Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/F26aZP_SDZb5fjrIHJLA8kwnH20.roa
File: F26aZP_SDZb5fjrIHJLA8kwnH20.roa (raw, json)
Hash identifier: H+uCHreiGxUU3lyPNvioIflA4/IFlGv2AiB/qHi/yy4=
Subject key identifier: 17:6E:9A:64:FF:D2:0D:96:F9:7E:3A:C8:1C:92:C0:F2:4C:27:1F:6D
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 01856ECB6481F8CC550D9AD98F16CF8B5B3A
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/F26aZP_SDZb5fjrIHJLA8kwnH20.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50749
IP address blocks: 185.134.96.0/22 maxlen: 22
185.202.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:64:81:f8:cc:55:0d:9a:d9:8f:16:cf:8b:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176e9a64ffd20d96f97e3ac81c92c0f24c271f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:ac:82:bc:e6:2b:df:c8:74:c8:a2:25:52:
1b:0c:1f:1a:04:46:37:7a:e4:39:15:33:28:db:a2:
fb:2b:c1:59:54:77:9c:92:e2:26:f1:d3:89:4f:ee:
35:c3:25:8c:f1:9b:64:b3:41:c5:cd:08:76:46:de:
77:ea:b1:2f:3f:28:6b:fb:f6:6b:e3:06:83:39:6c:
d4:f9:3a:69:49:8a:39:33:ce:ac:8e:fd:75:15:f1:
83:a4:72:6d:38:47:54:c3:55:a3:12:ff:63:6e:7d:
f8:4e:a2:04:5a:9f:55:d0:99:7c:7b:d5:ef:03:c1:
50:af:c8:54:da:be:e0:d3:46:d0:b5:50:a6:98:22:
1a:42:c1:bb:34:7a:4f:b2:19:97:8a:2a:50:c7:89:
34:82:3c:34:94:43:ca:d3:3f:26:b1:ca:e2:11:f4:
ef:b2:95:12:c8:c6:ad:69:7a:62:ef:0c:64:5f:ea:
d7:63:cb:6f:01:b0:90:c5:bf:8a:d7:aa:d9:37:f2:
39:c6:33:3f:5d:c2:17:50:24:44:f6:80:c7:08:0a:
4a:dd:7a:b7:82:9b:b1:fc:63:4d:ca:60:e3:cb:9c:
ef:a6:cc:1b:d8:b0:b3:81:93:d3:ea:5e:7d:b7:ae:
57:c3:a9:37:4d:40:66:1b:68:63:e2:39:33:72:12:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:9A:64:FF:D2:0D:96:F9:7E:3A:C8:1C:92:C0:F2:4C:27:1F:6D
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/F26aZP_SDZb5fjrIHJLA8kwnH20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.96.0/22
185.202.56.0/22
Signature Algorithm: sha256WithRSAEncryption
36:1a:9a:cc:81:65:5f:f9:fb:e8:85:58:43:72:16:90:aa:32:
ac:27:86:63:4a:04:7c:a9:35:f7:79:41:fd:2d:d3:c0:08:dc:
e8:ec:37:14:4e:06:33:3a:10:65:5f:41:f8:14:66:96:f0:dd:
03:b4:7e:d9:7b:9c:dc:19:17:0d:86:4e:8f:c1:54:f2:b4:23:
5b:4a:ec:97:58:a3:a5:90:13:97:74:1c:09:37:50:25:6b:b4:
8b:be:04:53:06:8b:15:48:16:ee:9d:43:49:48:ba:db:91:44:
f9:79:2a:6e:12:8f:37:43:dd:28:c4:f8:1d:77:65:b3:ac:d6:
6c:2c:18:42:63:5d:ad:8a:7b:66:aa:88:84:de:bf:84:32:2e:
cd:f6:c2:0a:7d:c6:cc:73:1c:0b:db:08:32:d2:53:b7:95:58:
eb:7a:7f:3e:dd:15:4a:64:98:1c:1a:db:d8:a9:aa:f8:43:57:
37:98:dd:df:e9:22:35:bc:f1:0b:4e:2d:37:7c:7d:9c:66:de:
8a:22:86:47:58:4f:4d:10:c0:a8:31:81:fc:e5:68:ea:71:22:
7f:71:9c:5b:da:d2:7b:6b:43:c4:a9:ec:b4:37:46:30:c2:86:
18:3a:96:4d:28:12:b9:86:08:15:65:04:ff:70:9f:93:49:fc:
6b:04:59:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuy2SB+MxVDZrZjxbPi1s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz
NzU4YzAwHhcNMjMwMTAxMTkyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzZlOWE2NGZmZDIwZDk2Zjk3ZTNhYzgxYzkyYzBmMjRjMjcxZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfesgrzmK9/IdMiiJVIbDB8aBEY3
euQ5FTMo26L7K8FZVHeckuIm8dOJT+41wyWM8Ztks0HFzQh2Rt536rEvPyhr+/Zr
4waDOWzU+TppSYo5M86sjv11FfGDpHJtOEdUw1WjEv9jbn34TqIEWp9V0Jl8e9Xv
A8FQr8hU2r7g00bQtVCmmCIaQsG7NHpPshmXiipQx4k0gjw0lEPK0z8mscriEfTv
spUSyMataXpi7wxkX+rXY8tvAbCQxb+K16rZN/I5xjM/XcIXUCRE9oDHCApK3Xq3
gpux/GNNymDjy5zvpswb2LCzgZPT6l59t65Xw6k3TUBmG2hj4jkzchI2YwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBdummT/0g2W+X46yBySwPJMJx9tMB8GA1UdIwQY
MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt
MDBjZDVlYzAwZDExLzEvRjI2YVpQX1NEWmI1ZmpySUhKTEE4a3duSDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx
LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYZgAwQC
uco4MA0GCSqGSIb3DQEBCwUAA4IBAQA2GprMgWVf+fvohVhDchaQqjKsJ4ZjSgR8
qTX3eUH9LdPACNzo7DcUTgYzOhBlX0H4FGaW8N0DtH7Ze5zcGRcNhk6PwVTytCNb
SuyXWKOlkBOXdBwJN1Ala7SLvgRTBosVSBbunUNJSLrbkUT5eSpuEo83Q90oxPgd
d2WzrNZsLBhCY12tintmqoiE3r+EMi7N9sIKfcbMcxwL2wgy0lO3lVjren8+3RVK
ZJgcGtvYqar4Q1c3mN3f6SI1vPELTi03fH2cZt6KIoZHWE9NEMCoMYH85WjqcSJ/
cZxb2tJ7a0PEqey0N0YwwoYYOpZNKBK5hggVZQT/cJ+TSfxrBFnv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org