Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/rfmT-ebh02LYLk7ZjadUiB1EMpI.roa
File: rfmT-ebh02LYLk7ZjadUiB1EMpI.roa (raw, json)
Hash identifier: buPi/Qb/OWlStHxj0EMp9IS5Fc83BRxY1mzuGSNn5Us=
Subject key identifier: AD:F9:93:F9:E6:E1:D3:62:D8:2E:4E:D9:8D:A7:54:88:1D:44:32:92
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 018572CCA8CFC4C4D433ECC74472C37D7F7D
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/rfmT-ebh02LYLk7ZjadUiB1EMpI.roa
Signing time: Mon 02 Jan 2023 14:04:53 +0000
ROA not before: Mon 02 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.253.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a8:cf:c4:c4:d4:33:ec:c7:44:72:c3:7d:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 2 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adf993f9e6e1d362d82e4ed98da754881d443292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:23:02:d9:69:e6:ad:9d:f9:2f:c2:b5:64:
53:0b:08:08:b5:6d:43:49:c5:c9:c5:86:32:3d:d7:
23:cb:ae:67:36:2a:d1:f6:5e:78:0c:4b:03:71:8c:
00:9b:92:8c:0c:ba:83:be:be:f6:77:46:8e:75:54:
5d:bb:c2:76:37:92:8f:2d:3a:0a:ec:e1:7d:60:f5:
05:32:69:db:1e:a6:80:cf:39:07:11:29:e2:85:3d:
6a:0b:88:40:4c:9f:b7:ed:a5:16:27:5b:7f:35:b2:
80:04:7b:bc:0b:2f:f6:a0:bf:f4:3a:60:2e:d1:3a:
3f:41:19:90:e7:92:29:c2:fe:ae:fa:37:e6:47:0e:
3a:eb:bf:57:c2:5e:e5:95:c4:cf:e2:34:98:9d:5c:
ac:7c:81:05:20:15:ba:42:c4:11:f8:76:9a:bf:ee:
3d:c5:ae:bb:ad:53:e9:63:be:12:d2:91:fc:68:e1:
37:19:b2:11:b9:55:ce:e1:85:23:9c:e2:26:10:66:
ce:e7:b1:fe:49:da:87:0d:8d:ca:68:64:1b:0f:22:
e7:3b:a2:ee:75:bd:13:b6:aa:cb:3f:bf:f3:d3:78:
54:ea:a5:c7:23:49:ec:ce:44:ad:c2:2a:f7:c5:04:
e4:a9:17:28:38:c1:68:01:9c:4f:d4:e9:ee:c4:17:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:93:F9:E6:E1:D3:62:D8:2E:4E:D9:8D:A7:54:88:1D:44:32:92
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/rfmT-ebh02LYLk7ZjadUiB1EMpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:4c:dc:0a:ca:b1:2a:9e:3c:d6:bd:e9:dd:1b:09:9b:95:2b:
15:38:33:6d:a8:27:50:da:39:9e:53:97:19:e2:a6:c2:48:42:
b7:a2:a5:87:80:cd:ee:14:12:3f:fd:3f:61:e0:b3:97:21:da:
34:15:44:25:be:78:aa:aa:f2:97:85:f0:d2:7c:65:d2:f7:3f:
28:7c:64:76:79:2f:e7:fb:c7:e3:83:53:69:53:48:89:84:b4:
21:74:fd:a4:03:97:b3:2c:9a:7a:c1:be:23:27:54:8b:43:5c:
41:36:80:1d:89:27:3a:51:b7:e8:6f:22:0c:77:80:9a:8c:30:
5e:f5:a5:11:bf:b1:38:a5:01:f8:db:6d:39:fa:77:69:7d:d3:
4d:78:6c:d1:6c:2c:79:33:dd:22:93:2d:f9:94:99:b9:66:4f:
70:f2:89:b0:ac:3d:a6:b2:52:89:b9:5e:aa:c4:d0:6f:81:32:
3b:49:a7:8e:26:6d:62:53:08:dd:55:dc:8b:80:6e:51:9f:11:
dc:f8:a6:48:f8:62:4d:aa:2a:af:17:cd:1b:d5:4d:00:a9:bf:
6f:fe:2e:fa:61:59:3e:de:56:2b:82:fb:2c:f1:20:7a:25:d7:
fb:6e:11:57:8f:73:38:51:6d:fc:73:dd:71:ee:a4:d9:44:c8:
5d:0d:aa:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyzKjPxMTUM+zHRHLDfX99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjMwMTAyMTQwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGY5OTNmOWU2ZTFkMzYyZDgyZTRlZDk4ZGE3NTQ4ODFkNDQzMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpcjAtlp5q2d+S/CtWRTCwgItW1D
ScXJxYYyPdcjy65nNirR9l54DEsDcYwAm5KMDLqDvr72d0aOdVRdu8J2N5KPLToK
7OF9YPUFMmnbHqaAzzkHESnihT1qC4hATJ+37aUWJ1t/NbKABHu8Cy/2oL/0OmAu
0To/QRmQ55Ipwv6u+jfmRw46679Xwl7llcTP4jSYnVysfIEFIBW6QsQR+Haav+49
xa67rVPpY74S0pH8aOE3GbIRuVXO4YUjnOImEGbO57H+SdqHDY3KaGQbDyLnO6Lu
db0TtqrLP7/z03hU6qXHI0nszkStwir3xQTkqRcoOMFoAZxP1OnuxBcOAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK35k/nm4dNi2C5O2Y2nVIgdRDKSMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvcmZtVC1lYmgwMkxZTGs3WmphZFVpQjFFTXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0JMA0G
CSqGSIb3DQEBCwUAA4IBAQDETNwKyrEqnjzWvendGwmblSsVODNtqCdQ2jmeU5cZ
4qbCSEK3oqWHgM3uFBI//T9h4LOXIdo0FUQlvniqqvKXhfDSfGXS9z8ofGR2eS/n
+8fjg1NpU0iJhLQhdP2kA5ezLJp6wb4jJ1SLQ1xBNoAdiSc6UbfobyIMd4CajDBe
9aURv7E4pQH42205+ndpfdNNeGzRbCx5M90iky35lJm5Zk9w8omwrD2mslKJuV6q
xNBvgTI7SaeOJm1iUwjdVdyLgG5RnxHc+KZI+GJNqiqvF80b1U0Aqb9v/i76YVk+
3lYrgvss8SB6Jdf7bhFXj3M4UW38c91x7qTZRMhdDarq
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:35 2024 by rpki-client on console-ams.rpki-client.org