Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CxhuSK9wI9cvDglh88ZhWdmvggw.roa
File: CxhuSK9wI9cvDglh88ZhWdmvggw.roa (raw, json)
Hash identifier: Vxoo/Y3NFR/gqyV23mugaTx4V/MLbHaJN0WBDihZLLw=
Subject key identifier: 0B:18:6E:48:AF:70:23:D7:2F:0E:09:61:F3:C6:61:59:D9:AF:82:0C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0191A2CEBA39F317FDF359197A17BBC92CE3
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CxhuSK9wI9cvDglh88ZhWdmvggw.roa
Signing time: Fri 30 Aug 2024 10:22:22 +0000
ROA not before: Fri 30 Aug 2024 10:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.58.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:ce:ba:39:f3:17:fd:f3:59:19:7a:17:bb:c9:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 30 10:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b186e48af7023d72f0e0961f3c66159d9af820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:69:3a:32:92:76:60:41:ec:48:69:90:b5:
89:40:1a:1b:7d:84:bf:82:86:da:56:6e:0c:d9:80:
3f:b9:44:f9:7c:07:9b:2c:4e:e5:3c:b0:fb:f2:98:
ea:d6:27:25:2b:13:eb:fd:45:5c:2a:cf:fd:61:02:
f0:24:40:8b:5e:01:57:c9:00:25:12:42:e0:a3:e7:
ea:ff:d0:82:3a:61:54:93:9e:27:ab:14:3f:7c:62:
98:d5:72:ae:66:89:a4:05:9c:f1:d4:94:5c:d7:e9:
9b:b6:2b:07:43:44:97:7b:cf:f1:fc:bc:b7:9a:04:
85:5f:41:0e:42:bf:a9:30:e7:f2:9b:c9:57:82:0b:
58:03:1b:e0:91:6f:e2:ab:43:82:7e:a1:ff:83:2b:
6d:c5:46:69:71:7e:1a:f8:5c:5c:fc:79:b3:83:4c:
2d:fd:75:65:44:ef:61:34:2c:0c:0c:03:ab:56:af:
11:47:9c:d4:67:25:26:18:0c:74:fe:b7:eb:a8:9e:
42:91:88:3f:23:d8:a6:cd:69:5f:bd:4e:ef:4b:77:
db:fc:3c:72:57:f9:3d:70:14:9f:69:f0:80:a8:c6:
36:67:3a:06:5d:f0:3d:08:60:52:e5:07:00:ca:d3:
1a:f6:9d:d1:59:55:22:68:32:ce:70:78:90:01:d3:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:6E:48:AF:70:23:D7:2F:0E:09:61:F3:C6:61:59:D9:AF:82:0C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CxhuSK9wI9cvDglh88ZhWdmvggw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d7:99:88:57:da:8a:cc:c6:ad:44:a0:0b:16:2f:f0:3b:02:
3e:8c:76:af:fd:98:6a:b2:38:54:16:e6:0f:d1:57:5f:d4:ed:
d9:13:69:1e:7a:57:ce:a6:41:ad:f6:e3:2b:ed:11:99:2c:79:
ea:ad:10:86:6d:7a:55:33:ef:77:d8:70:9a:b5:1d:91:90:df:
a7:2b:e0:38:84:37:1c:82:10:e2:67:f5:7a:c1:9f:a0:66:b5:
6c:ec:69:7f:63:7f:87:97:2f:ec:7b:df:a3:ac:dc:33:3f:25:
b1:50:dd:4a:7a:61:7a:be:e6:8e:25:bc:5e:59:84:41:8a:c2:
f2:84:04:9b:e7:bd:71:c0:1a:f1:71:44:67:ed:fe:f2:09:a6:
36:8a:b1:67:b0:bc:93:ca:12:c6:ab:91:4a:2e:98:dc:a5:f4:
c0:6c:e1:8e:14:1a:76:50:e9:73:b2:45:d1:65:4d:ba:cf:14:
1b:f9:20:64:17:20:2d:1f:6d:e6:24:97:a8:95:3b:75:cf:d9:
fb:ae:4d:a5:cb:ba:d9:d2:57:dd:2e:79:c5:63:84:fc:e8:7f:
54:99:9b:e1:f6:e0:f2:42:1f:ac:14:09:4b:33:f3:72:f4:10:
20:8c:a6:09:89:10:9a:d8:bb:8c:e6:2e:93:95:fd:34:88:b3:
59:b0:66:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGizro58xf981kZehe7ySzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwODMwMTAyMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjE4NmU0OGFmNzAyM2Q3MmYwZTA5NjFmM2M2NjE1OWQ5YWY4MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWZpOjKSdmBB7EhpkLWJQBobfYS/
gobaVm4M2YA/uUT5fAebLE7lPLD78pjq1iclKxPr/UVcKs/9YQLwJECLXgFXyQAl
EkLgo+fq/9CCOmFUk54nqxQ/fGKY1XKuZomkBZzx1JRc1+mbtisHQ0SXe8/x/Ly3
mgSFX0EOQr+pMOfym8lXggtYAxvgkW/iq0OCfqH/gyttxUZpcX4a+Fxc/Hmzg0wt
/XVlRO9hNCwMDAOrVq8RR5zUZyUmGAx0/rfrqJ5CkYg/I9imzWlfvU7vS3fb/Dxy
V/k9cBSfafCAqMY2ZzoGXfA9CGBS5QcAytMa9p3RWVUiaDLOcHiQAdMEawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsYbkivcCPXLw4JYfPGYVnZr4IMMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvQ3hodVNLOXdJOWN2RGdsaDg4WmhXZG12Z2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuToXMA0G
CSqGSIb3DQEBCwUAA4IBAQCf15mIV9qKzMatRKALFi/wOwI+jHav/ZhqsjhUFuYP
0Vdf1O3ZE2keelfOpkGt9uMr7RGZLHnqrRCGbXpVM+932HCatR2RkN+nK+A4hDcc
ghDiZ/V6wZ+gZrVs7Gl/Y3+Hly/se9+jrNwzPyWxUN1KemF6vuaOJbxeWYRBisLy
hASb571xwBrxcURn7f7yCaY2irFnsLyTyhLGq5FKLpjcpfTAbOGOFBp2UOlzskXR
ZU26zxQb+SBkFyAtH23mJJeolTt1z9n7rk2ly7rZ0lfdLnnFY4T86H9UmZvh9uDy
Qh+sFAlLM/Ny9BAgjKYJiRCa2LuM5i6Tlf00iLNZsGYW
-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:13 2024 by rpki-client on console-fra.rpki-client.org