Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aVcjxmltmnFBgKwTT3P7x47jpTA.roa
File: aVcjxmltmnFBgKwTT3P7x47jpTA.roa (raw, json)
Hash identifier: ZExw8Im0ciBobzfcSV0m0FIuY700zzFZ0846ParC2T8=
Subject key identifier: 69:57:23:C6:69:6D:9A:71:41:80:AC:13:4F:73:FB:C7:8E:E3:A5:30
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD482A12FC9696B1CFF46946F070B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aVcjxmltmnFBgKwTT3P7x47jpTA.roa
Signing time: Mon 02 Jan 2023 17:15:07 +0000
ROA not before: Mon 02 Jan 2023 17:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205499
IP address blocks: 185.188.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d4:82:a1:2f:c9:69:6b:1c:ff:46:94:6f:07:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=695723c6696d9a714180ac134f73fbc78ee3a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:77:a5:23:55:bd:01:8c:c0:d1:a6:9c:09:
d3:54:a4:44:76:2a:07:b5:b7:47:38:fa:2a:86:35:
73:40:de:4f:ea:e0:c3:5e:b3:a7:97:e6:9a:59:8a:
28:ad:5c:15:f4:31:e2:b6:60:9e:8a:aa:29:82:01:
04:1a:41:f2:29:11:4c:57:18:6f:6a:a6:c9:4c:84:
09:42:dd:9a:c2:43:dd:a3:c7:78:7f:55:0f:af:6a:
18:fe:87:20:0d:d8:c5:a4:c4:59:bc:91:2d:28:87:
87:1a:51:76:11:d5:ae:d2:b3:e4:0a:22:b0:e7:4b:
d2:ce:3f:8e:37:d4:da:2d:ac:b1:e2:87:ff:0b:ba:
f8:51:db:93:22:bd:68:d5:86:39:0f:0c:e8:8c:bc:
31:54:f3:0e:a1:45:4d:d1:0d:b3:c6:81:8b:7e:b1:
79:c5:25:66:ed:82:5d:b6:88:13:36:1a:e5:f1:d0:
fe:b0:a4:ca:dd:b5:78:47:2b:0c:74:6e:0e:bd:e6:
b3:c0:e6:2f:91:ef:6a:b8:7c:70:c8:4e:2a:4d:42:
34:30:9f:72:64:71:8b:6a:d8:d6:27:b7:01:fd:0d:
98:a4:87:2a:79:6e:28:3a:5d:0f:de:1a:ed:bb:5e:
94:cc:35:09:57:b4:51:3e:c8:28:66:b7:bb:db:dd:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:23:C6:69:6D:9A:71:41:80:AC:13:4F:73:FB:C7:8E:E3:A5:30
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aVcjxmltmnFBgKwTT3P7x47jpTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:45:9c:a8:17:1d:11:46:1b:39:f7:4e:f5:36:18:14:f2:a8:
46:c6:5c:79:66:68:c0:8e:79:62:3a:92:3a:17:8f:46:19:ee:
ca:19:db:d3:80:2b:38:de:ab:b8:ee:de:99:e1:99:8f:bf:27:
a4:b6:ea:8c:e9:80:6a:41:df:20:af:f6:59:1b:a9:06:4a:51:
26:65:da:b7:af:66:05:10:2c:fa:21:12:97:46:53:df:9c:36:
eb:18:3d:5d:5b:a8:fb:17:3b:32:c3:b7:6d:98:ca:14:8a:dc:
8d:f3:f6:bb:28:29:c4:64:88:a2:46:d9:35:48:f7:6f:eb:fc:
92:c1:80:74:ca:b1:68:1b:b4:bc:6e:e6:7e:6d:4f:12:86:8a:
b8:63:b7:00:ff:31:e9:77:5b:09:99:cc:39:06:e4:8c:e9:fc:
8f:c3:72:d8:ec:51:d9:bd:42:1a:4e:c0:53:8a:8b:c5:cb:3a:
5f:89:c6:45:c2:30:77:73:7d:25:18:09:f5:4f:c0:25:d8:0e:
00:b2:1b:57:03:96:e3:54:34:a7:69:1b:c3:76:b9:96:31:a1:
fb:e1:30:dc:78:16:a5:2c:2e:bc:96:ee:bc:b9:08:45:f1:2e:
f6:30:84:f5:f0:c8:ef:14:7d:a3:33:e5:7f:68:15:7a:80:ee:
98:ba:8a:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzetSCoS/JaWsc/0aUbwcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTAyMTcxNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTU3MjNjNjY5NmQ5YTcxNDE4MGFjMTM0ZjczZmJjNzhlZTNhNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4N3pSNVvQGMwNGmnAnTVKREdioH
tbdHOPoqhjVzQN5P6uDDXrOnl+aaWYoorVwV9DHitmCeiqopggEEGkHyKRFMVxhv
aqbJTIQJQt2awkPdo8d4f1UPr2oY/ocgDdjFpMRZvJEtKIeHGlF2EdWu0rPkCiKw
50vSzj+ON9TaLayx4of/C7r4UduTIr1o1YY5DwzojLwxVPMOoUVN0Q2zxoGLfrF5
xSVm7YJdtogTNhrl8dD+sKTK3bV4RysMdG4OveazwOYvke9quHxwyE4qTUI0MJ9y
ZHGLatjWJ7cB/Q2YpIcqeW4oOl0P3hrtu16UzDUJV7RRPsgoZre7291HvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlXI8ZpbZpxQYCsE09z+8eO46UwMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvYVZjanhtbHRtbkZCZ0t3VFQzUDd4NDdqcFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwJMA0G
CSqGSIb3DQEBCwUAA4IBAQB6RZyoFx0RRhs59071NhgU8qhGxlx5ZmjAjnliOpI6
F49GGe7KGdvTgCs43qu47t6Z4ZmPvyektuqM6YBqQd8gr/ZZG6kGSlEmZdq3r2YF
ECz6IRKXRlPfnDbrGD1dW6j7Fzsyw7dtmMoUityN8/a7KCnEZIiiRtk1SPdv6/yS
wYB0yrFoG7S8buZ+bU8Shoq4Y7cA/zHpd1sJmcw5BuSM6fyPw3LY7FHZvUIaTsBT
iovFyzpficZFwjB3c30lGAn1T8Al2A4AshtXA5bjVDSnaRvDdrmWMaH74TDceBal
LC68lu68uQhF8S72MIT18MjvFH2jM+V/aBV6gO6Yuorq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org