Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zmb4ZPc0oGsMS5cdx88YoJLVbZA.roa
File: zmb4ZPc0oGsMS5cdx88YoJLVbZA.roa (raw, json)
Hash identifier: Ht0fTqeN6rmsuTS2PMsTOUXrYrswDGQmZexOsigzeWo=
Subject key identifier: CE:66:F8:64:F7:34:A0:6B:0C:4B:97:1D:C7:CF:18:A0:92:D5:6D:90
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018774C6F678B2262FACCFF24561BB1BEBAC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zmb4ZPc0oGsMS5cdx88YoJLVbZA.roa
Signing time: Wed 12 Apr 2023 09:23:28 +0000
ROA not before: Wed 12 Apr 2023 09:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199058
IP address blocks: 185.9.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:c6:f6:78:b2:26:2f:ac:cf:f2:45:61:bb:1b:eb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 12 09:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce66f864f734a06b0c4b971dc7cf18a092d56d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:08:4f:52:81:13:84:8c:f9:4e:cf:c6:b9:
df:de:de:62:3c:c2:32:45:cb:f3:0c:62:09:8b:97:
1d:1f:dd:55:55:85:bd:bf:da:aa:21:9c:26:fa:ef:
87:d7:29:5f:4d:ca:db:b7:5a:6e:c8:cc:c4:b5:df:
29:9a:83:7d:8e:00:b3:a8:dc:66:81:12:07:a7:1b:
a8:a4:0f:76:3d:b7:62:7a:b4:83:5e:70:dd:dd:71:
05:5b:2a:54:51:f3:af:72:af:99:d5:1a:2c:d4:63:
26:f0:7b:15:1f:58:d4:fc:44:c2:e7:74:7d:80:9b:
f9:0e:3f:c5:0c:4d:fe:08:78:b2:43:0e:90:95:92:
cc:27:ce:f0:54:46:ea:5b:b6:e4:a8:f4:25:93:75:
59:b6:76:73:da:6f:ef:14:c0:4f:a9:42:e5:e4:c4:
48:7e:24:01:52:11:59:2e:a5:14:6d:3c:a9:2a:3e:
eb:35:97:4b:92:db:0d:e0:75:fb:4e:d5:d2:98:39:
eb:49:e2:3a:e9:94:bd:d2:2f:d2:10:b5:da:a2:2d:
21:bf:8d:5c:2c:be:d0:ac:ed:dc:06:8b:1b:ea:f7:
00:80:88:35:66:f2:33:81:d9:27:a4:56:cf:2e:4c:
38:53:c5:e1:e5:83:8e:4b:42:c7:5c:21:fb:b9:25:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:F8:64:F7:34:A0:6B:0C:4B:97:1D:C7:CF:18:A0:92:D5:6D:90
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zmb4ZPc0oGsMS5cdx88YoJLVbZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:56:72:e0:76:eb:9c:87:b4:9c:5b:cc:c4:0b:69:8c:83:b2:
3b:35:66:bd:75:aa:bf:da:b0:8c:2e:0a:85:75:76:e9:9d:73:
ce:69:dd:3c:d4:0b:f8:4c:d7:f6:d2:db:ed:a0:00:f1:be:e8:
65:08:07:a1:a1:57:eb:35:c0:61:af:b6:e6:2e:93:0b:de:a8:
95:63:73:d8:e8:59:26:ab:09:6e:01:34:35:a0:45:55:b5:be:
87:81:07:3b:d1:e0:aa:de:94:55:18:c8:7c:48:57:6f:ed:76:
55:f3:d7:3b:81:e0:3c:d2:8d:3a:99:59:03:96:70:89:c5:03:
20:00:ba:18:29:2f:3f:4c:e2:55:33:e6:6f:69:8a:5e:46:b4:
e6:90:d1:e3:52:85:44:51:58:e9:6c:1d:cf:85:49:62:18:bc:
c0:c3:ff:37:d8:8d:49:3a:c6:79:99:1d:99:2c:b6:1c:f4:9f:
a6:78:42:3b:c9:23:30:db:a2:71:35:b6:c5:4b:c2:b6:f5:4f:
a0:ae:bb:3b:6b:43:21:c8:a6:7a:48:5e:d0:0d:1e:39:e6:bc:
10:b5:46:4d:42:f9:16:23:43:ec:cb:6b:77:3e:ed:6c:f2:fc:
cc:d3:f0:db:5a:e4:3c:0a:aa:ac:4c:50:53:c4:fd:de:33:e8:
81:4e:a6:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd0xvZ4siYvrM/yRWG7G+usMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDEyMDkyMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTY2Zjg2NGY3MzRhMDZiMGM0Yjk3MWRjN2NmMThhMDkyZDU2ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh30IT1KBE4SM+U7Pxrnf3t5iPMIy
RcvzDGIJi5cdH91VVYW9v9qqIZwm+u+H1ylfTcrbt1puyMzEtd8pmoN9jgCzqNxm
gRIHpxuopA92PbdierSDXnDd3XEFWypUUfOvcq+Z1Ros1GMm8HsVH1jU/ETC53R9
gJv5Dj/FDE3+CHiyQw6QlZLMJ87wVEbqW7bkqPQlk3VZtnZz2m/vFMBPqULl5MRI
fiQBUhFZLqUUbTypKj7rNZdLktsN4HX7TtXSmDnrSeI66ZS90i/SELXaoi0hv41c
LL7QrO3cBosb6vcAgIg1ZvIzgdknpFbPLkw4U8Xh5YOOS0LHXCH7uSXhgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5m+GT3NKBrDEuXHcfPGKCS1W2QMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvem1iNFpQYzBvR3NNUzVjZHg4OFlvSkxWYlpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQk3MA0G
CSqGSIb3DQEBCwUAA4IBAQBbVnLgduuch7ScW8zEC2mMg7I7NWa9daq/2rCMLgqF
dXbpnXPOad081Av4TNf20tvtoADxvuhlCAehoVfrNcBhr7bmLpML3qiVY3PY6Fkm
qwluATQ1oEVVtb6HgQc70eCq3pRVGMh8SFdv7XZV89c7geA80o06mVkDlnCJxQMg
ALoYKS8/TOJVM+ZvaYpeRrTmkNHjUoVEUVjpbB3PhUliGLzAw/832I1JOsZ5mR2Z
LLYc9J+meEI7ySMw26JxNbbFS8K29U+grrs7a0MhyKZ6SF7QDR455rwQtUZNQvkW
I0Psy2t3Pu1s8vzM0/DbWuQ8CqqsTFBTxP3eM+iBTqbj
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org