aa:d9:f4:9c:a5:96:bb:64:e2:c9:92:3a:10:
a4:1c:01:05:71:05:e7:e7:cd:38:4f:d2:6b:a3:50:21:ef:85:
7c:ca:61:d7:7d:fb:51:01:a9:44:c9:77:d3:52:ab:99:02:5e:
5c:8b:10:98:ed:bc:70:ea:41:1c:0c:5f:16:64:d4:7d:49:8d:
99:df:dc:73:a2:a0:91:cc:7e:29:01:19:cb:2a:91:90:3a:06:
0d:5c:f2:33:fa:bd:0b:2b:1b:59:bf:52:07:8a:72:8f:61:92:
18:5f:d1:d2:a4:28:8a:00:ef:54:92:12:84:8e:f4:0d:5e:87:
f7:77:8f:70:cc:71:7a:85:44:56:b7:40:e5:14:5a:9b:46:b9:
65:e8:1b:a0:a8:e3:ed:38:67:ca:7f:a0:3c:5e:29:85:5c:58:
55:51:f2:87:c4:6b:3b:01:ea:1d:7e:68:ca:30:54:9e:61:2d:
b4:aa:15:c6:53:23:c0:44:ef:a9:7e:59:98:16:35:bf:d2:26:
54:a6:ee:15:d0:8d:19:df:ee:04:2f:a0:73:a6:82:f1:ec:f4:
e4:0f:01:d5:c1:83:09:3d:ce:30:71:43:ee:6c:5e:7d:b9:05:
74:c0:b8:7a:82:30:af:4a:78:90:b0:22:05:ba:89:6b:02:0e:
4a:1b:30:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrnGnkKoN0DyK98J7iVorTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl
YjA4ODgwHhcNMjMwMTAxMDQzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWU0OGFmZDE4MjVjNzViOTI1NTgzOWNjNDI0M2VkMDQzYmQwMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqKxEKhmMXPcGKwfbyvFhLOhuTHm
ZmtCxs8R492nBqGbB11RNL89t2vZVURN9/apW7iKbWNvxls3YvUh+xsBIKdCp8H5
gjDu05Kse2xJwO4SX47NqRc93BKUqj3HWOigiKotAEK3VcvdDvUnvDc1+IlFLgHe
83aDeiMTJOiLdmCIQGkxsTp2YxOvnHe6PV2yHvJINel6g4oO52ZEE1SbghmyeBi/
5B9DmjYu/D3r6MKXnSBDLKpBHQjqZyqyyZs5jydcAI94OpT8jjH/dSiKz60tA0GD
xJ4o2b3hWxqXL57aPg5JwiAPFe+ADHS6rC6qO7B3Vtv6w1IliNDipdA0/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHkiv0YJcdbklWDnMQkPtBDvQEvMB8GA1UdIwQY
MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt
YzI2NDczODVlNzI3LzEvc2VTS19SZ2x4MXVTVllPY3hDUS0wRU85QVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3
LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUgxMA0G
CSqGSIb3DQEBCwUAA4IBAQDfRyd5aqrZ9Jyllrtk4smSOhCkHAEFcQXn5804T9Jr
o1Ah74V8ymHXfftRAalEyXfTUquZAl5cixCY7bxw6kEcDF8WZNR9SY2Z39xzoqCR
zH4pARnLKpGQOgYNXPIz+r0LKxtZv1IHinKPYZIYX9HSpCiKAO9UkhKEjvQNXof3
d49wzHF6hURWt0DlFFqbRrll6BugqOPtOGfKf6A8XimFXFhVUfKHxGs7AeodfmjK
MFSeYS20qhXGUyPARO+pflmYFjW/0iZUpu4V0I0Z3+4EL6BzpoLx7PTkDwHVwYMJ
Pc4wcUPubF59uQV0wLh6gjCvSniQsCIFuolrAg5KGzAS
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:35 2024 by rpki-client on console-fra.rpki-client.org