Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/EnK-pdy7X3q8QLysafycP_Ugl0E.roa
File: EnK-pdy7X3q8QLysafycP_Ugl0E.roa (raw, json)
Hash identifier: Cp9OxG/lQh0RR4H/sQTrJcnqUjFHZ2gd7K1ggrMY0Ak=
Subject key identifier: 12:72:BE:A5:DC:BB:5F:7A:BC:40:BC:AC:69:FC:9C:3F:F5:20:97:41
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 01857315E488DBCAD8C87F36E73E227E63F6
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/EnK-pdy7X3q8QLysafycP_Ugl0E.roa
Signing time: Mon 02 Jan 2023 15:24:52 +0000
ROA not before: Mon 02 Jan 2023 15:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42148
IP address blocks: 185.150.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:e4:88:db:ca:d8:c8:7f:36:e7:3e:22:7e:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jan 2 15:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1272bea5dcbb5f7abc40bcac69fc9c3ff5209741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:98:31:31:2f:af:98:e7:07:4b:4b:f0:22:
db:4e:f3:ac:51:56:b7:ec:78:f5:5b:59:f3:9c:60:
e1:30:cd:57:a8:b6:53:e4:ec:bd:89:19:fe:3c:fb:
57:e5:21:bb:02:f8:0d:a1:14:b3:fb:e4:ea:7f:99:
3e:22:52:57:63:d3:6f:0a:ac:45:e9:32:62:16:66:
dc:73:39:a5:01:96:d7:d0:54:46:c1:06:3b:00:45:
87:4c:b4:92:f2:4d:22:27:13:55:72:51:12:81:77:
6c:ac:4b:0f:16:74:62:45:01:1e:5a:ef:62:2f:11:
57:01:bb:f7:ca:5e:5e:19:d1:12:f3:4f:ba:1b:ae:
ae:a4:48:c5:b3:f8:aa:0f:16:9b:95:d7:8a:95:2f:
65:4c:71:9c:df:96:be:3b:0d:f0:9e:0f:6b:0a:dc:
06:55:32:59:35:8a:f4:34:ce:20:2c:33:ff:83:94:
33:32:aa:76:bf:b6:c3:d7:eb:1b:ab:3a:d6:5b:c3:
f8:0d:06:9e:6e:51:2c:4d:9e:77:04:07:01:2f:fe:
2a:79:8c:8c:5e:49:b7:80:6c:ff:a1:49:4e:3d:fe:
95:3d:3e:f1:21:73:5b:d0:0b:51:24:83:ee:ae:28:
3e:65:c4:1a:66:98:2c:93:78:3f:93:2a:bc:3b:f7:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:72:BE:A5:DC:BB:5F:7A:BC:40:BC:AC:69:FC:9C:3F:F5:20:97:41
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/EnK-pdy7X3q8QLysafycP_Ugl0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.152.0/22
Signature Algorithm: sha256WithRSAEncryption
60:63:c5:64:21:51:51:bd:99:2a:00:93:2c:21:d1:f2:3f:8c:
55:40:e1:e3:3a:fa:ff:13:b1:58:9a:9b:07:63:17:6a:ea:e7:
91:7d:67:1d:64:a5:b2:6c:7f:9a:6b:d4:eb:ad:87:97:da:0b:
0f:66:b6:8c:95:99:8b:a1:a8:4a:39:a7:2b:3c:91:70:f2:0a:
56:81:f5:c0:75:2a:bf:0d:5a:6a:22:35:cd:38:5a:69:10:72:
01:c0:6c:4d:f3:22:6f:3a:43:e9:99:9d:70:df:d7:81:95:71:
62:fc:64:90:2a:a9:1f:ed:18:65:21:dc:22:27:96:27:e0:5b:
66:6e:0c:17:68:aa:1f:eb:60:1e:be:46:0a:2b:38:16:5e:3c:
2a:a5:fb:ea:84:d5:98:fd:ac:31:c2:93:a7:ae:5f:e0:75:4e:
bd:b0:bb:b3:fb:a0:4e:d0:02:dc:fe:f9:5c:2d:2c:0d:46:c3:
19:aa:25:3f:8d:ff:4e:70:f3:c2:4e:50:0b:6d:37:e4:3c:a0:
57:da:56:01:0d:9f:17:f6:12:38:57:76:ee:97:61:b5:05:a9:
8e:6e:03:b5:34:fb:bc:85:cd:e3:9e:d2:2c:ae:96:3f:d8:6c:
ba:a1:0a:d2:0f:c2:8a:e1:ac:03:a8:62:55:0d:a1:87:9a:b8:
70:77:48:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFeSI28rYyH825z4ifmP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWI1YTJjNDllMWM2NDhhNzBjNzA4YWUxYmRlNDBiNjQ0
Yzc4MDIwHhcNMjMwMTAyMTUyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjcyYmVhNWRjYmI1ZjdhYmM0MGJjYWM2OWZjOWMzZmY1MjA5NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFyYMTEvr5jnB0tL8CLbTvOsUVa3
7Hj1W1nznGDhMM1XqLZT5Oy9iRn+PPtX5SG7AvgNoRSz++Tqf5k+IlJXY9NvCqxF
6TJiFmbcczmlAZbX0FRGwQY7AEWHTLSS8k0iJxNVclESgXdsrEsPFnRiRQEeWu9i
LxFXAbv3yl5eGdES80+6G66upEjFs/iqDxabldeKlS9lTHGc35a+Ow3wng9rCtwG
VTJZNYr0NM4gLDP/g5QzMqp2v7bD1+sbqzrWW8P4DQaeblEsTZ53BAcBL/4qeYyM
Xkm3gGz/oUlOPf6VPT7xIXNb0AtRJIPurig+ZcQaZpgsk3g/kyq8O/ee6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJyvqXcu196vEC8rGn8nD/1IJdBMB8GA1UdIwQY
MBaAFMGbWixJ4cZIpwxwiuG95AtkTHgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQt
M2Q0NjFkYWRlNGE5LzEvRW5LLXBkeTdYM3E4UUx5c2FmeWNQX1VnbDBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQtM2Q0NjFkYWRlNGE5
LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZaYMA0G
CSqGSIb3DQEBCwUAA4IBAQBgY8VkIVFRvZkqAJMsIdHyP4xVQOHjOvr/E7FYmpsH
Yxdq6ueRfWcdZKWybH+aa9TrrYeX2gsPZraMlZmLoahKOacrPJFw8gpWgfXAdSq/
DVpqIjXNOFppEHIBwGxN8yJvOkPpmZ1w39eBlXFi/GSQKqkf7RhlIdwiJ5Yn4Ftm
bgwXaKof62AevkYKKzgWXjwqpfvqhNWY/awxwpOnrl/gdU69sLuz+6BO0ALc/vlc
LSwNRsMZqiU/jf9OcPPCTlALbTfkPKBX2lYBDZ8X9hI4V3bul2G1BamObgO1NPu8
hc3jntIsrpY/2Gy6oQrSD8KK4awDqGJVDaGHmrhwd0hR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:19 2024 by rpki-client on console-ams.rpki-client.org