Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/5phZjppD7gCeZInA839raTSwJrY.roa
File: 5phZjppD7gCeZInA839raTSwJrY.roa (raw, json)
Hash identifier: SwakNpE3F6nbLK+ZCwOycoQtTSWhwxxxCB5IOLZPrig=
Subject key identifier: E6:98:59:8E:9A:43:EE:00:9E:64:89:C0:F3:7F:6B:69:34:B0:26:B6
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 01857067680911DD33D8DC4C1A3603FEF189
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/5phZjppD7gCeZInA839raTSwJrY.roa
Signing time: Mon 02 Jan 2023 02:55:03 +0000
ROA not before: Mon 02 Jan 2023 02:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211814
IP address blocks: 185.225.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:68:09:11:dd:33:d8:dc:4c:1a:36:03:fe:f1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jan 2 02:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e698598e9a43ee009e6489c0f37f6b6934b026b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:5e:80:42:14:50:ee:34:61:1d:ba:ee:39:
d1:46:e9:c4:ef:55:b9:66:f1:75:67:fa:49:20:0a:
5e:05:8d:c4:0b:45:84:4d:e1:5f:1f:ca:77:14:06:
71:c9:a5:13:1d:5d:71:7a:9d:48:ab:aa:6e:9a:b6:
59:5c:08:8c:9f:82:a5:b3:10:6f:f0:ef:da:6d:00:
0a:70:3e:bf:35:68:86:68:d8:c1:81:25:dd:a7:ad:
41:64:40:81:38:60:ce:78:97:76:6a:61:4c:81:bc:
d4:33:55:00:9d:24:94:30:0e:9e:e6:2e:32:bf:44:
7e:db:d4:51:18:93:50:d7:33:5b:9a:13:66:33:45:
e1:59:40:e7:5e:41:49:72:e3:f3:61:86:82:7b:98:
54:69:f2:a6:2d:88:65:91:dc:69:d6:a6:6d:29:df:
8f:93:8a:79:4c:11:b8:7f:d8:27:bb:1a:c6:a2:a5:
52:9f:01:66:97:ba:c7:e9:47:e2:f8:07:af:fd:b0:
0d:7a:68:78:e3:ee:88:a7:e0:e8:e9:7c:9a:ab:2a:
7f:2f:6f:b9:86:cc:d5:f8:43:71:67:4c:af:5d:19:
32:37:37:57:8a:43:1a:49:62:c8:7d:74:d9:f4:a9:
80:dd:46:ab:07:6e:18:b0:15:ca:fb:1c:87:18:75:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:59:8E:9A:43:EE:00:9E:64:89:C0:F3:7F:6B:69:34:B0:26:B6
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/5phZjppD7gCeZInA839raTSwJrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.199.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a5:e9:0a:58:7d:d4:b8:e8:85:39:2b:aa:6f:b8:81:45:5a:
e7:6c:6a:fc:25:bf:26:bc:2a:a0:68:7f:64:d4:70:86:00:cd:
a1:7e:69:ab:2d:9c:13:76:b1:23:ef:96:e1:ec:73:53:87:1f:
e9:4c:ab:03:4b:ad:ac:d7:b0:80:59:9a:5e:29:28:0f:0a:59:
6b:93:9e:24:89:96:ad:33:b1:6d:ef:b9:cd:4f:e7:35:d1:5e:
a8:be:0e:54:99:89:f6:c5:38:6b:ba:43:ce:a2:a9:cf:d1:f1:
7e:b9:a3:8e:23:8a:9a:b8:06:39:c3:fc:4b:50:e1:38:5a:d4:
86:30:50:97:8f:b4:48:f0:cf:7a:17:0e:0c:1b:e5:69:6e:88:
d5:4a:4d:c3:a8:fe:f4:cb:a5:58:e5:cf:07:6a:53:16:a2:ab:
11:76:7f:9a:ad:09:dd:e7:95:77:5c:75:4a:3a:f7:89:25:87:
35:5a:08:87:13:9f:53:94:00:66:88:94:75:24:e1:d1:80:8f:
37:e3:d2:df:1f:e8:80:2f:b4:48:bf:4e:9a:8f:f6:c2:63:b0:
b5:d1:29:20:35:f8:ec:fd:1c:66:7b:65:37:f4:d5:42:1c:b9:
33:da:55:f3:2a:b7:9a:00:6e:91:81:de:a3:b8:3c:d8:15:12:
40:a2:3e:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ2gJEd0z2NxMGjYD/vGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjMwMTAyMDI1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjk4NTk4ZTlhNDNlZTAwOWU2NDg5YzBmMzdmNmI2OTM0YjAyNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib1egEIUUO40YR267jnRRunE71W5
ZvF1Z/pJIApeBY3EC0WETeFfH8p3FAZxyaUTHV1xep1Iq6pumrZZXAiMn4KlsxBv
8O/abQAKcD6/NWiGaNjBgSXdp61BZECBOGDOeJd2amFMgbzUM1UAnSSUMA6e5i4y
v0R+29RRGJNQ1zNbmhNmM0XhWUDnXkFJcuPzYYaCe5hUafKmLYhlkdxp1qZtKd+P
k4p5TBG4f9gnuxrGoqVSnwFml7rH6Ufi+Aev/bANemh44+6Ip+Do6Xyaqyp/L2+5
hszV+ENxZ0yvXRkyNzdXikMaSWLIfXTZ9KmA3UarB24YsBXK+xyHGHVkqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaYWY6aQ+4AnmSJwPN/a2k0sCa2MB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEvNXBoWmpwcEQ3Z0NlWkluQTgzOXJhVFN3SnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHHMA0G
CSqGSIb3DQEBCwUAA4IBAQAWpekKWH3UuOiFOSuqb7iBRVrnbGr8Jb8mvCqgaH9k
1HCGAM2hfmmrLZwTdrEj75bh7HNThx/pTKsDS62s17CAWZpeKSgPCllrk54kiZat
M7Ft77nNT+c10V6ovg5UmYn2xThrukPOoqnP0fF+uaOOI4qauAY5w/xLUOE4WtSG
MFCXj7RI8M96Fw4MG+VpbojVSk3DqP70y6VY5c8HalMWoqsRdn+arQnd55V3XHVK
OveJJYc1WgiHE59TlABmiJR1JOHRgI8349LfH+iAL7RIv06aj/bCY7C10SkgNfjs
/Rxme2U39NVCHLkz2lXzKreaAG6Rgd6juDzYFRJAoj6S
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org