Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ehJS1DeOU7ePXyoDmvbknbm4YYY.roa
File: ehJS1DeOU7ePXyoDmvbknbm4YYY.roa (raw, json)
Hash identifier: xay/UGkpxHIp8mJAtOND6MP/pseuGHhUFyEvEy4bsK8=
Subject key identifier: 7A:12:52:D4:37:8E:53:B7:8F:5F:2A:03:9A:F6:E4:9D:B9:B8:61:86
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 018625FE51B0C0A969604C1D355BF37AF4B3
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ehJS1DeOU7ePXyoDmvbknbm4YYY.roa
Signing time: Mon 06 Feb 2023 09:11:09 +0000
ROA not before: Mon 06 Feb 2023 09:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.218.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:fe:51:b0:c0:a9:69:60:4c:1d:35:5b:f3:7a:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Feb 6 09:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a1252d4378e53b78f5f2a039af6e49db9b86186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:77:f0:f9:ab:85:68:37:7c:30:df:6e:58:
3b:cb:7d:cd:fa:28:65:e9:0e:40:e8:be:f0:0c:5e:
7e:9a:06:bb:11:eb:9c:3f:e2:08:c7:05:8b:2d:55:
e2:ff:1d:21:e1:8e:b2:41:9f:fc:30:f5:9c:ac:70:
51:71:22:b6:49:fd:c2:0e:02:12:7d:db:cc:13:65:
63:f8:d3:ae:7c:9a:cf:56:bf:e1:b8:e8:b8:92:73:
1a:13:d5:d5:45:31:71:f1:ba:21:fb:65:95:5f:c1:
93:62:56:53:15:b3:81:13:cf:d0:d5:e1:53:3a:73:
13:12:7e:0c:c4:72:bf:01:bd:da:f5:c1:e6:72:c5:
d0:c7:4c:94:f9:29:d3:3e:15:84:63:0e:56:ed:05:
ef:87:57:44:c5:7b:cc:c7:01:43:69:8f:83:d8:5e:
f9:73:39:73:6b:81:3f:63:11:f9:b1:19:17:a4:5b:
d8:33:39:69:ce:c8:f4:39:0f:13:49:fd:a0:03:8a:
b1:60:56:41:9e:b6:eb:d8:0e:39:29:d3:2d:07:9f:
ec:1e:c8:5f:2f:e1:f6:fd:9f:e8:f9:85:11:34:51:
77:0c:92:be:52:a2:25:d7:f2:a7:f7:01:3b:16:4f:
1f:de:42:cc:04:ba:64:2b:f5:0a:f4:dc:75:49:34:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:52:D4:37:8E:53:B7:8F:5F:2A:03:9A:F6:E4:9D:B9:B8:61:86
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ehJS1DeOU7ePXyoDmvbknbm4YYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:14:44:1b:8d:c7:ba:91:14:da:45:7a:1c:1f:f0:17:81:
c9:6d:66:51:28:4e:dd:e3:c0:ea:2b:7d:63:c0:99:bb:e6:44:
04:ad:00:78:45:49:a8:08:8f:bc:17:22:33:fb:a5:b6:21:bd:
e0:71:f4:e6:47:ff:14:32:85:a5:55:f6:b6:dd:f3:8a:f6:19:
cd:56:a3:84:cf:b5:02:5e:49:70:42:14:77:66:02:c2:ff:94:
4e:18:f4:da:9a:80:87:89:7b:8f:4a:a7:9d:84:4e:57:5a:13:
cc:1f:f0:23:4a:a1:ec:cd:80:dc:ef:65:1b:9c:04:e1:d9:55:
7e:e9:a2:9b:39:96:a7:00:9f:2b:7f:90:fc:ab:6c:8b:93:24:
7d:4a:df:af:50:31:f5:03:58:99:a9:b9:8e:7c:e2:4d:cd:da:
ce:e6:b1:2b:26:08:e9:00:91:6f:9e:fa:a5:f6:3d:81:8d:75:
56:7a:48:3f:ed:dd:54:b3:43:b5:7d:05:87:e1:77:12:e2:22:
4a:1b:f3:2c:d1:e9:5a:31:74:af:75:74:9a:2b:82:bf:96:d4:
76:d6:25:ec:24:38:c5:42:e6:e8:e2:fd:6f:e6:32:c2:24:a6:
87:ca:da:be:92:f3:61:11:2e:aa:5c:d5:74:e2:3c:da:95:16:
46:e8:9d:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYl/lGwwKlpYEwdNVvzevSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MThlZmY5MjNlMzViZjgzNzkyMzUzYzQ2MzNjYTIzMDBm
NzViNmMwHhcNMjMwMjA2MDkxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTEyNTJkNDM3OGU1M2I3OGY1ZjJhMDM5YWY2ZTQ5ZGI5Yjg2MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuut38PmrhWg3fDDfblg7y33N+ihl
6Q5A6L7wDF5+mga7EeucP+IIxwWLLVXi/x0h4Y6yQZ/8MPWcrHBRcSK2Sf3CDgIS
fdvME2Vj+NOufJrPVr/huOi4knMaE9XVRTFx8boh+2WVX8GTYlZTFbOBE8/Q1eFT
OnMTEn4MxHK/Ab3a9cHmcsXQx0yU+SnTPhWEYw5W7QXvh1dExXvMxwFDaY+D2F75
czlza4E/YxH5sRkXpFvYMzlpzsj0OQ8TSf2gA4qxYFZBnrbr2A45KdMtB5/sHshf
L+H2/Z/o+YURNFF3DJK+UqIl1/Kn9wE7Fk8f3kLMBLpkK/UK9Nx1STRfCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoSUtQ3jlO3j18qA5r25J25uGGGMB8GA1UdIwQY
MBaAFOYY7/kj41v4N5I1PEYzyiMA91tsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhqdi1TUGpXX2cza2pVOFJqUEtJd0QzVzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTA5MTItMGI4ZC00M2NjLThiZWUt
ZGVkYzVhNjk2NGZjLzEvZWhKUzFEZU9VN2VQWHlvRG12YmtuYm00WVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kNTA5MTItMGI4ZC00M2NjLThiZWUtZGVkYzVhNjk2NGZj
LzEvNWhqdi1TUGpXX2cza2pVOFJqUEtJd0QzVzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqOMA0G
CSqGSIb3DQEBCwUAA4IBAQA+1xREG43HupEU2kV6HB/wF4HJbWZRKE7d48DqK31j
wJm75kQErQB4RUmoCI+8FyIz+6W2Ib3gcfTmR/8UMoWlVfa23fOK9hnNVqOEz7UC
XklwQhR3ZgLC/5ROGPTamoCHiXuPSqedhE5XWhPMH/AjSqHszYDc72UbnATh2VV+
6aKbOZanAJ8rf5D8q2yLkyR9St+vUDH1A1iZqbmOfOJNzdrO5rErJgjpAJFvnvql
9j2BjXVWekg/7d1Us0O1fQWH4XcS4iJKG/Ms0elaMXSvdXSaK4K/ltR21iXsJDjF
Qubo4v1v5jLCJKaHytq+kvNhES6qXNV04jzalRZG6J24
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:55 2024 by rpki-client on console-fra.rpki-client.org