Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2UaVDPAHHDtIRDnDGcgIs2DKn0U.roa
File: 2UaVDPAHHDtIRDnDGcgIs2DKn0U.roa (raw, json)
Hash identifier: fmnLKwB7eQbbnIqyye2at07HB/dfanCZX9rqZAI0DRc=
Subject key identifier: D9:46:95:0C:F0:07:1C:3B:48:44:39:C3:19:C8:08:B3:60:CA:9F:45
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01905896882502DFCA2747DBA0ECD33B8180
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2UaVDPAHHDtIRDnDGcgIs2DKn0U.roa
Signing time: Thu 27 Jun 2024 07:26:18 +0000
ROA not before: Thu 27 Jun 2024 07:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.233.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 21:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:96:88:25:02:df:ca:27:47:db:a0:ec:d3:3b:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jun 27 07:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d946950cf0071c3b484439c319c808b360ca9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:9c:0e:37:54:6e:8c:b0:b5:5e:f7:2a:42:
62:35:fc:dc:df:e6:2a:0f:44:56:49:2f:3f:71:fb:
33:da:19:d0:ed:5d:25:5b:b1:77:31:70:bc:f6:d4:
36:27:2a:ab:4c:27:1c:b4:a8:30:a5:31:f2:4f:af:
32:c9:98:7d:8e:c2:cf:8d:9f:44:87:2f:4e:b8:d3:
0c:97:3e:a5:09:bf:85:a9:4c:0f:23:67:60:1e:f6:
d4:c1:5c:7a:f6:46:f2:fb:22:e4:dd:31:a4:ef:a6:
a1:f1:d4:23:fb:12:69:3e:81:36:a5:ff:e8:e3:b6:
d2:59:6a:9b:6b:2b:e3:6b:dc:16:d3:d2:a3:f5:9a:
af:e0:c7:c9:f1:96:dd:b2:e8:fc:c2:c1:a6:40:ba:
37:84:cb:48:50:4a:1d:dc:76:42:15:88:2c:1b:7b:
c2:51:6d:8f:96:39:9d:73:2e:68:5b:73:84:97:30:
c7:ad:81:b7:7c:93:fc:b8:10:41:b0:e5:cf:8c:c6:
9f:59:54:40:1a:50:7c:00:d5:7a:f6:c6:9f:ea:34:
4d:e8:66:39:c8:d4:61:62:11:5e:47:fd:1a:f0:57:
39:47:8d:37:70:22:66:cc:f4:15:ed:64:3a:9b:48:
02:77:f9:69:6e:cd:62:9c:92:66:a6:d3:eb:21:6d:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:46:95:0C:F0:07:1C:3B:48:44:39:C3:19:C8:08:B3:60:CA:9F:45
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2UaVDPAHHDtIRDnDGcgIs2DKn0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
73:50:f3:a7:75:60:6f:98:43:af:d2:d1:55:31:22:e7:34:2a:
5c:ff:9d:6d:f0:ba:79:a3:b5:1f:9e:5b:bd:ac:b0:53:83:ac:
14:af:dc:13:85:0f:1f:ee:a3:fc:c7:f4:58:b4:08:af:32:58:
da:95:ed:eb:73:10:d4:74:ef:fe:a1:9a:9c:87:28:69:bb:37:
5f:99:af:84:5a:d7:b4:78:b3:0d:00:99:7e:e3:c1:71:5a:e2:
b6:12:70:db:93:ca:dd:20:63:2e:54:80:24:5a:61:1f:e1:b7:
c1:53:d5:19:59:d0:b5:62:0b:a2:51:c1:2c:a7:a4:c4:ec:f3:
15:ea:72:ea:2a:8b:0a:15:7a:4f:5a:aa:61:1f:2f:99:73:eb:
70:b0:30:ff:db:f5:92:9e:14:46:18:24:08:ee:63:a4:0a:82:
81:5e:3e:e9:85:89:40:1e:34:53:af:bb:34:21:3f:27:45:a9:
a4:6c:fb:64:a7:92:37:1a:8b:75:09:b5:1a:98:ee:6a:84:d3:
a3:04:30:cf:5a:46:1a:80:69:65:60:1c:9d:fb:91:59:1d:06:
1a:cd:e5:96:94:2d:7e:3e:f0:3c:3e:92:2e:e1:14:78:57:cd:
ec:fb:44:e4:02:16:ae:c9:83:f3:d3:f9:d7:77:29:cc:e5:2b:
fd:f6:c4:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBYloglAt/KJ0fboOzTO4GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjQwNjI3MDcyNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTQ2OTUwY2YwMDcxYzNiNDg0NDM5YzMxOWM4MDhiMzYwY2E5ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i6cDjdUboywtV73KkJiNfzc3+Yq
D0RWSS8/cfsz2hnQ7V0lW7F3MXC89tQ2JyqrTCcctKgwpTHyT68yyZh9jsLPjZ9E
hy9OuNMMlz6lCb+FqUwPI2dgHvbUwVx69kby+yLk3TGk76ah8dQj+xJpPoE2pf/o
47bSWWqbayvja9wW09Kj9Zqv4MfJ8Zbdsuj8wsGmQLo3hMtIUEod3HZCFYgsG3vC
UW2Pljmdcy5oW3OElzDHrYG3fJP8uBBBsOXPjMafWVRAGlB8ANV69saf6jRN6GY5
yNRhYhFeR/0a8Fc5R403cCJmzPQV7WQ6m0gCd/lpbs1inJJmptPrIW2PmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlGlQzwBxw7SEQ5wxnICLNgyp9FMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvMlVhVkRQQUhIRHRJUkRuREdjZ0lzMkRLbjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemkMA0G
CSqGSIb3DQEBCwUAA4IBAQBzUPOndWBvmEOv0tFVMSLnNCpc/51t8Lp5o7Ufnlu9
rLBTg6wUr9wThQ8f7qP8x/RYtAivMljale3rcxDUdO/+oZqchyhpuzdfma+EWte0
eLMNAJl+48FxWuK2EnDbk8rdIGMuVIAkWmEf4bfBU9UZWdC1YguiUcEsp6TE7PMV
6nLqKosKFXpPWqphHy+Zc+twsDD/2/WSnhRGGCQI7mOkCoKBXj7phYlAHjRTr7s0
IT8nRamkbPtkp5I3Got1CbUamO5qhNOjBDDPWkYagGllYByd+5FZHQYazeWWlC1+
PvA8PpIu4RR4V83s+0TkAhauyYPz0/nXdynM5Sv99sRZ
-----END CERTIFICATE-----
Generated at Sun Jun 30 01:20:56 2024 by rpki-client on console-fra.rpki-client.org