Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/V9UFas11TqRIj8_Jy4ckX3QW0es.roa
File: V9UFas11TqRIj8_Jy4ckX3QW0es.roa (raw, json)
Hash identifier: leIs45h7/C2/KOFI6vZbr5dto+Iu67QxzlOy4JoSxaE=
Subject key identifier: 57:D5:05:6A:CD:75:4E:A4:48:8F:CF:C9:CB:87:24:5F:74:16:D1:EB
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 0192B312A6B136F58BE94B92B1583CAB183B
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/V9UFas11TqRIj8_Jy4ckX3QW0es.roa
Signing time: Tue 22 Oct 2024 07:13:16 +0000
ROA not before: Tue 22 Oct 2024 07:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.233.165.0/24 maxlen: 24
185.233.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:12:a6:b1:36:f5:8b:e9:4b:92:b1:58:3c:ab:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Oct 22 07:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57d5056acd754ea4488fcfc9cb87245f7416d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:6b:79:d4:df:d9:8d:73:b8:4f:93:46:03:
c6:06:6f:2a:df:3d:9e:d0:7c:76:f3:bf:47:5e:b0:
4d:c3:62:89:b6:26:c8:8b:fd:a3:06:cd:b5:6f:83:
20:5d:b1:3f:e2:16:24:56:bb:94:e3:e1:78:5f:d0:
21:20:5f:99:07:45:60:d5:a5:30:e2:bd:95:7d:b7:
c3:4a:36:af:27:71:74:bd:6a:37:68:41:d4:74:e0:
d3:22:e0:4b:4d:27:21:ba:47:9b:63:a7:84:d1:51:
cb:b2:2d:9a:d0:ce:6d:5b:58:71:c8:0f:44:f6:63:
d6:d0:11:46:c8:af:c0:37:d5:59:95:91:24:c1:03:
7e:f9:ac:42:81:31:9a:c3:df:74:94:37:ea:3e:fc:
15:01:b0:a6:89:de:b2:19:9c:55:97:8b:b6:f7:ae:
79:e4:25:42:58:09:2c:b7:67:c8:c7:b3:66:87:e1:
31:62:22:97:64:fc:89:8f:1d:04:fa:d1:c9:3f:70:
fa:81:ca:74:bf:48:ca:b8:ec:4d:de:d2:a7:53:7a:
40:dc:fb:99:70:76:06:86:4b:99:f1:91:8c:fc:e6:
24:c3:2c:9e:89:ce:71:7c:da:38:fc:e7:65:19:2a:
11:5e:82:95:c1:fb:fe:1b:b4:ed:50:97:ad:08:4a:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:05:6A:CD:75:4E:A4:48:8F:CF:C9:CB:87:24:5F:74:16:D1:EB
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/V9UFas11TqRIj8_Jy4ckX3QW0es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0-185.233.166.255
Signature Algorithm: sha256WithRSAEncryption
42:e3:49:1c:f8:8a:01:b6:64:38:c4:06:2d:68:fa:da:1a:17:
fe:6f:9d:d1:af:a3:f5:74:a2:9d:1e:2e:96:0a:29:17:7e:b8:
09:64:ce:2c:af:3b:2f:86:65:fd:e3:39:dd:0b:c5:03:28:8c:
a7:ee:46:1c:a4:14:e4:48:ee:20:22:ab:7e:36:31:78:b1:4e:
21:90:96:fe:b3:e0:f1:d7:34:e8:35:74:f0:01:bd:83:40:ea:
db:b1:f0:fd:2b:ba:6b:85:12:a1:eb:dc:93:b6:32:fe:66:e6:
0a:71:4a:45:09:22:9b:41:a3:b6:9d:09:0a:84:6f:35:85:c0:
85:b4:c2:17:b5:d0:bb:4e:a7:3a:33:e0:ac:dc:4a:d9:c5:19:
e7:7b:3e:45:08:36:73:13:ae:b3:34:78:26:f4:2b:d4:0c:bc:
90:f7:81:7d:3c:b8:e5:74:fc:dd:f3:0f:dc:00:2c:c5:c3:2c:
c8:3a:13:93:89:96:72:e5:9e:8a:79:47:5c:4a:a0:24:52:b7:
6a:eb:3a:8c:55:41:67:de:c6:c3:a0:93:a6:eb:9c:7c:38:c3:
6a:a1:a6:02:eb:bf:20:cd:19:03:e5:23:3e:9d:5f:af:91:97:
0d:74:a6:1f:a7:67:51:f8:0f:40:22:54:fa:d6:c9:fa:98:e6:
c2:01:28:ca
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZKzEqaxNvWL6UuSsVg8qxg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjQxMDIyMDcxMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q1MDU2YWNkNzU0ZWE0NDg4ZmNmYzljYjg3MjQ1Zjc0MTZkMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9redTf2Y1zuE+TRgPGBm8q3z2e
0Hx2879HXrBNw2KJtibIi/2jBs21b4MgXbE/4hYkVruU4+F4X9AhIF+ZB0Vg1aUw
4r2VfbfDSjavJ3F0vWo3aEHUdODTIuBLTSchukebY6eE0VHLsi2a0M5tW1hxyA9E
9mPW0BFGyK/AN9VZlZEkwQN++axCgTGaw990lDfqPvwVAbCmid6yGZxVl4u29655
5CVCWAkst2fIx7Nmh+ExYiKXZPyJjx0E+tHJP3D6gcp0v0jKuOxN3tKnU3pA3PuZ
cHYGhkuZ8ZGM/OYkwyyeic5xfNo4/OdlGSoRXoKVwfv+G7TtUJetCEq/3wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFfVBWrNdU6kSI/PycuHJF90FtHrMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvVjlVRmFzMTFUcVJJajhfSnk0Y2tYM1FXMGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC56aUD
BAC56aYwDQYJKoZIhvcNAQELBQADggEBAELjSRz4igG2ZDjEBi1o+toaF/5vndGv
o/V0op0eLpYKKRd+uAlkziyvOy+GZf3jOd0LxQMojKfuRhykFORI7iAiq342MXix
TiGQlv6z4PHXNOg1dPABvYNA6tux8P0rumuFEqHr3JO2Mv5m5gpxSkUJIptBo7ad
CQqEbzWFwIW0whe10LtOpzoz4KzcStnFGed7PkUINnMTrrM0eCb0K9QMvJD3gX08
uOV0/N3zD9wALMXDLMg6E5OJlnLlnop5R1xKoCRSt2rrOoxVQWfexsOgk6brnHw4
w2qhpgLrvyDNGQPlIz6dX6+Rlw10ph+nZ1H4D0AiVPrWyfqY5sIBKMo=
-----END CERTIFICATE-----
Generated at Fri Oct 25 06:02:24 2024 by rpki-client on console-fra.rpki-client.org