Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/CMsFB1DDwl8QT2djl9dNPUqE5kY.roa
File: CMsFB1DDwl8QT2djl9dNPUqE5kY.roa (raw, json)
Hash identifier: iQaH/JCKF0yOBsWgAT+2x/vHi3lS+hm8qSwegaULkyM=
Subject key identifier: 08:CB:05:07:50:C3:C2:5F:10:4F:67:63:97:D7:4D:3D:4A:84:E6:46
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 018572FA48A0415C8B00070DC88FDC441F13
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/CMsFB1DDwl8QT2djl9dNPUqE5kY.roa
Signing time: Mon 02 Jan 2023 14:54:43 +0000
ROA not before: Mon 02 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201598
IP address blocks: 185.69.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:48:a0:41:5c:8b:00:07:0d:c8:8f:dc:44:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Jan 2 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08cb050750c3c25f104f676397d74d3d4a84e646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:64:aa:19:1e:20:d2:de:74:21:58:9c:b1:
dd:7a:83:cd:06:d7:0f:9a:1d:31:d8:64:af:16:f2:
8f:c4:33:dc:03:dc:f2:b6:d2:f1:6b:d3:86:13:1f:
55:c7:9a:40:13:1a:de:fc:5c:bd:25:91:cb:c8:fe:
17:d8:1f:46:bb:8c:af:93:3b:1e:6a:87:f1:08:38:
1e:9b:e7:2c:d2:54:6c:4a:64:33:3a:9e:12:61:69:
41:1d:5d:5d:29:77:13:04:77:10:05:5d:57:cf:83:
44:34:fe:69:cb:e1:a1:6f:ab:1b:04:8c:0b:ab:bf:
11:94:a9:a8:fb:29:68:36:10:8a:64:45:dd:16:ac:
37:07:f4:58:cf:53:51:26:5d:d1:19:46:f1:88:dd:
6f:d3:d1:63:28:99:0c:dc:f5:a9:14:36:30:59:5b:
65:c1:15:76:87:64:a6:dd:89:d0:6f:89:5c:34:25:
30:36:76:36:f1:32:a9:51:c6:b4:ca:8a:06:bd:ae:
10:be:25:56:30:57:18:ce:97:0a:c6:cf:ee:c7:57:
07:7b:18:5c:e5:0d:c7:da:6f:f4:57:dc:74:ea:88:
55:83:ff:c4:c9:41:1c:1c:13:9e:b5:fe:82:64:7f:
77:5c:e0:7f:da:64:1a:c6:1a:e8:6f:aa:ef:e5:7c:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:05:07:50:C3:C2:5F:10:4F:67:63:97:D7:4D:3D:4A:84:E6:46
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/CMsFB1DDwl8QT2djl9dNPUqE5kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.172.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d7:21:dd:05:10:2a:8c:7a:3f:c8:ad:34:cd:c7:e9:d3:68:
8e:f3:fa:1e:c7:d4:5b:0f:64:39:fa:76:98:aa:c9:1d:6f:c9:
9c:b2:50:da:c2:c1:5d:0f:6e:b8:cf:b5:a4:9d:7b:0d:56:72:
ce:c4:e4:1b:a5:1f:b6:bf:62:e4:fe:1a:f2:4b:62:96:b5:dd:
d2:58:64:b0:b9:17:16:7d:15:54:0d:ff:76:1f:14:73:b7:d2:
cc:64:d5:2e:85:ec:85:79:89:48:11:62:45:90:5d:7c:7c:ef:
0c:75:16:4b:fe:2b:f6:3b:7f:46:fe:e2:1a:cb:14:92:f8:58:
f6:14:d6:01:bc:80:c9:01:f5:f7:fa:f0:09:c7:d6:73:51:a1:
fc:ff:92:34:fb:46:d7:68:2d:9a:4a:b4:fb:64:ac:8d:74:73:
7d:a2:7d:b2:7b:41:b9:2e:0b:01:b5:e9:a9:d6:87:6a:e7:ad:
ba:05:ca:bd:dc:3e:04:21:4b:3e:ea:dc:4c:19:24:a0:45:bd:
4d:4b:ea:61:07:e6:71:2c:65:29:11:e9:d5:94:65:13:2e:6c:
3e:f3:34:98:cc:95:4f:e0:75:81:00:aa:eb:85:ed:01:ef:30:
ac:e7:e5:60:cd:a7:82:82:ae:c2:f2:08:ef:3c:ac:32:2f:ea:
8d:30:ad:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy+kigQVyLAAcNyI/cRB8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGZmYjUyMWVjNzM5ZWYxODI2NWM4Y2ZlN2ZkZjI5NWQ4
N2RjZjIwHhcNMjMwMTAyMTQ1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNiMDUwNzUwYzNjMjVmMTA0ZjY3NjM5N2Q3NGQzZDRhODRlNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyddkqhkeINLedCFYnLHdeoPNBtcP
mh0x2GSvFvKPxDPcA9zyttLxa9OGEx9Vx5pAExre/Fy9JZHLyP4X2B9Gu4yvkzse
aofxCDgem+cs0lRsSmQzOp4SYWlBHV1dKXcTBHcQBV1Xz4NENP5py+Ghb6sbBIwL
q78RlKmo+yloNhCKZEXdFqw3B/RYz1NRJl3RGUbxiN1v09FjKJkM3PWpFDYwWVtl
wRV2h2Sm3YnQb4lcNCUwNnY28TKpUca0yooGva4QviVWMFcYzpcKxs/ux1cHexhc
5Q3H2m/0V9x06ohVg//EyUEcHBOetf6CZH93XOB/2mQaxhrob6rv5XxF7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjLBQdQw8JfEE9nY5fXTT1KhOZGMB8GA1UdIwQY
MBaAFC7f+1IexznvGCZcjP5/3yldh9zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEt
NDE4OTNjNGRhMDYxLzEvQ01zRkIxRER3bDhRVDJkamw5ZE5QVXFFNWtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEtNDE4OTNjNGRhMDYx
LzEvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUWsMA0G
CSqGSIb3DQEBCwUAA4IBAQB11yHdBRAqjHo/yK00zcfp02iO8/oex9RbD2Q5+naY
qskdb8mcslDawsFdD264z7WknXsNVnLOxOQbpR+2v2Lk/hryS2KWtd3SWGSwuRcW
fRVUDf92HxRzt9LMZNUuheyFeYlIEWJFkF18fO8MdRZL/iv2O39G/uIayxSS+Fj2
FNYBvIDJAfX3+vAJx9ZzUaH8/5I0+0bXaC2aSrT7ZKyNdHN9on2ye0G5LgsBtemp
1odq5626Bcq93D4EIUs+6txMGSSgRb1NS+phB+ZxLGUpEenVlGUTLmw+8zSYzJVP
4HWBAKrrhe0B7zCs5+VgzaeCgq7C8gjvPKwyL+qNMK0I
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org