Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/IEwKdw6u3SJVatRxeJA7E0v9XR8.roa
File: IEwKdw6u3SJVatRxeJA7E0v9XR8.roa (raw, json)
Hash identifier: idrUvc+g2XKyFWvEiH2Zblk6aiR8pBUlHdU52m6kkRg=
Subject key identifier: 20:4C:0A:77:0E:AE:DD:22:55:6A:D4:71:78:90:3B:13:4B:FD:5D:1F
Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial: 0185720C5703F1A03A5372ABF9DD27F5F122
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/IEwKdw6u3SJVatRxeJA7E0v9XR8.roa
Signing time: Mon 02 Jan 2023 10:34:49 +0000
ROA not before: Mon 02 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202093
IP address blocks: 185.53.65.0/24 maxlen: 24
185.53.67.0/24 maxlen: 24
185.53.66.0/24 maxlen: 24
185.53.64.0/24 maxlen: 24
185.53.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:57:03:f1:a0:3a:53:72:ab:f9:dd:27:f5:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Validity
Not Before: Jan 2 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=204c0a770eaedd22556ad47178903b134bfd5d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:83:1f:b0:60:7d:20:4d:56:98:90:81:15:
84:89:d1:6c:f0:5a:75:1f:a0:a4:f8:59:d0:c7:a8:
0d:b2:a4:ca:4c:10:0f:be:24:eb:ef:2a:9c:d2:d9:
63:3a:73:9a:2c:ed:39:92:49:b3:f3:59:75:08:82:
88:9f:55:57:64:be:98:2a:20:0c:7d:fa:6f:04:9f:
a2:b1:08:40:e7:56:f9:cb:c2:3d:b4:82:3c:3c:de:
eb:a3:30:2e:7f:58:8e:64:c1:1c:03:a2:5e:a0:52:
78:62:46:e0:58:1f:0c:8c:12:6d:b3:81:cf:2c:6c:
a7:3d:f4:7e:5e:89:68:7a:60:f0:d7:29:f2:b6:ce:
16:25:21:1f:12:3d:36:2b:c1:07:75:66:5e:8a:c3:
d1:3a:e3:e4:24:3b:80:92:e9:ae:19:17:ec:fa:61:
0c:2f:3d:bf:9f:1f:14:cb:a8:6f:5e:20:28:c7:5a:
f1:f2:f0:c7:6e:32:b5:89:36:65:8d:d5:90:fa:38:
f9:ff:b9:ed:ca:83:c0:2c:d0:ec:d2:66:d6:1e:c4:
cf:86:b6:b8:21:84:60:ac:a0:af:c1:bf:08:13:a6:
23:d0:b4:62:a8:c6:b5:f7:e4:7e:f7:b4:66:14:71:
9e:13:bb:6b:30:63:7c:80:d6:56:2c:d4:5a:c0:fb:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:0A:77:0E:AE:DD:22:55:6A:D4:71:78:90:3B:13:4B:FD:5D:1F
X509v3 Authority Key Identifier:
keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/IEwKdw6u3SJVatRxeJA7E0v9XR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.64.0/22
Signature Algorithm: sha256WithRSAEncryption
27:cd:44:15:06:81:25:44:b5:05:11:3b:ad:ee:ba:49:ee:4e:
81:c9:c8:55:67:44:4e:6a:df:45:0e:39:67:d0:d7:15:e7:00:
81:df:58:51:a6:fb:1a:53:11:76:c8:48:4a:6b:5d:ea:47:fa:
f0:4d:b4:a7:85:a5:c9:13:c2:57:78:56:b1:5f:6f:2d:56:1a:
00:b7:29:f8:7e:bd:52:a0:00:61:72:93:ac:a0:38:4a:b4:e5:
19:c5:aa:a9:61:46:30:d3:14:0f:37:fe:c9:b7:8c:c1:28:79:
4e:16:45:04:c7:16:6f:40:49:62:68:8a:12:00:55:6b:a3:e1:
f1:ba:40:5d:2c:81:c0:6d:83:6e:60:08:bf:97:0d:8b:8e:a0:
2a:0f:3f:79:56:90:ff:95:8e:98:23:9e:93:92:46:92:08:eb:
bf:02:08:b1:e2:92:7f:50:f8:d5:ac:5f:89:79:dc:f2:f0:ed:
a5:40:5b:86:53:83:05:d8:1b:36:17:96:c3:f0:88:97:54:97:
fc:6c:e5:0d:55:88:73:f8:90:e4:2f:9f:ae:6c:40:2b:12:30:
f2:05:b1:77:d5:bc:34:d2:12:9b:50:95:20:91:20:6d:a9:5c:
ca:f2:67:79:3f:0d:98:92:66:62:2f:11:30:96:4b:c8:1a:d2:
9f:b6:98:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDFcD8aA6U3Kr+d0n9fEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmYyZTE1MzMxNjRlYmI4ZDg3MWNmNmYyYzQ5YTU2N2Vh
MjY2MzUwHhcNMjMwMTAyMTAzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDRjMGE3NzBlYWVkZDIyNTU2YWQ0NzE3ODkwM2IxMzRiZmQ1ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLCDH7BgfSBNVpiQgRWEidFs8Fp1
H6Ck+FnQx6gNsqTKTBAPviTr7yqc0tljOnOaLO05kkmz81l1CIKIn1VXZL6YKiAM
ffpvBJ+isQhA51b5y8I9tII8PN7rozAuf1iOZMEcA6JeoFJ4YkbgWB8MjBJts4HP
LGynPfR+XoloemDw1ynyts4WJSEfEj02K8EHdWZeisPROuPkJDuAkumuGRfs+mEM
Lz2/nx8Uy6hvXiAox1rx8vDHbjK1iTZljdWQ+jj5/7ntyoPALNDs0mbWHsTPhra4
IYRgrKCvwb8IE6Yj0LRiqMa19+R+97RmFHGeE7trMGN8gNZWLNRawPvC9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBMCncOrt0iVWrUcXiQOxNL/V0fMB8GA1UdIwQY
MBaAFFgvLhUzFk67jYcc9vLEmlZ+omY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEt
MDE5Y2Y3N2U0Nzg4LzEvSUV3S2R3NnUzU0pWYXRSeGVKQTdFMHY5WFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEtMDE5Y2Y3N2U0Nzg4
LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTVAMA0G
CSqGSIb3DQEBCwUAA4IBAQAnzUQVBoElRLUFETut7rpJ7k6BychVZ0ROat9FDjln
0NcV5wCB31hRpvsaUxF2yEhKa13qR/rwTbSnhaXJE8JXeFaxX28tVhoAtyn4fr1S
oABhcpOsoDhKtOUZxaqpYUYw0xQPN/7Jt4zBKHlOFkUExxZvQEliaIoSAFVro+Hx
ukBdLIHAbYNuYAi/lw2LjqAqDz95VpD/lY6YI56TkkaSCOu/Agix4pJ/UPjVrF+J
edzy8O2lQFuGU4MF2Bs2F5bD8IiXVJf8bOUNVYhz+JDkL5+ubEArEjDyBbF31bw0
0hKbUJUgkSBtqVzK8md5Pw2YkmZiLxEwlkvIGtKftph+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org