Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/ni9gblfiVaaoPTmGLQ1OAD2hT08.roa
File: ni9gblfiVaaoPTmGLQ1OAD2hT08.roa (raw, json)
Hash identifier: 69eN+CWWJ/4AG48FY9RUB0RgOgg6EfVQikRwpdMMJpQ=
Subject key identifier: 9E:2F:60:6E:57:E2:55:A6:A8:3D:39:86:2D:0D:4E:00:3D:A1:4F:4F
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 0185E7A7355824020EA1F97439485670F837
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/ni9gblfiVaaoPTmGLQ1OAD2hT08.roa
Signing time: Wed 25 Jan 2023 06:39:33 +0000
ROA not before: Wed 25 Jan 2023 06:39:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212036
IP address blocks: 185.226.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:a7:35:58:24:02:0e:a1:f9:74:39:48:56:70:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 25 06:39:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e2f606e57e255a6a83d39862d0d4e003da14f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:63:7e:a3:24:54:57:27:58:07:e7:c8:a9:
32:82:8c:eb:a9:de:03:3b:ba:76:21:c9:92:8a:95:
6f:d7:68:9c:25:00:67:68:70:e0:1e:a7:3c:43:48:
73:c8:2d:32:82:81:fd:f3:61:54:59:09:8f:d2:e4:
97:da:d5:05:5e:de:e2:2e:ae:8d:5d:02:88:8c:a1:
cc:e0:1f:a1:f3:3c:54:96:5b:53:a0:b3:9b:c3:e3:
b3:ea:1d:5d:ab:6a:b1:e2:39:88:c2:bc:fe:0f:25:
74:68:b7:83:07:c1:8e:af:12:2e:1e:a7:55:67:a1:
c3:e5:ae:25:26:41:0d:3e:0b:5c:ca:0a:3b:45:fe:
db:ae:59:04:fd:e5:25:27:cd:34:ef:5e:b2:e8:f7:
af:a0:00:f6:7c:ba:c2:15:75:5b:98:91:1d:ad:f3:
12:05:c1:f8:57:43:83:30:90:ba:70:eb:88:d7:c3:
9d:e8:cc:d5:63:88:02:d3:0f:b2:0b:f3:4b:56:0a:
c6:5a:3b:12:ca:7b:63:9c:73:06:b0:a4:dd:b3:8f:
cc:5d:98:a6:c6:b5:cd:9b:cb:5e:65:e4:4c:1b:08:
7b:5d:01:af:23:2a:2b:91:a6:76:d1:49:90:70:06:
ab:35:67:8c:7c:67:d7:61:79:3d:43:91:7d:ee:44:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:60:6E:57:E2:55:A6:A8:3D:39:86:2D:0D:4E:00:3D:A1:4F:4F
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/ni9gblfiVaaoPTmGLQ1OAD2hT08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:24:32:23:32:ed:3c:79:ae:91:03:5a:12:d9:ed:24:ed:d8:
9b:35:da:d4:f6:ed:cb:fc:f4:fe:78:b8:cd:38:2e:2b:5e:e6:
aa:d0:bd:6a:e5:d6:73:9f:5a:10:4f:c7:d4:90:b8:54:f9:10:
f8:28:c2:e4:d7:f1:5f:1e:13:bc:ee:7c:b2:0d:01:09:44:45:
89:a1:ea:b8:a4:23:9f:f6:a6:df:3d:6f:0f:92:e2:38:42:c4:
8f:e8:21:d8:d0:47:45:25:b5:e7:4d:5a:fb:d7:9b:52:83:0e:
c5:76:17:6a:75:cb:c1:27:70:5f:6d:ac:22:be:78:dd:5f:02:
d3:91:c7:ba:dc:e8:0c:51:d3:24:cc:75:91:40:42:e4:c6:ad:
b0:69:56:89:d2:fc:9d:3d:43:f8:70:e0:79:74:3e:f6:e9:da:
d1:0f:3a:3b:1d:d3:be:c1:55:76:e6:e5:91:88:d6:59:3f:02:
ea:c8:cb:23:f4:6d:5d:a5:6a:ea:9e:1f:39:68:42:12:37:6c:
2f:78:d3:cb:d2:da:d0:74:1f:c5:6e:9e:af:45:10:dc:0f:05:
bc:bc:b9:4e:af:2f:9b:25:b5:9b:e5:ce:39:59:f5:25:71:9e:
3e:10:96:39:84:35:cc:0d:b2:d4:0a:d7:52:b7:4e:7c:26:01:
61:66:1c:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXnpzVYJAIOofl0OUhWcPg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjMwMTI1MDYzOTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJmNjA2ZTU3ZTI1NWE2YTgzZDM5ODYyZDBkNGUwMDNkYTE0ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY1jfqMkVFcnWAfnyKkygozrqd4D
O7p2IcmSipVv12icJQBnaHDgHqc8Q0hzyC0ygoH982FUWQmP0uSX2tUFXt7iLq6N
XQKIjKHM4B+h8zxUlltToLObw+Oz6h1dq2qx4jmIwrz+DyV0aLeDB8GOrxIuHqdV
Z6HD5a4lJkENPgtcygo7Rf7brlkE/eUlJ800716y6PevoAD2fLrCFXVbmJEdrfMS
BcH4V0ODMJC6cOuI18Od6MzVY4gC0w+yC/NLVgrGWjsSyntjnHMGsKTds4/MXZim
xrXNm8teZeRMGwh7XQGvIyorkaZ20UmQcAarNWeMfGfXYXk9Q5F97kQ8SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4vYG5X4lWmqD05hi0NTgA9oU9PMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvbmk5Z2JsZmlWYWFvUFRtR0xRMU9BRDJoVDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJhMA0G
CSqGSIb3DQEBCwUAA4IBAQA6JDIjMu08ea6RA1oS2e0k7dibNdrU9u3L/PT+eLjN
OC4rXuaq0L1q5dZzn1oQT8fUkLhU+RD4KMLk1/FfHhO87nyyDQEJREWJoeq4pCOf
9qbfPW8PkuI4QsSP6CHY0EdFJbXnTVr715tSgw7FdhdqdcvBJ3BfbawivnjdXwLT
kce63OgMUdMkzHWRQELkxq2waVaJ0vydPUP4cOB5dD726drRDzo7HdO+wVV25uWR
iNZZPwLqyMsj9G1dpWrqnh85aEISN2wveNPL0trQdB/Fbp6vRRDcDwW8vLlOry+b
JbWb5c45WfUlcZ4+EJY5hDXMDbLUCtdSt058JgFhZhwj
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:33 2024 by rpki-client on console-fra.rpki-client.org