Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/duh2sUCgSSmWKYx5Ihmz9YwHBNM.roa
File: duh2sUCgSSmWKYx5Ihmz9YwHBNM.roa (raw, json)
Hash identifier: VRGGu3LlJKCaaBDdC9ITQFky6Dux1dNpK/IXWWFV2go=
Subject key identifier: 76:E8:76:B1:40:A0:49:29:96:29:8C:79:22:19:B3:F5:8C:07:04:D3
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 01856BDC80F053EAF560EB6A551BDFEB4397
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/duh2sUCgSSmWKYx5Ihmz9YwHBNM.roa
Signing time: Sun 01 Jan 2023 05:44:51 +0000
ROA not before: Sun 01 Jan 2023 05:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201422
IP address blocks: 185.75.129.0/24 maxlen: 24
2a03:4d24::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Jul 2023 16:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:80:f0:53:ea:f5:60:eb:6a:55:1b:df:eb:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jan 1 05:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76e876b140a0492996298c792219b3f58c0704d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:99:5f:75:12:30:56:14:6b:7e:bd:f8:4c:
72:ce:4d:1b:64:61:79:a3:a4:50:fa:9a:5b:b2:9f:
c1:f9:b7:eb:87:80:cb:aa:83:af:bc:50:9f:56:6e:
01:89:9a:47:62:04:4e:02:79:fe:5a:46:10:ee:75:
0b:4e:8f:40:5c:45:96:be:bb:da:d0:31:86:1a:2a:
68:17:28:50:cf:2c:78:7f:1a:59:54:2e:8c:21:20:
68:6f:ba:e0:c6:6e:20:ae:df:ad:05:a1:e3:f5:12:
9b:80:88:96:d2:0a:5d:a8:b5:61:78:63:0b:12:c4:
6c:40:1b:31:4f:ad:5d:bf:f3:92:24:a3:60:69:ff:
5c:68:89:7e:a6:1c:bd:19:f7:04:45:6b:fc:bc:68:
a3:5a:e1:68:e4:71:d7:6c:11:72:6e:ec:aa:f7:52:
69:51:44:c9:c5:93:27:f5:93:aa:dc:73:50:45:02:
9d:1c:7c:2a:9c:dd:4b:79:a8:d1:f4:47:bc:a8:65:
94:4b:63:d1:3b:31:e4:fe:76:77:e1:17:96:23:e6:
18:3b:54:60:7b:b4:62:1c:d3:6f:35:f6:ed:14:a5:
b4:33:0c:15:a2:3f:9a:2d:97:af:b1:d2:6e:42:01:
52:42:aa:bc:10:53:21:98:8a:b5:3d:ee:11:9b:52:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E8:76:B1:40:A0:49:29:96:29:8C:79:22:19:B3:F5:8C:07:04:D3
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/duh2sUCgSSmWKYx5Ihmz9YwHBNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.129.0/24
IPv6:
2a03:4d24::/32
Signature Algorithm: sha256WithRSAEncryption
19:74:43:e6:20:34:dd:45:d3:46:13:3f:f7:96:0a:09:41:31:
0d:0c:97:b4:9e:eb:23:a2:a6:20:5c:32:53:36:ef:2b:e4:a2:
47:67:84:a1:05:c0:22:c2:48:52:5f:06:ad:20:e2:75:92:b5:
cb:99:92:f5:54:ba:24:26:a5:89:7f:a9:e0:2e:c6:49:62:bc:
bc:c8:07:8c:11:c4:00:a4:f6:aa:57:a6:95:6d:78:80:c7:49:
38:9d:f8:de:67:18:09:97:c3:6f:74:e6:a4:7d:07:9d:c4:88:
13:5b:37:9e:e4:53:9c:e0:28:38:7e:65:35:70:a4:bb:d6:75:
0d:67:2c:07:91:72:a0:9d:f6:76:ed:fe:a3:7a:cd:0b:2f:f4:
4f:61:6b:c1:ab:36:34:4f:5b:3d:fe:92:26:40:4f:d5:5a:c1:
e5:1b:eb:cc:ef:1b:4e:a7:44:a6:69:5d:13:b5:ce:fd:0f:6a:
ee:34:fd:2e:00:37:d0:1d:92:f7:3e:a5:67:b4:76:8a:2d:0d:
84:c5:f1:4f:c2:38:08:db:f8:1a:d1:32:a1:21:5d:84:dd:ef:
57:5e:51:6d:d1:49:b2:ee:10:0a:0a:69:33:cc:fb:17:fa:96:
02:9d:82:d5:4d:2c:fd:50:c1:48:95:e4:92:08:26:f6:2e:25:
e4:2e:f9:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVr3IDwU+r1YOtqVRvf60OXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjI2ZWU1ZWEwNDA2NTkyZGY5NzVjNmY0Yzg0ZjEwZjE0
ZDE1Y2IwHhcNMjMwMTAxMDU0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmU4NzZiMTQwYTA0OTI5OTYyOThjNzkyMjE5YjNmNThjMDcwNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDOZX3USMFYUa369+Exyzk0bZGF5
o6RQ+ppbsp/B+bfrh4DLqoOvvFCfVm4BiZpHYgROAnn+WkYQ7nULTo9AXEWWvrva
0DGGGipoFyhQzyx4fxpZVC6MISBob7rgxm4grt+tBaHj9RKbgIiW0gpdqLVheGML
EsRsQBsxT61dv/OSJKNgaf9caIl+phy9GfcERWv8vGijWuFo5HHXbBFybuyq91Jp
UUTJxZMn9ZOq3HNQRQKdHHwqnN1LeajR9Ee8qGWUS2PROzHk/nZ34ReWI+YYO1Rg
e7RiHNNvNfbtFKW0MwwVoj+aLZevsdJuQgFSQqq8EFMhmIq1Pe4Rm1K/UQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHbodrFAoEkplimMeSIZs/WMBwTTMB8GA1UdIwQY
MBaAFGUibuXqBAZZLfl1xvTITxDxTRXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEt
ZGVjMDI0ODhjMzdjLzEvZHVoMnNVQ2dTU21XS1l4NUlobXo5WXdIQk5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEtZGVjMDI0ODhjMzdj
LzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUuBMA0E
AgACMAcDBQAqA00kMA0GCSqGSIb3DQEBCwUAA4IBAQAZdEPmIDTdRdNGEz/3lgoJ
QTENDJe0nusjoqYgXDJTNu8r5KJHZ4ShBcAiwkhSXwatIOJ1krXLmZL1VLokJqWJ
f6ngLsZJYry8yAeMEcQApPaqV6aVbXiAx0k4nfjeZxgJl8NvdOakfQedxIgTWzee
5FOc4Cg4fmU1cKS71nUNZywHkXKgnfZ27f6jes0LL/RPYWvBqzY0T1s9/pImQE/V
WsHlG+vM7xtOp0SmaV0Ttc79D2ruNP0uADfQHZL3PqVntHaKLQ2ExfFPwjgI2/ga
0TKhIV2E3e9XXlFt0Umy7hAKCmkzzPsX+pYCnYLVTSz9UMFIleSSCCb2LiXkLvl9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-fra.rpki-client.org