Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wVdu7grg2eXtKc2W-sVFAoU3ctg.roa
File: wVdu7grg2eXtKc2W-sVFAoU3ctg.roa (raw, json)
Hash identifier: SZmI72EXH5xJ1ZdaS20mVUhOTFDrY6o/D7VqjtabzZA=
Subject key identifier: C1:57:6E:EE:0A:E0:D9:E5:ED:29:CD:96:FA:C5:45:02:85:37:72:D8
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 018756D5750C22FAA278CAF8E05ACEA0219A
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wVdu7grg2eXtKc2W-sVFAoU3ctg.roa
Signing time: Thu 06 Apr 2023 13:50:42 +0000
ROA not before: Thu 06 Apr 2023 13:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.85.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 08:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:d5:75:0c:22:fa:a2:78:ca:f8:e0:5a:ce:a0:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Apr 6 13:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1576eee0ae0d9e5ed29cd96fac54502853772d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:ab:b3:a8:c2:e8:77:ec:9a:12:6b:2b:0f:
8f:9d:a9:33:dd:fc:97:27:51:8a:e0:a2:5e:24:90:
a6:3f:d8:35:50:05:f5:48:0a:eb:57:ec:c9:a4:5a:
b7:97:aa:55:43:4e:5f:9d:9d:24:ab:00:05:b2:20:
d1:d9:54:c1:02:9c:0c:85:78:91:f3:c0:d3:55:b5:
49:9e:0b:cc:c0:b3:82:52:1e:46:40:ec:4e:60:11:
80:af:fb:20:56:c3:c3:33:36:69:a3:a1:3d:25:9b:
0a:14:c7:b0:09:0e:a2:ca:49:9e:3a:f2:80:e9:a2:
8c:c7:7a:80:94:c0:63:e2:07:fa:5e:be:7c:74:3b:
08:e3:71:d2:53:7c:09:be:24:f5:1b:9d:ad:9e:d7:
f3:a9:12:fe:16:5a:07:b6:a6:5f:46:39:c0:6b:71:
68:cb:c7:5c:dd:6b:a5:73:76:7b:97:cc:00:57:73:
45:dd:6f:45:8a:59:c3:fa:f1:c3:e3:ac:45:20:4c:
99:d5:97:99:88:7d:59:b5:09:df:25:b1:29:31:ca:
40:36:95:8c:04:a4:21:48:2d:db:30:36:74:bf:08:
69:83:7c:21:d7:8c:66:35:59:53:d3:3c:e8:72:91:
eb:be:6a:31:b6:df:46:6c:af:03:3d:50:c4:08:2a:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:6E:EE:0A:E0:D9:E5:ED:29:CD:96:FA:C5:45:02:85:37:72:D8
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wVdu7grg2eXtKc2W-sVFAoU3ctg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.79.0/24
Signature Algorithm: sha256WithRSAEncryption
16:75:46:81:a7:b3:72:6c:9c:13:cd:0a:bf:4d:58:fd:e0:10:
8c:cf:88:40:d2:ad:59:6c:92:f3:bc:93:5a:72:7c:19:d8:84:
3d:19:09:fa:4c:32:9b:d1:ea:9d:04:84:05:50:e2:e9:71:1b:
da:3b:3f:d5:cb:3f:ab:88:55:87:6d:49:99:66:e0:69:d6:6d:
ae:fc:ae:33:bb:ab:1a:1c:88:72:e4:f4:b7:3f:08:c7:76:3b:
8e:4a:eb:61:46:72:5f:8d:9e:5e:4c:da:a6:1c:c8:44:15:3f:
40:09:7c:98:8d:ac:3c:7c:19:69:64:35:ab:d7:1a:1c:ae:0c:
01:ae:fa:40:9d:42:a1:06:9b:64:b4:78:9f:c2:fd:73:8d:4d:
db:05:65:59:49:97:78:13:25:2d:3c:f3:73:df:d6:7e:db:dc:
a2:4d:36:5f:f8:a3:9b:74:6c:68:23:a7:ee:44:66:14:19:7d:
2e:2a:4f:8a:b3:f6:50:f5:aa:fb:05:df:b0:f5:e9:7b:3a:bd:
99:e7:32:4b:81:4b:9f:cd:1f:1c:80:50:c0:d1:74:13:ec:4a:
74:2d:4f:a7:0f:5e:e8:24:b1:33:96:1e:f0:14:08:94:37:da:
79:96:6c:c7:ca:9b:24:95:7c:9c:b4:ab:73:59:b5:17:ed:46:
53:fb:06:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdW1XUMIvqieMr44FrOoCGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjMwNDA2MTM1MDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTU3NmVlZTBhZTBkOWU1ZWQyOWNkOTZmYWM1NDUwMjg1Mzc3MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk66rs6jC6HfsmhJrKw+Pnakz3fyX
J1GK4KJeJJCmP9g1UAX1SArrV+zJpFq3l6pVQ05fnZ0kqwAFsiDR2VTBApwMhXiR
88DTVbVJngvMwLOCUh5GQOxOYBGAr/sgVsPDMzZpo6E9JZsKFMewCQ6iykmeOvKA
6aKMx3qAlMBj4gf6Xr58dDsI43HSU3wJviT1G52tntfzqRL+FloHtqZfRjnAa3Fo
y8dc3Wulc3Z7l8wAV3NF3W9FilnD+vHD46xFIEyZ1ZeZiH1ZtQnfJbEpMcpANpWM
BKQhSC3bMDZ0vwhpg3wh14xmNVlT0zzocpHrvmoxtt9GbK8DPVDECCoe2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFXbu4K4Nnl7SnNlvrFRQKFN3LYMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvd1ZkdTdncmcyZVh0S2MyVy1zVkZBb1UzY3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVVPMA0G
CSqGSIb3DQEBCwUAA4IBAQAWdUaBp7NybJwTzQq/TVj94BCMz4hA0q1ZbJLzvJNa
cnwZ2IQ9GQn6TDKb0eqdBIQFUOLpcRvaOz/Vyz+riFWHbUmZZuBp1m2u/K4zu6sa
HIhy5PS3PwjHdjuOSuthRnJfjZ5eTNqmHMhEFT9ACXyYjaw8fBlpZDWr1xocrgwB
rvpAnUKhBptktHifwv1zjU3bBWVZSZd4EyUtPPNz39Z+29yiTTZf+KObdGxoI6fu
RGYUGX0uKk+Ks/ZQ9ar7Bd+w9el7Or2Z5zJLgUufzR8cgFDA0XQT7Ep0LU+nD17o
JLEzlh7wFAiUN9p5lmzHypsklXyctKtzWbUX7UZT+wZc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org