Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/e8HdUtuUz_89iJPVry9qDbw6kpU.roa
File: e8HdUtuUz_89iJPVry9qDbw6kpU.roa (raw, json)
Hash identifier: VZ7Aj4ll1L7bmXFmCAhyGLJCf9vHLb8LrWyK0TJCaE0=
Subject key identifier: 7B:C1:DD:52:DB:94:CF:FF:3D:88:93:D5:AF:2F:6A:0D:BC:3A:92:95
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 0185704BBCE938C1EDF7DE79B1B85C972037
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/e8HdUtuUz_89iJPVry9qDbw6kpU.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.255.32.0/23 maxlen: 24
185.255.34.0/23 maxlen: 24
185.68.58.0/24 maxlen: 24
185.68.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bc:e9:38:c1:ed:f7:de:79:b1:b8:5c:97:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc1dd52db94cfff3d8893d5af2f6a0dbc3a9295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:de:ae:da:c0:f3:42:a4:4f:65:de:d3:f2:
f7:ca:2d:c6:f2:53:12:dd:60:2a:c1:bf:8a:22:1f:
06:fb:03:9a:88:7a:f4:7b:4c:db:12:80:70:80:23:
2a:39:af:96:3c:95:6f:96:7d:74:cf:6a:ee:27:0e:
bf:72:8f:c2:aa:48:e2:96:bc:bd:fe:8a:33:fc:e2:
ae:57:f4:f1:a1:88:3f:1e:45:78:f2:fe:88:eb:fa:
30:f2:1b:92:77:38:b1:42:01:d4:b7:29:c1:67:1d:
5c:94:e3:a6:2f:d6:a3:70:d5:44:a7:d6:d9:3c:d0:
dc:c3:bd:f7:78:ad:d6:c2:95:2d:e4:96:bf:61:e3:
5c:1c:67:b4:cb:41:fb:d1:c4:c2:38:56:48:39:9c:
c2:f1:5d:c5:b2:1e:ed:d3:b4:e5:25:60:f0:ea:fd:
1f:60:58:fd:2d:49:0e:8f:a8:dc:5b:b9:80:7a:ca:
c7:ed:3b:80:e1:78:1a:3d:33:d9:40:fa:f3:92:f9:
7b:b3:f6:77:22:65:ae:eb:de:31:0f:89:52:a2:0f:
3d:72:ac:4d:00:eb:03:c0:7e:e5:06:39:17:94:55:
bd:87:15:6d:b2:93:83:31:ce:d0:d6:8e:66:51:d5:
b6:15:ad:21:9f:c4:f6:a5:1b:b8:65:cc:7d:ad:f8:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:DD:52:DB:94:CF:FF:3D:88:93:D5:AF:2F:6A:0D:BC:3A:92:95
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/e8HdUtuUz_89iJPVry9qDbw6kpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.58.0/23
185.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:73:35:62:1b:94:b3:22:a8:35:aa:c5:73:5a:fc:d6:b9:bb:
ca:c2:18:25:d8:ea:de:a6:58:22:88:1d:c7:a6:de:1f:bb:4d:
38:e6:00:ed:31:fc:d9:ee:e6:3c:61:f5:e7:e0:36:28:f9:45:
99:73:c8:bf:25:6b:26:5e:3d:2c:8d:d2:9a:ff:0e:2e:aa:eb:
1b:e1:06:eb:86:6b:10:e1:dd:32:13:2d:25:97:1e:48:93:7c:
8e:9b:00:e6:7b:de:97:cd:c3:de:f0:ee:01:a8:8d:b8:27:e4:
d2:41:1c:76:6f:0b:76:48:24:50:69:fb:a1:62:1e:53:d3:ee:
17:35:a5:a2:67:33:d1:97:e6:c7:af:82:b8:a5:5f:60:ec:47:
00:d7:dc:7f:42:b6:13:f2:af:15:2e:81:33:f4:22:a2:ef:46:
2d:f4:b3:9c:1b:08:4d:d3:dc:bf:cc:8d:fa:d5:ab:a8:9b:ec:
7d:c7:95:25:57:da:78:5d:92:5f:4c:46:61:95:74:a9:b3:09:
8f:8a:7a:2c:10:48:4e:a6:1f:22:c5:5b:bd:89:7c:60:a1:b4:
f5:5b:66:43:57:29:9e:f6:59:76:78:92:13:41:8c:68:70:ea:
fe:b7:76:dd:2e:9a:5e:8f:0e:92:b9:ca:71:a1:a6:07:b9:7b:
8a:d5:08:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwS7zpOMHt9955sbhclyA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjIxNThhMGYyYTQyNjE3YTgyMWEwYjRmY2M5YzlhOTNm
NDI0NmQwHhcNMjMwMTAyMDIyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMxZGQ1MmRiOTRjZmZmM2Q4ODkzZDVhZjJmNmEwZGJjM2E5Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2LertrA80KkT2Xe0/L3yi3G8lMS
3WAqwb+KIh8G+wOaiHr0e0zbEoBwgCMqOa+WPJVvln10z2ruJw6/co/Cqkjilry9
/ooz/OKuV/TxoYg/HkV48v6I6/ow8huSdzixQgHUtynBZx1clOOmL9ajcNVEp9bZ
PNDcw733eK3WwpUt5Ja/YeNcHGe0y0H70cTCOFZIOZzC8V3Fsh7t07TlJWDw6v0f
YFj9LUkOj6jcW7mAesrH7TuA4XgaPTPZQPrzkvl7s/Z3ImWu694xD4lSog89cqxN
AOsDwH7lBjkXlFW9hxVtspODMc7Q1o5mUdW2Fa0hn8T2pRu4Zcx9rfiwEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHvB3VLblM//PYiT1a8vag28OpKVMB8GA1UdIwQY
MBaAFL7yFYoPKkJheoIaC0/MnJqT9CRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZJVmlnOHFRbUY2Z2hvTFQ4eWNtcFAwSkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80MmQ4MjEtNzRhZi00Y2VkLTk0ZWEt
MDI3YjU4ZTZmZGM1LzEvZThIZFV0dVV6Xzg5aUpQVnJ5OXFEYnc2a3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80MmQ4MjEtNzRhZi00Y2VkLTk0ZWEtMDI3YjU4ZTZmZGM1
LzEvdnZJVmlnOHFRbUY2Z2hvTFQ4eWNtcFAwSkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuUQ6AwQC
uf8gMA0GCSqGSIb3DQEBCwUAA4IBAQAaczViG5SzIqg1qsVzWvzWubvKwhgl2Ore
plgiiB3Hpt4fu0045gDtMfzZ7uY8YfXn4DYo+UWZc8i/JWsmXj0sjdKa/w4uqusb
4QbrhmsQ4d0yEy0llx5Ik3yOmwDme96XzcPe8O4BqI24J+TSQRx2bwt2SCRQafuh
Yh5T0+4XNaWiZzPRl+bHr4K4pV9g7EcA19x/QrYT8q8VLoEz9CKi70Yt9LOcGwhN
09y/zI361auom+x9x5UlV9p4XZJfTEZhlXSpswmPinosEEhOph8ixVu9iXxgobT1
W2ZDVyme9ll2eJITQYxocOr+t3bdLppejw6SucpxoaYHuXuK1Qhu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org