Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/ne6Na7AkUEHaToWnKB_CmRqgE-U.roa
File: ne6Na7AkUEHaToWnKB_CmRqgE-U.roa (raw, json)
Hash identifier: T6mLq+TPfmdIpvkfrU3LvzqlrFvacTixxVM14ItW1gY=
Subject key identifier: 9D:EE:8D:6B:B0:24:50:41:DA:4E:85:A7:28:1F:C2:99:1A:A0:13:E5
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 01856EC1F7D687C393A71BAD87DDB8055090
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/ne6Na7AkUEHaToWnKB_CmRqgE-U.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202604
IP address blocks: 185.159.96.0/22 maxlen: 23
2a07:b380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f7:d6:87:c3:93:a7:1b:ad:87:dd:b8:05:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dee8d6bb0245041da4e85a7281fc2991aa013e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:86:38:89:c5:ca:11:1a:ae:ee:9e:c0:af:
01:c8:b1:92:74:fc:50:7c:6c:3d:86:05:f8:33:2c:
23:f8:48:5b:bf:d9:1d:8f:34:55:c9:6e:0e:cc:a2:
57:1e:c9:65:1f:24:24:c7:bf:eb:c6:09:89:6a:f5:
73:a5:4e:24:99:e3:d5:95:c5:69:c2:fe:1a:69:20:
80:17:04:e5:8a:7b:98:a1:ef:0d:02:98:ab:2e:c8:
7a:e8:26:df:93:18:48:43:7b:d9:9b:1f:07:73:b9:
da:5d:51:ce:03:65:1a:7d:15:ce:4d:36:af:a5:81:
dc:f2:0b:24:0e:db:89:29:5e:c5:45:69:27:1c:ae:
01:06:de:82:c0:a0:fd:03:b7:a2:4c:09:73:b2:1f:
21:6d:71:59:5e:eb:2c:8c:07:dd:1d:cd:39:d9:24:
0a:f0:30:b4:20:db:a5:d6:85:92:b0:b3:b1:a5:bd:
7e:fb:ea:5d:62:ca:56:75:59:e9:45:98:3a:db:5a:
a1:d8:70:d3:b0:7a:f9:d5:25:b3:33:70:36:f0:24:
56:50:6f:b7:bd:e3:8d:e4:58:fe:22:a8:e2:60:9e:
23:6f:45:3a:a5:89:bc:3f:b5:91:2b:c2:bb:1a:cc:
b3:69:58:d4:1a:0d:dc:5f:09:83:4d:d8:be:fa:ca:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:8D:6B:B0:24:50:41:DA:4E:85:A7:28:1F:C2:99:1A:A0:13:E5
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/ne6Na7AkUEHaToWnKB_CmRqgE-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.96.0/22
IPv6:
2a07:b380::/29
Signature Algorithm: sha256WithRSAEncryption
3e:d2:6e:c7:47:dd:ec:04:fe:db:5e:f6:ee:e7:ed:4d:53:86:
50:d6:62:04:99:1a:44:ca:7a:1c:eb:40:74:e0:a8:a6:44:e2:
24:a1:dc:0d:1c:1c:f1:32:5f:3a:a2:32:60:b2:4a:02:76:38:
e4:80:12:38:96:aa:fe:b5:94:79:ad:7f:2b:e8:65:67:4e:5c:
54:9f:24:2c:77:28:40:29:89:ac:69:c8:d0:09:f6:a0:89:f8:
e8:7f:39:46:b8:d2:a1:96:b6:ec:f7:90:22:11:66:6e:04:68:
39:35:dc:98:5d:4c:64:05:da:5e:5b:63:49:68:52:26:a0:61:
10:0a:48:ec:0e:9d:ee:df:08:70:b6:89:b7:c5:e6:69:1b:01:
28:c1:4a:a3:3a:f7:62:e8:3c:9d:fa:93:2e:5d:d1:13:07:8c:
6a:ea:d9:77:65:3a:cb:41:7c:3a:b6:da:33:c7:ba:ab:48:9b:
23:71:87:0e:fa:fe:b4:44:ad:c1:43:26:d1:d8:76:2c:de:95:
78:bd:e2:74:c6:fd:36:92:3d:50:be:ff:1a:5e:d0:b8:c4:d6:
82:ed:cc:cb:f7:49:44:c3:67:2a:da:84:e8:84:bb:f1:ce:e2:
3e:48:e6:15:a7:a4:c7:6b:b5:60:ad:5b:22:96:11:2f:cc:6d:
90:99:b0:e8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuwffWh8OTpxuth924BVCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjMwMTAxMTkxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGVlOGQ2YmIwMjQ1MDQxZGE0ZTg1YTcyODFmYzI5OTFhYTAxM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7SGOInFyhEaru6ewK8ByLGSdPxQ
fGw9hgX4Mywj+Ehbv9kdjzRVyW4OzKJXHsllHyQkx7/rxgmJavVzpU4kmePVlcVp
wv4aaSCAFwTlinuYoe8NApirLsh66CbfkxhIQ3vZmx8Hc7naXVHOA2UafRXOTTav
pYHc8gskDtuJKV7FRWknHK4BBt6CwKD9A7eiTAlzsh8hbXFZXussjAfdHc052SQK
8DC0INul1oWSsLOxpb1+++pdYspWdVnpRZg621qh2HDTsHr51SWzM3A28CRWUG+3
veON5Fj+IqjiYJ4jb0U6pYm8P7WRK8K7GsyzaVjUGg3cXwmDTdi++sol2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ3ujWuwJFBB2k6FpygfwpkaoBPlMB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvbmU2TmE3QWtVRUhhVG9XbktCX0NtUnFnRS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ9gMA0E
AgACMAcDBQMqB7OAMA0GCSqGSIb3DQEBCwUAA4IBAQA+0m7HR93sBP7bXvbu5+1N
U4ZQ1mIEmRpEynoc60B04KimROIkodwNHBzxMl86ojJgskoCdjjkgBI4lqr+tZR5
rX8r6GVnTlxUnyQsdyhAKYmsacjQCfagifjofzlGuNKhlrbs95AiEWZuBGg5NdyY
XUxkBdpeW2NJaFImoGEQCkjsDp3u3whwtom3xeZpGwEowUqjOvdi6Dyd+pMuXdET
B4xq6tl3ZTrLQXw6ttozx7qrSJsjcYcO+v60RK3BQybR2HYs3pV4veJ0xv02kj1Q
vv8aXtC4xNaC7czL90lEw2cq2oTohLvxzuI+SOYVp6THa7VgrVsilhEvzG2QmbDo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:01 2024 by rpki-client on console-fra.rpki-client.org