Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4Ogod47KW6y9lQX2--sPDHojpiE.roa
File: 4Ogod47KW6y9lQX2--sPDHojpiE.roa (raw, json)
Hash identifier: LLu/0OgpuwsHukX3d0ztqP9z2URiRIXHblbMg66l3gM=
Subject key identifier: E0:E8:28:77:8E:CA:5B:AC:BD:95:05:F6:FB:EB:0F:0C:7A:23:A6:21
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C3131C15BA11F09FDE407966656BAE
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4Ogod47KW6y9lQX2--sPDHojpiE.roa
Signing time: Mon 02 Jan 2023 09:14:47 +0000
ROA not before: Mon 02 Jan 2023 09:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3302
IP address blocks: 185.133.209.0/24 maxlen: 24
185.197.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:13:1c:15:ba:11:f0:9f:de:40:79:66:65:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0e828778eca5bacbd9505f6fbeb0f0c7a23a621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:94:fb:d0:56:a3:1d:52:a3:3d:38:2c:6e:
e3:49:0f:c7:0d:d9:14:8b:29:97:80:c2:37:cd:12:
c1:c3:01:38:56:68:6b:e2:9f:65:20:19:8a:73:dc:
2d:e3:e5:9f:b8:5d:4f:d4:af:e5:13:f3:91:a7:21:
f7:3a:05:48:7b:49:64:30:a2:81:f7:99:77:7e:f2:
d3:d9:24:11:6e:ca:f0:2a:a3:dd:59:40:6b:51:ac:
f8:b3:bf:ac:ad:49:c3:56:1f:b7:a6:69:c7:e0:bd:
45:55:46:aa:b8:df:18:78:f1:8c:1e:c4:73:18:43:
8c:2e:d4:57:88:49:e8:15:e9:a6:23:24:79:32:00:
0a:93:9d:65:c3:2d:93:d2:06:4b:a3:71:2e:1e:e4:
a3:d0:ec:dc:03:09:1d:d8:83:e3:cf:d0:f8:08:0d:
27:b2:49:7b:3c:20:21:a4:5d:a1:8d:f5:9a:f9:95:
44:4f:1d:e2:85:9d:af:15:ef:48:97:4a:2d:4f:6b:
d2:83:3e:f2:5a:eb:07:d7:1c:8f:64:db:f4:d2:f2:
27:22:e9:ed:28:47:7e:40:20:1a:71:1a:ce:bb:c1:
d7:53:85:fe:3d:4f:44:fd:d5:1a:6c:d1:39:1f:f8:
fe:10:fa:f4:a8:d5:95:82:cb:53:5b:27:fb:ff:c7:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:28:77:8E:CA:5B:AC:BD:95:05:F6:FB:EB:0F:0C:7A:23:A6:21
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4Ogod47KW6y9lQX2--sPDHojpiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.209.0/24
185.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e0:fa:72:96:fd:6c:e1:68:a3:98:e3:a1:e0:f7:18:57:4e:
67:82:5f:a1:c9:7d:9f:45:d0:25:d7:6c:55:56:2a:d7:1a:be:
db:3b:eb:b8:44:9b:87:75:1b:c5:e9:f3:55:df:78:1e:29:73:
3b:d7:1a:76:16:3c:42:7e:e3:50:85:67:72:2d:c8:3c:f8:32:
22:11:69:9a:ae:52:a6:a4:9e:9c:78:9b:83:8e:f1:30:80:e5:
c5:93:ce:8c:4f:30:ec:ed:6f:24:ed:fc:81:ac:59:a3:19:0a:
a9:7f:42:07:8b:f7:68:17:97:e0:73:be:8a:3c:52:e5:ca:f0:
76:13:42:9e:33:73:39:b5:39:82:e6:fd:8b:47:7d:49:08:81:
88:f2:ff:40:43:a2:df:9d:3c:f3:2b:cd:fb:e2:a0:3d:bd:59:
20:30:7a:8d:77:0d:c7:40:62:73:42:b1:82:08:67:6a:ae:10:
98:ea:7b:d8:44:02:37:05:3f:24:7c:0b:6c:a1:da:de:b4:2d:
fb:16:80:4a:bf:63:df:21:5d:9a:99:7f:e0:1f:1b:12:89:c9:
b1:e7:10:5b:cb:3c:4c:2f:e0:64:34:cb:9b:2c:d2:b7:7a:0f:
be:4e:3d:61:23:15:bf:95:52:ff:0d:33:71:b1:19:f3:1a:61:
54:59:1e:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxwxMcFboR8J/eQHlmZWuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMwMTAyMDkxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGU4Mjg3NzhlY2E1YmFjYmQ5NTA1ZjZmYmViMGYwYzdhMjNhNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeWU+9BWox1Soz04LG7jSQ/HDdkU
iymXgMI3zRLBwwE4Vmhr4p9lIBmKc9wt4+WfuF1P1K/lE/ORpyH3OgVIe0lkMKKB
95l3fvLT2SQRbsrwKqPdWUBrUaz4s7+srUnDVh+3pmnH4L1FVUaquN8YePGMHsRz
GEOMLtRXiEnoFemmIyR5MgAKk51lwy2T0gZLo3EuHuSj0OzcAwkd2IPjz9D4CA0n
skl7PCAhpF2hjfWa+ZVETx3ihZ2vFe9Il0otT2vSgz7yWusH1xyPZNv00vInIunt
KEd+QCAacRrOu8HXU4X+PU9E/dUabNE5H/j+EPr0qNWVgstTWyf7/8e7ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFODoKHeOylusvZUF9vvrDwx6I6YhMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvNE9nb2Q0N0tXNnk5bFFYMi0tc1BESG9qcGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYXRAwQA
ucWGMA0GCSqGSIb3DQEBCwUAA4IBAQBi4Ppylv1s4WijmOOh4PcYV05ngl+hyX2f
RdAl12xVVirXGr7bO+u4RJuHdRvF6fNV33geKXM71xp2FjxCfuNQhWdyLcg8+DIi
EWmarlKmpJ6ceJuDjvEwgOXFk86MTzDs7W8k7fyBrFmjGQqpf0IHi/doF5fgc76K
PFLlyvB2E0KeM3M5tTmC5v2LR31JCIGI8v9AQ6LfnTzzK8374qA9vVkgMHqNdw3H
QGJzQrGCCGdqrhCY6nvYRAI3BT8kfAtsodretC37FoBKv2PfIV2amX/gHxsSicmx
5xBbyzxML+BkNMubLNK3eg++Tj1hIxW/lVL/DTNxsRnzGmFUWR5Q
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:04 2024 by rpki-client on console-ams.rpki-client.org