Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/ySA9Xq9uiSZVX_jKKd_atvX_GDw.roa
File: ySA9Xq9uiSZVX_jKKd_atvX_GDw.roa (raw, json)
Hash identifier: PZAcHrJ3eWzC/HaVXh5Gx8HtWUhWMYFTURNgs0BbZGc=
Subject key identifier: C9:20:3D:5E:AF:6E:89:26:55:5F:F8:CA:29:DF:DA:B6:F5:FF:18:3C
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0186C59F3E92C516708A5E3BAB1AC8867B81
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/ySA9Xq9uiSZVX_jKKd_atvX_GDw.roa
Signing time: Thu 09 Mar 2023 09:06:33 +0000
ROA not before: Thu 09 Mar 2023 09:06:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.65.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:9f:3e:92:c5:16:70:8a:5e:3b:ab:1a:c8:86:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Mar 9 09:06:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9203d5eaf6e8926555ff8ca29dfdab6f5ff183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:08:90:a0:9a:02:fa:0a:be:34:e3:5d:90:
d7:14:36:d6:f9:b0:3f:de:a2:fa:4f:6a:43:e9:6d:
4f:36:22:58:b1:66:48:3d:1f:d8:90:85:c3:b9:97:
01:25:77:7a:0a:3d:12:34:2f:6a:7a:ed:45:a5:21:
8c:25:84:72:b6:cd:fa:5a:7d:27:00:cf:26:b7:a3:
6a:82:db:2f:8a:3f:d1:a4:6b:1f:f4:c6:6d:d8:12:
a2:37:6e:1b:f1:94:07:09:67:25:92:82:15:b1:08:
31:c2:e1:9a:62:47:b0:88:b6:50:bb:6c:99:b0:12:
bf:27:f3:64:8d:db:d9:db:7d:a2:a0:42:77:63:8a:
67:17:d7:36:bc:bd:c6:e6:ba:24:b7:0a:3c:e9:96:
8b:e0:c5:5b:c7:93:97:e5:da:a6:8f:31:b0:f8:f3:
f4:7c:be:e9:a7:d5:29:b2:aa:e9:ad:6b:8f:8c:96:
59:18:60:9e:c7:94:e4:11:a5:38:3e:3c:e4:05:7c:
76:86:74:df:c4:31:87:9c:d5:b6:28:ef:d4:72:d1:
10:29:d0:10:59:ab:7b:cd:a3:b9:f2:29:5b:c9:8a:
e0:cd:8b:cf:d2:de:db:ce:a4:4c:f4:81:0d:1b:83:
54:2c:fa:65:74:e0:5d:4c:c7:64:b9:86:12:32:67:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:3D:5E:AF:6E:89:26:55:5F:F8:CA:29:DF:DA:B6:F5:FF:18:3C
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/ySA9Xq9uiSZVX_jKKd_atvX_GDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:50:2b:16:51:a0:28:7e:cb:63:0e:16:4c:a4:87:d7:3e:c4:
07:54:f2:53:c6:ed:47:47:e5:dc:10:92:93:96:d6:d1:c2:28:
9f:b8:eb:71:2a:81:55:04:71:5b:86:42:fc:12:44:46:86:43:
f5:3b:9f:b3:ac:b7:aa:c7:00:f7:e2:77:f8:16:52:df:ad:c0:
93:30:66:2a:42:f3:0e:b1:73:0e:f5:ce:c3:ab:ad:38:ab:6a:
b5:40:e3:14:03:3d:2e:37:98:bf:96:06:5e:29:7f:01:87:a4:
6c:12:d3:31:1f:d1:be:ae:8d:7f:16:26:51:01:77:07:34:3f:
8f:03:01:c3:32:94:43:6c:fc:6d:07:30:a5:87:64:50:1f:e0:
ce:33:74:9f:f4:bc:c5:73:ae:9a:98:d4:c8:bf:87:39:60:b9:
5b:fc:cb:b0:c9:cd:0d:33:e8:73:cc:e4:f8:f9:81:41:8e:b0:
53:8f:d5:93:e6:d6:4d:78:d1:fe:d0:b1:ec:5d:ed:1b:d8:22:
ba:82:8f:b0:20:c0:a7:82:56:7f:30:d2:42:f4:da:c4:65:13:
ff:6e:90:ac:ec:65:10:24:43:a5:60:21:1e:40:b9:9b:61:f5:
9e:f9:63:27:65:3c:bf:a2:da:a0:80:33:21:14:c1:79:d1:0d:
d0:6d:01:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbFnz6SxRZwil47qxrIhnuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0
MTE4ZjAwHhcNMjMwMzA5MDkwNjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTIwM2Q1ZWFmNmU4OTI2NTU1ZmY4Y2EyOWRmZGFiNmY1ZmYxODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLgIkKCaAvoKvjTjXZDXFDbW+bA/
3qL6T2pD6W1PNiJYsWZIPR/YkIXDuZcBJXd6Cj0SNC9qeu1FpSGMJYRyts36Wn0n
AM8mt6Nqgtsvij/RpGsf9MZt2BKiN24b8ZQHCWclkoIVsQgxwuGaYkewiLZQu2yZ
sBK/J/NkjdvZ232ioEJ3Y4pnF9c2vL3G5roktwo86ZaL4MVbx5OX5dqmjzGw+PP0
fL7pp9UpsqrprWuPjJZZGGCex5TkEaU4PjzkBXx2hnTfxDGHnNW2KO/UctEQKdAQ
Wat7zaO58ilbyYrgzYvP0t7bzqRM9IENG4NULPpldOBdTMdkuYYSMmcdKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkgPV6vbokmVV/4yinf2rb1/xg8MB8GA1UdIwQY
MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt
MjlmYTQ3YjY4MDkzLzEveVNBOVhxOXVpU1pWWF9qS0tkX2F0dlhfR0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz
LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUFpMA0G
CSqGSIb3DQEBCwUAA4IBAQA+UCsWUaAofstjDhZMpIfXPsQHVPJTxu1HR+XcEJKT
ltbRwiifuOtxKoFVBHFbhkL8EkRGhkP1O5+zrLeqxwD34nf4FlLfrcCTMGYqQvMO
sXMO9c7Dq604q2q1QOMUAz0uN5i/lgZeKX8Bh6RsEtMxH9G+ro1/FiZRAXcHND+P
AwHDMpRDbPxtBzClh2RQH+DOM3Sf9LzFc66amNTIv4c5YLlb/Muwyc0NM+hzzOT4
+YFBjrBTj9WT5tZNeNH+0LHsXe0b2CK6go+wIMCnglZ/MNJC9NrEZRP/bpCs7GUQ
JEOlYCEeQLmbYfWe+WMnZTy/otqggDMhFMF50Q3QbQHk
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:19 2024 by rpki-client on console-ams.rpki-client.org