Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/9vsKAWpC_Vo196vJd6uqtpdRJRI.roa
File: 9vsKAWpC_Vo196vJd6uqtpdRJRI.roa (raw, json)
Hash identifier: W7Z490K+MWgqZknWoVOa3hFDjl6tnRC7e3LFI1CvJRc=
Subject key identifier: F6:FB:0A:01:6A:42:FD:5A:35:F7:AB:C9:77:AB:AA:B6:97:51:25:12
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01895E104A38F92F944FDA9A2EEF374E7084
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/9vsKAWpC_Vo196vJd6uqtpdRJRI.roa
Signing time: Sun 16 Jul 2023 09:37:53 +0000
ROA not before: Sun 16 Jul 2023 09:37:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.155.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 08:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:10:4a:38:f9:2f:94:4f:da:9a:2e:ef:37:4e:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jul 16 09:37:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fb0a016a42fd5a35f7abc977abaab697512512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:2e:e7:08:3a:d5:31:79:03:dd:4e:aa:be:
35:f8:00:99:4f:5c:45:09:e6:39:98:bb:4a:41:b4:
a6:7d:d5:9e:4b:9f:df:37:5f:c3:e0:1e:a1:9f:9b:
68:58:c7:ba:db:25:4f:fb:46:54:80:c7:1b:17:2a:
20:a4:f2:43:4c:1d:72:a4:b9:4a:2c:ad:7f:f9:45:
a5:4f:3f:61:6d:73:6e:c7:df:84:0f:6f:4b:a1:ec:
6d:94:a4:c6:d6:cb:a5:ec:35:c7:fd:3e:2f:5e:4f:
a6:75:00:bc:a6:94:09:d8:ac:ee:f7:f7:c6:5f:77:
12:fe:68:de:bd:c2:40:37:d8:08:72:bf:4b:08:92:
31:eb:44:f9:80:6a:d2:a3:06:0c:f7:31:50:ff:3c:
7a:bd:29:d6:16:55:98:61:0d:b7:d1:5e:48:f7:25:
70:2d:93:9f:28:6b:88:b1:dc:94:81:66:50:71:a7:
2b:df:25:f5:c4:70:62:a6:26:62:e0:90:8b:a9:27:
8f:83:ae:6d:0d:e9:1d:83:fe:48:9e:e4:d2:2c:50:
26:c5:01:dc:6e:dd:bc:5c:b0:69:f1:02:15:24:00:
6c:75:e7:f6:56:df:50:11:f9:7d:11:28:6c:f5:da:
10:9f:49:21:e2:1d:46:cf:91:53:6f:58:e4:a2:a8:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:0A:01:6A:42:FD:5A:35:F7:AB:C9:77:AB:AA:B6:97:51:25:12
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/9vsKAWpC_Vo196vJd6uqtpdRJRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.232.0/24
Signature Algorithm: sha256WithRSAEncryption
72:80:0e:12:50:92:cc:0a:21:9c:bb:f2:94:dc:bd:26:da:c4:
b7:2c:a1:aa:c1:ed:a6:e5:36:f3:fa:03:e7:bf:c8:cf:52:58:
c5:25:d3:37:5f:94:5d:d9:fb:a6:87:7d:81:fc:69:e6:4a:a9:
9e:be:ad:b1:90:b9:97:b3:32:db:fc:fc:92:d5:7d:8e:29:41:
cc:ca:8c:30:b9:7e:3c:73:f5:9c:31:db:9f:59:d8:70:db:25:
c2:14:9e:bf:45:b0:0b:14:8d:2d:b2:b7:bd:38:5c:ff:db:3c:
ad:61:12:56:ec:81:55:62:93:74:ff:52:3b:f5:ae:4a:62:49:
cf:bc:1d:fe:c9:a2:43:a6:ab:96:5c:2d:bc:3e:da:68:db:84:
c0:21:0c:2b:9c:e9:03:03:a0:a5:89:f3:f4:9f:fb:5a:88:ca:
9a:31:ca:97:55:4b:9c:01:ae:03:8c:74:9b:84:f1:f9:d0:48:
0a:52:8a:df:ca:f9:e0:3b:eb:ce:75:99:74:d8:9c:0b:61:35:
58:04:b8:52:6c:e7:9c:39:d3:fb:74:fc:ef:18:55:57:3a:9e:
c2:70:3a:f0:ea:52:b6:d2:ac:64:86:36:c9:f4:bf:12:f8:84:
ac:08:7f:66:51:7f:ea:f3:86:af:1d:9b:7e:68:a5:4a:a4:9e:
75:58:41:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYleEEo4+S+UT9qaLu83TnCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy
YTBlZDYwHhcNMjMwNzE2MDkzNzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmZiMGEwMTZhNDJmZDVhMzVmN2FiYzk3N2FiYWFiNjk3NTEyNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizIu5wg61TF5A91Oqr41+ACZT1xF
CeY5mLtKQbSmfdWeS5/fN1/D4B6hn5toWMe62yVP+0ZUgMcbFyogpPJDTB1ypLlK
LK1/+UWlTz9hbXNux9+ED29LoextlKTG1sul7DXH/T4vXk+mdQC8ppQJ2Kzu9/fG
X3cS/mjevcJAN9gIcr9LCJIx60T5gGrSowYM9zFQ/zx6vSnWFlWYYQ230V5I9yVw
LZOfKGuIsdyUgWZQcacr3yX1xHBipiZi4JCLqSePg65tDekdg/5InuTSLFAmxQHc
bt28XLBp8QIVJABsdef2Vt9QEfl9EShs9doQn0kh4h1Gz5FTb1jkoqi9WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPb7CgFqQv1aNferyXerqraXUSUSMB8GA1UdIwQY
MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt
ZmQzYjMwMDJjMGJiLzEvOXZzS0FXcENfVm8xOTZ2SmQ2dXF0cGRSSlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi
LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvoMA0G
CSqGSIb3DQEBCwUAA4IBAQBygA4SUJLMCiGcu/KU3L0m2sS3LKGqwe2m5Tbz+gPn
v8jPUljFJdM3X5Rd2fumh32B/GnmSqmevq2xkLmXszLb/PyS1X2OKUHMyowwuX48
c/WcMdufWdhw2yXCFJ6/RbALFI0tsre9OFz/2zytYRJW7IFVYpN0/1I79a5KYknP
vB3+yaJDpquWXC28Ptpo24TAIQwrnOkDA6ClifP0n/taiMqaMcqXVUucAa4DjHSb
hPH50EgKUorfyvngO+vOdZl02JwLYTVYBLhSbOecOdP7dPzvGFVXOp7CcDrw6lK2
0qxkhjbJ9L8S+ISsCH9mUX/q84avHZt+aKVKpJ51WEEA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org