Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/4a9Qv2CwPSFFjzbTtoW69OEMh7Q.roa
File: 4a9Qv2CwPSFFjzbTtoW69OEMh7Q.roa (raw, json)
Hash identifier: uR/Q071r8+4zT3654m/SLoP3DJn//6ACwmNm90riD2U=
Subject key identifier: E1:AF:50:BF:60:B0:3D:21:45:8F:36:D3:B6:85:BA:F4:E1:0C:87:B4
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01904AFA62E296568F991F93029201647804
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/4a9Qv2CwPSFFjzbTtoW69OEMh7Q.roa
Signing time: Mon 24 Jun 2024 16:00:41 +0000
ROA not before: Mon 24 Jun 2024 16:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.233.164.0/24 maxlen: 24
185.233.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 07:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:fa:62:e2:96:56:8f:99:1f:93:02:92:01:64:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jun 24 16:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1af50bf60b03d21458f36d3b685baf4e10c87b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:03:5b:f0:d5:b1:50:ee:3d:80:5c:a0:87:
29:d4:06:97:6e:25:56:c4:5c:e2:8f:55:6e:e2:e1:
b3:ff:45:6b:0d:c6:18:ee:e8:9f:29:45:e5:47:7c:
07:32:dc:89:2f:89:c6:4d:74:76:eb:f1:83:12:8c:
b9:08:88:29:17:bc:ee:44:e2:9f:0b:b7:a8:5a:2a:
15:e9:82:9a:48:17:11:3f:99:cc:00:4b:b5:cb:15:
83:3e:e7:f2:31:24:00:f9:de:3b:01:6b:e1:fb:6d:
4c:c5:53:a7:0b:a7:2a:8c:76:69:5d:ba:69:c1:43:
cb:77:5c:99:0f:f4:cb:41:44:ca:a7:cb:fb:b0:3e:
9b:6e:f8:0e:1d:3b:58:7f:bd:6b:ba:c4:62:7d:8e:
37:00:c3:9c:ef:91:ba:c2:d1:81:22:50:b3:11:47:
e3:79:fd:34:8b:fa:10:75:d5:37:a0:c8:56:50:22:
ba:43:12:f0:86:c9:88:e3:57:0c:85:ad:c9:65:4d:
3e:90:b3:79:b8:25:78:e8:94:81:85:4b:b6:8e:ee:
c2:d7:b5:3b:0e:d1:2f:47:e4:6c:31:c6:4b:b7:d6:
73:cd:ce:4b:87:dd:a6:7f:5c:88:bc:ff:e4:94:0e:
cb:32:29:ee:9f:5b:74:33:08:bd:b7:2e:27:4c:09:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:50:BF:60:B0:3D:21:45:8F:36:D3:B6:85:BA:F4:E1:0C:87:B4
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/4a9Qv2CwPSFFjzbTtoW69OEMh7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:64:26:e1:89:8f:fa:c6:3e:a7:0c:c6:3e:86:69:f3:aa:dc:
fa:0d:c5:2c:56:ab:53:ff:0d:11:71:6e:b8:cb:81:20:67:82:
e0:5d:cd:c6:a0:52:fd:8e:c4:2a:4d:18:aa:0e:7f:1c:ab:73:
85:e0:92:c0:14:ee:02:88:c6:6f:63:f5:cf:cd:ef:43:d9:ba:
97:24:35:3e:14:64:03:2e:9c:58:06:6e:7a:23:1e:ac:c1:d3:
82:66:d6:28:6d:22:b8:18:fe:80:ba:26:32:0d:47:34:bd:07:
8f:57:14:00:5c:38:3b:49:33:4c:4b:35:6c:b4:7e:54:bd:3f:
40:f8:79:81:3b:b7:e7:6e:c0:e2:95:05:ca:0a:10:e1:62:96:
0f:8a:88:cc:09:3a:70:f9:44:52:a5:36:eb:af:9d:ed:90:16:
da:7d:49:d9:e2:7b:73:94:6c:39:dc:f6:30:9a:d5:6c:25:3e:
ba:99:a0:c3:91:7b:f2:8c:48:ec:b5:12:69:59:a2:15:68:5f:
a9:39:c5:3f:c6:43:56:4a:72:3d:36:86:8e:12:40:5b:8f:04:
27:80:7a:29:85:0a:77:31:51:d8:1d:d5:ee:50:44:1a:6b:42:
42:b3:f7:f4:b7:d3:31:b3:ff:47:90:52:6e:80:e3:ae:c6:b2:
30:f0:87:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBK+mLillaPmR+TApIBZHgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjQwNjI0MTYwMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFmNTBiZjYwYjAzZDIxNDU4ZjM2ZDNiNjg1YmFmNGUxMGM4N2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvogDW/DVsVDuPYBcoIcp1AaXbiVW
xFzij1Vu4uGz/0VrDcYY7uifKUXlR3wHMtyJL4nGTXR26/GDEoy5CIgpF7zuROKf
C7eoWioV6YKaSBcRP5nMAEu1yxWDPufyMSQA+d47AWvh+21MxVOnC6cqjHZpXbpp
wUPLd1yZD/TLQUTKp8v7sD6bbvgOHTtYf71rusRifY43AMOc75G6wtGBIlCzEUfj
ef00i/oQddU3oMhWUCK6QxLwhsmI41cMha3JZU0+kLN5uCV46JSBhUu2ju7C17U7
DtEvR+RsMcZLt9Zzzc5Lh92mf1yIvP/klA7LMinun1t0Mwi9ty4nTAkitwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOGvUL9gsD0hRY8207aFuvThDIe0MB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvNGE5UXYyQ3dQU0ZGanpiVHRvVzY5T0VNaDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuemkAwQA
uemmMA0GCSqGSIb3DQEBCwUAA4IBAQCdZCbhiY/6xj6nDMY+hmnzqtz6DcUsVqtT
/w0RcW64y4EgZ4LgXc3GoFL9jsQqTRiqDn8cq3OF4JLAFO4CiMZvY/XPze9D2bqX
JDU+FGQDLpxYBm56Ix6swdOCZtYobSK4GP6AuiYyDUc0vQePVxQAXDg7STNMSzVs
tH5UvT9A+HmBO7fnbsDilQXKChDhYpYPiojMCTpw+URSpTbrr53tkBbafUnZ4ntz
lGw53PYwmtVsJT66maDDkXvyjEjstRJpWaIVaF+pOcU/xkNWSnI9NoaOEkBbjwQn
gHophQp3MVHYHdXuUEQaa0JCs/f0t9Mxs/9HkFJugOOuxrIw8Idw
-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:36 2024 by rpki-client on console-fra.rpki-client.org