Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/_psOMtbtwdITt0d0-beFOT75qAQ.roa
File: _psOMtbtwdITt0d0-beFOT75qAQ.roa (raw, json)
Hash identifier: BoLVxNKgldX8Xau0/o3bLlLj9zyCTkz0OCdJkHzv8F8=
Subject key identifier: FE:9B:0E:32:D6:ED:C1:D2:13:B7:47:74:F9:B7:85:39:3E:F9:A8:04
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 01856F824B9718677407731A98CE08D715A3
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/_psOMtbtwdITt0d0-beFOT75qAQ.roa
Signing time: Sun 01 Jan 2023 22:44:48 +0000
ROA not before: Sun 01 Jan 2023 22:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206519
IP address blocks: 185.184.85.0/24 maxlen: 24
185.184.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 11:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4b:97:18:67:74:07:73:1a:98:ce:08:d7:15:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jan 1 22:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9b0e32d6edc1d213b74774f9b785393ef9a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:aa:fb:ed:b8:56:ac:e6:79:9c:5c:40:80:
43:2c:14:02:8a:0b:e2:56:81:4e:ac:b9:ee:2e:97:
b7:e1:8a:03:72:21:c1:47:c7:ef:85:34:5a:87:90:
f6:c0:4d:05:45:b3:37:d7:ed:de:5f:a8:6d:57:86:
e4:60:2f:1b:d7:1d:f8:55:a3:0d:9a:1e:bb:6d:73:
9c:00:76:fc:34:cf:72:ed:a6:9f:1d:05:fd:da:76:
da:9f:2a:ce:31:be:4d:a6:99:d5:2f:28:51:de:c0:
6e:2c:1c:c2:0a:ea:0c:54:56:00:95:84:f2:24:fb:
ce:48:b7:6b:f9:f5:72:ee:64:62:f5:9a:f6:46:07:
f4:17:91:bf:03:74:b6:ee:9e:a5:12:78:b0:0f:7c:
3e:1f:09:6d:fc:47:cb:df:0d:06:93:20:16:d1:0d:
3e:61:77:27:1a:e5:37:6e:13:69:d5:16:3c:5b:de:
9b:8c:59:6d:e5:48:e9:de:4c:d5:ec:b7:52:4d:e4:
c3:c8:9a:54:15:e2:5a:d6:0c:f5:e3:c0:6b:e8:2c:
21:56:4d:b4:fc:c9:88:5c:8b:18:de:0b:9f:2d:e6:
c0:ab:70:05:0f:ee:e1:60:3e:fe:53:a0:9e:75:c5:
0a:07:10:b9:af:ce:14:a8:51:0b:85:a0:fa:ac:1e:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:0E:32:D6:ED:C1:D2:13:B7:47:74:F9:B7:85:39:3E:F9:A8:04
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/_psOMtbtwdITt0d0-beFOT75qAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.84.0/23
Signature Algorithm: sha256WithRSAEncryption
af:bc:3b:1f:a6:a2:bb:47:12:c7:0d:ab:86:16:26:fc:db:36:
d1:23:b3:c1:d0:0a:a8:a4:a7:40:8c:75:49:f6:7e:ae:b6:a0:
17:51:c8:72:ea:fd:33:a3:30:e2:fd:45:9b:51:61:4d:da:e7:
0e:b8:85:ec:00:3e:b0:cc:d3:4a:c0:12:34:89:41:0d:48:1c:
19:45:60:2d:0e:4e:df:70:89:3b:9c:25:7b:cd:1f:ae:cd:f5:
f5:e0:df:bc:84:86:25:60:82:87:a3:65:ae:a5:50:90:91:c9:
74:ab:7a:83:91:24:13:63:4d:30:51:65:7a:3f:64:eb:55:10:
47:82:43:e4:8d:fd:b0:66:08:34:37:67:31:ce:2d:0e:19:2d:
10:28:df:53:1c:7a:de:e8:53:7a:5a:60:0c:b9:dd:ff:39:60:
9a:55:96:d9:77:dd:65:d4:c5:4a:91:13:3d:29:27:c3:53:8e:
e3:92:eb:f6:0e:fa:e2:f9:18:d8:23:c8:22:ef:f3:44:ff:bd:
9e:25:3d:f5:4f:1a:92:1d:a2:d2:d6:e9:ce:dc:5f:aa:4f:fa:
a2:9a:0c:78:fa:83:88:dc:b2:5b:d4:af:29:47:c9:95:2f:77:
84:98:86:f1:c2:af:b5:e5:b9:c7:e1:d4:79:37:04:4f:17:f2:
85:f3:48:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgkuXGGd0B3MamM4I1xWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk
YThhOWYwHhcNMjMwMTAxMjI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTliMGUzMmQ2ZWRjMWQyMTNiNzQ3NzRmOWI3ODUzOTNlZjlhODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEWq++24VqzmeZxcQIBDLBQCigvi
VoFOrLnuLpe34YoDciHBR8fvhTRah5D2wE0FRbM31+3eX6htV4bkYC8b1x34VaMN
mh67bXOcAHb8NM9y7aafHQX92nbanyrOMb5NppnVLyhR3sBuLBzCCuoMVFYAlYTy
JPvOSLdr+fVy7mRi9Zr2Rgf0F5G/A3S27p6lEniwD3w+Hwlt/EfL3w0GkyAW0Q0+
YXcnGuU3bhNp1RY8W96bjFlt5Ujp3kzV7LdSTeTDyJpUFeJa1gz148Br6CwhVk20
/MmIXIsY3gufLebAq3AFD+7hYD7+U6CedcUKBxC5r84UqFELhaD6rB68OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6bDjLW7cHSE7dHdPm3hTk++agEMB8GA1UdIwQY
MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt
NzY1MzMyNDVmMmJlLzEvX3BzT010YnR3ZElUdDBkMC1iZUZPVDc1cUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl
LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubhUMA0G
CSqGSIb3DQEBCwUAA4IBAQCvvDsfpqK7RxLHDauGFib82zbRI7PB0AqopKdAjHVJ
9n6utqAXUchy6v0zozDi/UWbUWFN2ucOuIXsAD6wzNNKwBI0iUENSBwZRWAtDk7f
cIk7nCV7zR+uzfX14N+8hIYlYIKHo2WupVCQkcl0q3qDkSQTY00wUWV6P2TrVRBH
gkPkjf2wZgg0N2cxzi0OGS0QKN9THHre6FN6WmAMud3/OWCaVZbZd91l1MVKkRM9
KSfDU47jkuv2Dvri+RjYI8gi7/NE/72eJT31TxqSHaLS1unO3F+qT/qimgx4+oOI
3LJb1K8pR8mVL3eEmIbxwq+15bnH4dR5NwRPF/KF80jy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org