Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/B-UYZ5AOCteb_Dg9bEY_Hp015JU.roa
File: B-UYZ5AOCteb_Dg9bEY_Hp015JU.roa (raw, json)
Hash identifier: nWXg9+3MN/LTNX8hygNewvuHGu/RUBxgd2c4fka/BEI=
Subject key identifier: 07:E5:18:67:90:0E:0A:D7:9B:FC:38:3D:6C:46:3F:1E:9D:35:E4:95
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 01857295CE5552FE97CDF150BE5F4F7F65C8
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/B-UYZ5AOCteb_Dg9bEY_Hp015JU.roa
Signing time: Mon 02 Jan 2023 13:04:58 +0000
ROA not before: Mon 02 Jan 2023 13:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39563
IP address blocks: 185.231.16.0/24 maxlen: 24
185.231.17.0/24 maxlen: 24
185.231.18.0/24 maxlen: 24
185.231.19.0/24 maxlen: 24
2a0c:3900::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 29 Aug 2023 05:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ce:55:52:fe:97:cd:f1:50:be:5f:4f:7f:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Jan 2 13:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07e51867900e0ad79bfc383d6c463f1e9d35e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:ea:3e:61:48:ab:54:1a:c2:1e:79:c7:17:
5e:0b:f8:01:2b:68:4b:2d:d8:f2:2d:b7:cb:7b:3b:
e2:2c:65:63:3e:dd:72:2d:fa:07:3b:0d:0e:7d:72:
54:47:31:8c:ee:3f:d5:1e:2c:62:74:dc:54:a0:60:
d3:65:96:35:e7:5e:29:d9:1d:27:56:a2:08:b8:f4:
15:3c:c3:97:7c:a2:17:24:92:7b:33:2f:e0:a4:1f:
31:19:e7:c8:60:20:a3:0f:e6:46:b9:d4:82:75:ad:
07:a5:c0:aa:ea:49:26:ae:76:8a:34:6b:6c:3e:44:
5d:e5:66:4d:91:ef:c3:be:00:24:f1:86:f3:6a:96:
c1:77:3d:23:ae:db:21:6e:87:c4:1b:53:0e:4d:53:
c1:e7:95:90:39:48:23:5a:a6:29:1d:8f:17:db:2b:
ad:0d:b1:b5:4b:09:a6:93:46:a3:c1:d5:38:0b:24:
6f:9f:1c:49:a1:db:47:27:e2:d4:9f:a6:8e:a4:f2:
b5:a4:3a:b4:11:44:30:b5:5b:95:b4:f9:22:87:e0:
d8:3f:61:0a:d7:9a:fd:ed:0c:b8:4e:c5:47:ec:60:
01:a9:39:7a:56:87:80:75:c2:ac:89:b9:2d:df:18:
5f:97:42:8c:aa:20:49:11:a4:32:d7:82:f2:f2:83:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:18:67:90:0E:0A:D7:9B:FC:38:3D:6C:46:3F:1E:9D:35:E4:95
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/B-UYZ5AOCteb_Dg9bEY_Hp015JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.16.0/22
IPv6:
2a0c:3900::/29
Signature Algorithm: sha256WithRSAEncryption
62:75:b6:f0:c9:5f:96:87:5e:fd:13:15:ea:be:46:51:45:26:
6f:0a:5c:17:4c:a5:aa:3c:21:72:c8:63:c9:86:60:eb:0d:5e:
53:14:22:b9:05:b3:51:3f:a4:bd:fd:39:36:8d:01:84:a4:80:
7d:fa:9e:41:f8:20:06:cb:6d:ae:7a:48:82:91:ca:10:84:7b:
78:7e:51:e6:b2:01:56:bc:c3:4a:98:ae:79:61:5e:91:12:75:
1d:7e:a0:55:d3:a6:e7:26:f2:de:07:92:2c:de:b2:88:c7:7f:
49:c0:04:d8:88:80:27:f6:a1:68:a5:f3:6f:18:95:f3:93:0d:
70:07:28:96:4c:0a:0d:76:b6:06:1d:15:ca:ca:56:b1:67:be:
db:68:d7:8e:e0:7b:6c:b7:0e:d6:d4:9b:e5:ef:ff:05:56:f4:
e6:e8:35:83:fd:6f:1f:d9:28:5a:fb:cf:05:fa:df:db:4b:2c:
59:a7:49:3a:4c:34:fd:20:76:8a:da:31:26:16:1e:53:c9:19:
6a:83:ca:57:01:21:b9:c9:b2:14:d0:a3:8a:f5:ba:78:54:b9:
2e:f9:a2:33:53:c8:7d:08:ca:ac:c5:d4:8b:8b:81:c5:2c:e6:
e9:cb:89:21:98:59:01:35:55:43:ef:59:53:33:38:0f:cd:65:
e8:68:12:87
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVylc5VUv6XzfFQvl9Pf2XIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDgwYmFiNTViZjM0NzMxODhjMjBjNzM2NmE2Y2IwNDRj
NzE5NWMwHhcNMjMwMTAyMTMwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2U1MTg2NzkwMGUwYWQ3OWJmYzM4M2Q2YzQ2M2YxZTlkMzVlNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsLqPmFIq1Qawh55xxdeC/gBK2hL
LdjyLbfLezviLGVjPt1yLfoHOw0OfXJURzGM7j/VHixidNxUoGDTZZY1514p2R0n
VqIIuPQVPMOXfKIXJJJ7My/gpB8xGefIYCCjD+ZGudSCda0HpcCq6kkmrnaKNGts
PkRd5WZNke/DvgAk8YbzapbBdz0jrtshbofEG1MOTVPB55WQOUgjWqYpHY8X2yut
DbG1Swmmk0ajwdU4CyRvnxxJodtHJ+LUn6aOpPK1pDq0EUQwtVuVtPkih+DYP2EK
15r97Qy4TsVH7GABqTl6VoeAdcKsibkt3xhfl0KMqiBJEaQy14Ly8oNrZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAflGGeQDgrXm/w4PWxGPx6dNeSVMB8GA1UdIwQY
MBaAFH4IC6tVvzRzGIwgxzZqbLBExxlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMt
NjMwYmQ3M2NlMjY3LzEvQi1VWVo1QU9DdGViX0RnOWJFWV9IcDAxNUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMtNjMwYmQ3M2NlMjY3
LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuecQMA0E
AgACMAcDBQMqDDkAMA0GCSqGSIb3DQEBCwUAA4IBAQBidbbwyV+Wh179ExXqvkZR
RSZvClwXTKWqPCFyyGPJhmDrDV5TFCK5BbNRP6S9/Tk2jQGEpIB9+p5B+CAGy22u
ekiCkcoQhHt4flHmsgFWvMNKmK55YV6REnUdfqBV06bnJvLeB5Is3rKIx39JwATY
iIAn9qFopfNvGJXzkw1wByiWTAoNdrYGHRXKylaxZ77baNeO4Htstw7W1Jvl7/8F
VvTm6DWD/W8f2Sha+88F+t/bSyxZp0k6TDT9IHaK2jEmFh5TyRlqg8pXASG5ybIU
0KOK9bp4VLku+aIzU8h9CMqsxdSLi4HFLObpy4khmFkBNVVD71lTMzgPzWXoaBKH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:25 2024 by rpki-client on console-ams.rpki-client.org