Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/9AVIDkN0WnB3zScWNv_bqZzl89g.roa
File: 9AVIDkN0WnB3zScWNv_bqZzl89g.roa (raw, json)
Hash identifier: BDwURpHG94+Mo6ag0Vwyjc9xkq7efHlc3MR2+3Gv2Ug=
Subject key identifier: F4:05:48:0E:43:74:5A:70:77:CD:27:16:36:FF:DB:A9:9C:E5:F3:D8
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 0185723A248AF0AD5616DFAE40A9ECCD45D4
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/9AVIDkN0WnB3zScWNv_bqZzl89g.roa
Signing time: Mon 02 Jan 2023 11:24:51 +0000
ROA not before: Mon 02 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29226
IP address blocks: 185.45.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:24:8a:f0:ad:56:16:df:ae:40:a9:ec:cd:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f405480e43745a7077cd271636ffdba99ce5f3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:a2:75:73:1b:aa:1a:4c:ea:d9:ce:d5:fe:
1f:45:f8:de:78:ce:bb:50:9e:50:b7:47:e9:cd:d0:
01:be:31:d7:6c:fa:fa:8f:11:be:e7:dd:12:e1:21:
dd:a4:8b:15:73:33:b5:7e:55:d2:09:1b:fa:c1:db:
fe:09:cc:0c:72:20:22:fa:29:9a:f0:22:84:b0:97:
47:58:aa:37:64:a8:bd:20:fb:0c:94:96:2a:fc:3f:
2d:f8:5b:f7:51:53:10:b4:c0:30:69:8b:7d:98:10:
f3:3c:a1:e8:14:0e:48:da:06:67:6d:76:6b:0e:ab:
ad:73:47:3f:16:4c:5e:e9:86:df:a1:2a:b5:65:99:
42:3f:38:b0:c3:2b:c1:9b:80:d2:1e:08:1b:c0:d8:
6b:7a:50:c1:1b:10:97:9a:e6:14:4f:6e:23:f3:d9:
42:df:77:65:8a:9b:bb:57:ad:6b:c6:3d:0e:f3:da:
68:a4:cf:a9:22:91:d5:d8:0b:d6:c9:72:70:f9:8c:
7a:3d:8b:c3:6a:89:22:47:99:df:77:6f:7e:0a:67:
bb:7c:fc:29:f8:6e:30:87:3a:ee:14:e8:58:b6:1e:
6d:15:18:4d:d2:c8:16:67:99:ee:be:4c:ae:f7:d5:
f7:f2:a2:12:b9:61:06:d8:f2:e8:15:81:59:2e:ae:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:48:0E:43:74:5A:70:77:CD:27:16:36:FF:DB:A9:9C:E5:F3:D8
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/9AVIDkN0WnB3zScWNv_bqZzl89g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5d:4f:b4:a3:ba:7e:e4:3e:be:81:4b:dc:16:f2:ff:2b:c1:
ab:9f:4c:e8:42:f5:5d:a8:e9:2c:b1:7a:ef:d6:b4:e6:72:98:
28:ac:a7:a4:15:82:e8:1d:53:46:01:c9:3f:e5:87:9c:90:67:
a6:cd:62:30:75:d0:66:9f:a3:07:af:b0:7c:55:b2:98:22:bd:
e1:6c:31:9d:7b:d6:94:62:81:2e:72:89:0e:4c:00:a9:4d:82:
f3:e1:ab:38:75:cb:ec:82:e1:4e:e4:18:42:04:cc:dc:32:9d:
9e:a5:46:5a:99:5f:18:bc:e4:6d:cf:15:09:d8:1d:19:05:8c:
5f:45:fd:6b:69:c8:23:d0:88:9a:a0:fc:15:bf:0a:09:1a:64:
05:b0:0e:e2:7e:99:e9:80:5d:40:48:c4:9a:a0:dc:76:8d:c6:
41:97:bc:a2:b8:ce:a7:d8:ff:b5:a8:66:70:f9:7a:20:e3:7a:
fa:f0:4f:7a:a6:d1:9e:cc:4f:ef:ae:69:a2:71:15:23:b4:0a:
21:1a:a0:dd:8c:6b:93:ea:76:74:45:60:50:ac:2f:75:d7:c1:
91:ab:a7:fe:9b:4b:c1:db:a6:54:f3:91:5a:0b:19:74:8a:a5:
7e:d4:88:8b:41:1a:ea:46:89:62:d4:d2:d5:4b:86:57:f0:eb:
08:62:76:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyOiSK8K1WFt+uQKnszUXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDNiMGVjNzk5NTFkNWQ1NTgwMTMzZTUzMjlhOTBmMmZl
ZTFjNWIwHhcNMjMwMTAyMTEyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDA1NDgwZTQzNzQ1YTcwNzdjZDI3MTYzNmZmZGJhOTljZTVmM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw72idXMbqhpM6tnO1f4fRfjeeM67
UJ5Qt0fpzdABvjHXbPr6jxG+590S4SHdpIsVczO1flXSCRv6wdv+CcwMciAi+ima
8CKEsJdHWKo3ZKi9IPsMlJYq/D8t+Fv3UVMQtMAwaYt9mBDzPKHoFA5I2gZnbXZr
Dqutc0c/Fkxe6YbfoSq1ZZlCPziwwyvBm4DSHggbwNhrelDBGxCXmuYUT24j89lC
33dlipu7V61rxj0O89popM+pIpHV2AvWyXJw+Yx6PYvDaokiR5nfd29+Cme7fPwp
+G4whzruFOhYth5tFRhN0sgWZ5nuvkyu99X38qISuWEG2PLoFYFZLq5W+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQFSA5DdFpwd80nFjb/26mc5fPYMB8GA1UdIwQY
MBaAFH1DsOx5lR1dVYATPlMpqQ8v7hxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgt
OTNhNjE5MmIxNzg1LzEvOUFWSURrTjBXbkIzelNjV052X2JxWnpsODlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgtOTNhNjE5MmIxNzg1
LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS1TMA0G
CSqGSIb3DQEBCwUAA4IBAQCjXU+0o7p+5D6+gUvcFvL/K8Grn0zoQvVdqOkssXrv
1rTmcpgorKekFYLoHVNGAck/5YeckGemzWIwddBmn6MHr7B8VbKYIr3hbDGde9aU
YoEucokOTACpTYLz4as4dcvsguFO5BhCBMzcMp2epUZamV8YvORtzxUJ2B0ZBYxf
Rf1racgj0IiaoPwVvwoJGmQFsA7ifpnpgF1ASMSaoNx2jcZBl7yiuM6n2P+1qGZw
+Xog43r68E96ptGezE/vrmmicRUjtAohGqDdjGuT6nZ0RWBQrC9118GRq6f+m0vB
26ZU85FaCxl0iqV+1IiLQRrqRoli1NLVS4ZX8OsIYnav
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org