Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ueA7Ze7ol0mGG5m0RFdEswexzx8.roa
File: ueA7Ze7ol0mGG5m0RFdEswexzx8.roa (raw, json)
Hash identifier: 7XkBDQtcEqHdpeto2weiMYfGVGrS1xNxpv5TH95HUfU=
Subject key identifier: B9:E0:3B:65:EE:E8:97:49:86:1B:99:B4:44:57:44:B3:07:B1:CF:1F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0187C11046B914DE1760728E4A6696AE3574
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ueA7Ze7ol0mGG5m0RFdEswexzx8.roa
Signing time: Thu 27 Apr 2023 04:54:41 +0000
ROA not before: Thu 27 Apr 2023 04:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134176
IP address blocks: 85.209.254.0/24 maxlen: 32
185.190.81.0/24 maxlen: 24
185.137.182.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:10:46:b9:14:de:17:60:72:8e:4a:66:96:ae:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 27 04:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e03b65eee89749861b99b4445744b307b1cf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:50:0f:51:ca:78:62:69:f6:5e:ee:26:59:
e5:32:90:84:78:b3:82:d1:77:ec:d8:68:b7:b0:cf:
e5:2e:88:5c:02:d6:d6:06:21:7c:36:13:4f:91:e7:
59:eb:62:52:db:a1:ac:db:be:4e:ec:17:9d:1a:c8:
8b:25:77:b6:d6:5c:1d:fe:da:59:e7:28:c1:ce:e2:
ed:c7:af:6b:b8:bc:19:f9:fb:8d:1a:18:ac:12:70:
7c:85:09:1a:49:5d:f1:62:79:1c:12:59:fc:70:47:
0b:db:22:6d:1e:a5:b7:ec:9b:09:91:88:82:91:e3:
c8:c1:0a:9f:c6:0c:57:47:3a:48:c9:84:de:c3:64:
a6:f5:b4:6c:49:db:73:78:0c:07:3e:ef:ce:fb:98:
8d:c5:84:91:ff:ae:69:1b:1a:54:ba:3d:0d:06:3b:
98:c7:13:6e:36:1a:0d:35:c6:fa:37:cb:7e:d2:3e:
fc:3b:68:13:27:29:87:a0:ff:4f:e1:e3:96:57:50:
ff:78:88:3a:cb:b8:d2:8e:db:33:2a:97:13:58:de:
a9:05:f9:a4:b8:a8:ce:2a:93:ad:59:b1:2c:1f:85:
6c:5d:ef:82:c9:bc:89:af:01:4e:82:49:f4:3f:c5:
99:2b:92:6b:4b:66:14:11:ae:4e:1a:da:af:25:af:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:3B:65:EE:E8:97:49:86:1B:99:B4:44:57:44:B3:07:B1:CF:1F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ueA7Ze7ol0mGG5m0RFdEswexzx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.254.0/24
185.137.182.0/24
185.190.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:cb:62:a3:74:6d:09:6c:f7:73:3f:9a:7b:c3:d5:f7:33:9d:
52:58:0e:54:ad:b9:3e:5e:ed:a2:43:0c:81:b0:16:8e:ec:16:
e6:96:f9:9a:a4:81:37:41:b3:d8:c7:e8:52:7d:ff:5a:07:ae:
62:9c:9b:db:5e:91:5c:76:9f:09:73:7f:a1:78:c4:18:f2:78:
7f:b7:92:24:92:4c:69:4a:88:50:4d:8b:b7:82:05:4e:8f:e0:
17:0a:1b:cb:21:c6:1c:4c:11:e9:52:e8:2f:53:6f:78:92:38:
b5:83:2d:58:b9:c5:74:38:59:da:1b:ae:72:8d:51:f7:58:92:
8b:a0:8b:1d:d4:66:89:4a:e2:6f:db:4e:a6:ed:a3:f5:e2:95:
e7:1c:cf:1e:f3:56:d9:2e:9e:f2:72:b5:13:31:3f:fc:31:4a:
dd:87:0f:08:1c:0e:bb:84:a7:09:f5:c8:d1:a9:66:cd:04:ec:
19:b9:2b:27:31:0a:3a:2e:3b:51:01:8c:5c:43:66:07:c3:93:
cb:40:97:54:56:c3:da:8d:89:a9:d9:a4:36:53:d3:7a:8c:6d:
41:e6:8e:00:63:54:84:be:36:66:26:c9:05:39:b2:46:5b:b6:
7b:08:e5:b2:48:2d:d7:72:72:f3:21:6e:4d:b3:5d:86:e7:49:
42:13:e4:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYfBEEa5FN4XYHKOSmaWrjV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwNDI3MDQ1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWUwM2I2NWVlZTg5NzQ5ODYxYjk5YjQ0NDU3NDRiMzA3YjFjZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiVQD1HKeGJp9l7uJlnlMpCEeLOC
0Xfs2Gi3sM/lLohcAtbWBiF8NhNPkedZ62JS26Gs275O7BedGsiLJXe21lwd/tpZ
5yjBzuLtx69ruLwZ+fuNGhisEnB8hQkaSV3xYnkcEln8cEcL2yJtHqW37JsJkYiC
kePIwQqfxgxXRzpIyYTew2Sm9bRsSdtzeAwHPu/O+5iNxYSR/65pGxpUuj0NBjuY
xxNuNhoNNcb6N8t+0j78O2gTJymHoP9P4eOWV1D/eIg6y7jSjtszKpcTWN6pBfmk
uKjOKpOtWbEsH4VsXe+CybyJrwFOgkn0P8WZK5JrS2YUEa5OGtqvJa8HZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLngO2Xu6JdJhhuZtERXRLMHsc8fMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvdWVBN1plN29sMG1HRzVtMFJGZEVzd2V4eng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVdH+AwQA
uYm2AwQAub5RMA0GCSqGSIb3DQEBCwUAA4IBAQCuy2KjdG0JbPdzP5p7w9X3M51S
WA5Urbk+Xu2iQwyBsBaO7BbmlvmapIE3QbPYx+hSff9aB65inJvbXpFcdp8Jc3+h
eMQY8nh/t5IkkkxpSohQTYu3ggVOj+AXChvLIcYcTBHpUugvU294kji1gy1YucV0
OFnaG65yjVH3WJKLoIsd1GaJSuJv206m7aP14pXnHM8e81bZLp7ycrUTMT/8MUrd
hw8IHA67hKcJ9cjRqWbNBOwZuSsnMQo6LjtRAYxcQ2YHw5PLQJdUVsPajYmp2aQ2
U9N6jG1B5o4AY1SEvjZmJskFObJGW7Z7COWySC3XcnLzIW5Ns12G50lCE+SH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org