Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/AjH_P1HvbT8aZOB3sQLiLe7tx58.roa
File: AjH_P1HvbT8aZOB3sQLiLe7tx58.roa (raw, json)
Hash identifier: fKomaQF7VA4oDd19md7JM2rMiz14XfvLUADWS5nskxg=
Subject key identifier: 02:31:FF:3F:51:EF:6D:3F:1A:64:E0:77:B1:02:E2:2D:EE:ED:C7:9F
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 019072A425EF305F961F32CF72BF37FC0659
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/AjH_P1HvbT8aZOB3sQLiLe7tx58.roa
Signing time: Tue 02 Jul 2024 08:51:18 +0000
ROA not before: Tue 02 Jul 2024 08:51:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 185.163.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 16:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:a4:25:ef:30:5f:96:1f:32:cf:72:bf:37:fc:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Jul 2 08:51:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0231ff3f51ef6d3f1a64e077b102e22deeedc79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:b9:02:3f:55:fc:8f:29:46:6e:14:7e:c3:
df:4b:33:5d:8c:a2:4d:18:71:c2:7c:d5:d1:a8:fe:
25:cf:2d:21:e5:ae:bc:2d:03:ff:e2:49:73:73:60:
47:1b:06:60:c0:be:fd:32:66:a4:89:ae:6c:68:c9:
52:8a:bd:98:3d:1c:ff:51:f9:10:7c:53:be:10:58:
7b:a4:62:bd:f3:ca:6c:39:24:70:96:de:62:fa:7e:
0e:6e:71:26:90:29:ad:7e:66:36:90:db:df:4c:aa:
48:b9:fa:9a:88:ff:06:33:a4:0c:5e:0a:82:8d:bf:
a9:5c:18:c6:f0:01:27:c0:31:47:d1:15:62:55:f3:
19:d8:6c:9f:61:d5:5e:75:a8:12:bb:41:e6:fa:d7:
0a:ca:d4:7a:0a:cb:c6:02:af:f4:91:ca:72:d0:dd:
81:6d:a6:a9:35:5b:b8:95:26:62:48:ca:21:0d:48:
1e:e3:7b:0f:fa:5b:eb:67:87:ce:97:ed:e9:e9:f1:
a2:9d:1e:76:22:78:53:af:50:6d:54:ed:18:68:92:
29:d6:c7:2f:27:35:32:05:9b:04:5b:53:95:93:15:
8b:fe:8b:1f:f7:63:40:06:a5:30:08:62:01:2b:33:
18:c2:ba:45:41:99:43:29:1d:73:75:1a:a3:46:e8:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:FF:3F:51:EF:6D:3F:1A:64:E0:77:B1:02:E2:2D:EE:ED:C7:9F
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/AjH_P1HvbT8aZOB3sQLiLe7tx58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:30:49:04:14:53:0b:62:05:4c:62:a6:b5:5e:fb:37:a3:
37:cb:09:e8:86:8a:6d:09:41:d3:da:35:69:42:16:6f:16:aa:
52:e8:3d:ad:51:71:3c:d7:60:ec:6b:70:47:14:03:fa:0d:9b:
2b:fc:85:48:cb:46:84:00:f3:98:1d:89:cd:a2:57:69:38:95:
19:b6:69:92:f0:84:9a:02:3a:a6:18:ac:95:eb:f7:20:69:ba:
1b:22:d6:97:f7:e4:c7:14:61:ad:00:91:ad:e0:7e:18:0b:7d:
54:91:70:f3:41:c1:13:e1:84:55:da:53:21:1a:ef:b6:2e:8c:
67:bb:ee:c2:eb:55:7c:f7:1a:ce:7d:32:40:94:c8:8f:ad:27:
bc:ae:09:cf:ff:0e:d8:e5:51:cd:4c:75:6b:0c:ab:b4:dd:18:
d8:0d:30:d3:5b:e7:86:b3:77:ce:dc:ab:a6:c9:74:74:be:0e:
df:82:67:29:6c:5b:1c:17:a9:b4:7c:1d:12:85:c1:77:35:c8:
f7:e5:c3:79:f0:a7:ee:39:8c:a5:81:3a:b8:c2:8a:a0:65:7e:
1e:ba:8d:64:fd:66:8f:e5:50:f3:6e:ad:42:99:1b:54:4d:dc:
a4:52:0e:18:b9:2d:63:c3:86:e0:6c:89:2c:ef:48:64:fd:90:
f2:48:4e:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBypCXvMF+WHzLPcr83/AZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjgwYmM0YjU5N2MxNzZiZDg1MzhjMTg4ZmVjNzNkYTI1
ZTZlODQwHhcNMjQwNzAyMDg1MTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjMxZmYzZjUxZWY2ZDNmMWE2NGUwNzdiMTAyZTIyZGVlZWRjNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaK5Aj9V/I8pRm4UfsPfSzNdjKJN
GHHCfNXRqP4lzy0h5a68LQP/4klzc2BHGwZgwL79Mmakia5saMlSir2YPRz/UfkQ
fFO+EFh7pGK988psOSRwlt5i+n4ObnEmkCmtfmY2kNvfTKpIufqaiP8GM6QMXgqC
jb+pXBjG8AEnwDFH0RViVfMZ2GyfYdVedagSu0Hm+tcKytR6CsvGAq/0kcpy0N2B
baapNVu4lSZiSMohDUge43sP+lvrZ4fOl+3p6fGinR52InhTr1BtVO0YaJIp1scv
JzUyBZsEW1OVkxWL/osf92NABqUwCGIBKzMYwrpFQZlDKR1zdRqjRugXEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIx/z9R720/GmTgd7EC4i3u7cefMB8GA1UdIwQY
MBaAFJy4C8S1l8F2vYU4wYj+xz2iXm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMt
OWNmZTFiNTdjZDIwLzEvQWpIX1AxSHZiVDhhWk9CM3NRTGlMZTd0eDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMtOWNmZTFiNTdjZDIw
LzEvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaOAMA0G
CSqGSIb3DQEBCwUAA4IBAQASITBJBBRTC2IFTGKmtV77N6M3ywnohoptCUHT2jVp
QhZvFqpS6D2tUXE812Dsa3BHFAP6DZsr/IVIy0aEAPOYHYnNoldpOJUZtmmS8ISa
AjqmGKyV6/cgabobItaX9+THFGGtAJGt4H4YC31UkXDzQcET4YRV2lMhGu+2Loxn
u+7C61V89xrOfTJAlMiPrSe8rgnP/w7Y5VHNTHVrDKu03RjYDTDTW+eGs3fO3Kum
yXR0vg7fgmcpbFscF6m0fB0ShcF3Ncj35cN58KfuOYylgTq4woqgZX4euo1k/WaP
5VDzbq1CmRtUTdykUg4YuS1jw4bgbIks70hk/ZDySE7v
Generated at Sat Sep 7 18:18:04 2024 by rpki-client on console-fra.rpki-client.org