Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/uXO2p7PXHxruJYEefmMpKXWk_AE.roa
File: uXO2p7PXHxruJYEefmMpKXWk_AE.roa (raw, json)
Hash identifier: OFdnzIy8N/SjP/8bOvUMAlxkYQCb4p32TMQjtFXmKms=
Subject key identifier: B9:73:B6:A7:B3:D7:1F:1A:EE:25:81:1E:7E:63:29:29:75:A4:FC:01
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 018CC94E55A2D84342A4EF9FAF9BA65D1F02
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/uXO2p7PXHxruJYEefmMpKXWk_AE.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212041
IP address blocks: 185.252.130.0/24 maxlen: 31
185.252.129.0/24 maxlen: 31
185.252.128.0/24 maxlen: 31
185.252.131.0/24 maxlen: 31
Validation: Failed, certificate revoked on Tue 30 Jan 2024 15:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:55:a2:d8:43:42:a4:ef:9f:af:9b:a6:5d:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b973b6a7b3d71f1aee25811e7e63292975a4fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:e2:cc:da:cd:12:ce:50:bc:4d:80:cc:9a:
79:ed:4f:c1:2a:84:11:99:1b:b1:ef:1a:c6:fb:ae:
63:9e:ad:75:c3:8c:f5:35:81:61:24:bc:62:30:e5:
35:64:a5:15:b0:92:6b:c8:da:38:7b:49:9b:6d:0e:
c8:73:a7:c3:a0:0a:14:aa:6a:33:70:73:5e:90:5e:
2f:75:96:a4:69:5c:89:35:d2:fe:23:80:67:55:10:
03:2a:b5:7a:6e:07:b8:9d:18:b7:47:8a:aa:50:83:
79:c4:bb:8e:59:c0:f3:61:6c:c5:9f:2e:0d:66:af:
ec:3c:21:a8:3d:75:df:26:83:5c:38:31:01:21:0d:
43:eb:af:9a:5f:4f:51:cc:f0:08:60:bc:f1:c4:e4:
dd:5b:04:41:d9:09:5c:ee:26:27:06:fe:ca:bf:5f:
57:61:77:ff:1a:08:71:31:0b:54:5d:55:2f:30:6c:
db:c6:79:e2:03:b0:35:d3:97:11:1d:e5:61:6b:b8:
f6:03:db:11:83:f7:d2:9f:69:32:db:62:1d:13:78:
00:be:a1:49:b6:c3:c8:66:43:6a:ba:db:26:c0:2a:
4c:a5:ee:bd:e4:2d:c7:ce:96:45:35:42:b4:b4:69:
90:16:cc:19:b7:7e:a7:fd:1b:e4:83:3e:ce:f5:1a:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:B6:A7:B3:D7:1F:1A:EE:25:81:1E:7E:63:29:29:75:A4:FC:01
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/uXO2p7PXHxruJYEefmMpKXWk_AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
35:1a:83:c6:ef:7b:65:c5:b0:8f:cc:4d:95:1d:4e:5b:85:ef:
d8:05:a7:b8:4b:29:be:cc:ba:94:06:db:1a:d6:d9:5a:73:06:
52:bb:9f:86:bc:0c:49:24:83:5b:75:0d:00:af:73:d3:0e:c1:
db:25:0a:a5:8d:1c:e1:60:d4:f5:ec:4e:4d:cd:88:85:fa:86:
89:78:d2:f0:e2:51:d9:71:48:e5:39:06:50:d6:61:61:34:21:
8e:3a:f1:9e:bd:07:9a:64:e0:e9:47:06:95:46:ce:4a:51:90:
11:0b:87:96:b5:b9:b8:c4:00:db:25:cf:eb:dd:04:51:9b:4e:
c4:ca:32:88:29:ea:dd:4c:a6:c6:5e:6a:b7:13:26:0f:83:e6:
9d:17:15:11:06:cc:5a:b3:44:46:6b:f9:8b:6e:a9:95:e3:a3:
ed:c4:87:8b:1b:4f:3f:e9:90:1c:55:4d:88:ac:03:d1:fd:39:
e2:04:ff:58:ac:bd:7a:6a:ff:6d:fb:c8:b4:11:c4:dd:69:3c:
ba:b3:ce:3a:88:9b:e2:54:64:a9:17:d2:5e:d2:c6:8a:59:85:
cc:0a:d8:c1:76:c6:37:c4:3a:7d:16:80:58:c3:d1:8c:a2:d8:
81:df:70:48:ce:84:cb:4b:28:80:c3:12:6a:8c:27:d7:73:29:
08:59:a7:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTlWi2ENCpO+fr5umXR8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk
ODUyMGUwHhcNMjQwMTAyMDgzMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTczYjZhN2IzZDcxZjFhZWUyNTgxMWU3ZTYzMjkyOTc1YTRmYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmPizNrNEs5QvE2AzJp57U/BKoQR
mRux7xrG+65jnq11w4z1NYFhJLxiMOU1ZKUVsJJryNo4e0mbbQ7Ic6fDoAoUqmoz
cHNekF4vdZakaVyJNdL+I4BnVRADKrV6bge4nRi3R4qqUIN5xLuOWcDzYWzFny4N
Zq/sPCGoPXXfJoNcODEBIQ1D66+aX09RzPAIYLzxxOTdWwRB2Qlc7iYnBv7Kv19X
YXf/GghxMQtUXVUvMGzbxnniA7A105cRHeVha7j2A9sRg/fSn2ky22IdE3gAvqFJ
tsPIZkNqutsmwCpMpe695C3HzpZFNUK0tGmQFswZt36n/Rvkgz7O9RpC2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlztqez1x8a7iWBHn5jKSl1pPwBMB8GA1UdIwQY
MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt
OGNkNDJjZWRlMjIwLzEvdVhPMnA3UFhIeHJ1SllFZWZtTXBLWFdrX0FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw
LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufyAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1GoPG73tlxbCPzE2VHU5bhe/YBae4Sym+zLqUBtsa
1tlacwZSu5+GvAxJJINbdQ0Ar3PTDsHbJQqljRzhYNT17E5NzYiF+oaJeNLw4lHZ
cUjlOQZQ1mFhNCGOOvGevQeaZODpRwaVRs5KUZARC4eWtbm4xADbJc/r3QRRm07E
yjKIKerdTKbGXmq3EyYPg+adFxURBsxas0RGa/mLbqmV46PtxIeLG08/6ZAcVU2I
rAPR/TniBP9YrL16av9t+8i0EcTdaTy6s846iJviVGSpF9Je0saKWYXMCtjBdsY3
xDp9FoBYw9GMotiB33BIzoTLSyiAwxJqjCfXcykIWaeV
-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:07 2024 by rpki-client on console-ams.rpki-client.org