Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/EVjPWM71qdwnFINEs0wU6_ebOVM.roa
File: EVjPWM71qdwnFINEs0wU6_ebOVM.roa (raw, json)
Hash identifier: 9W3qgaPUGRPsfTiL8TvVvzsG6d+zRFagIWMxsenGgIw=
Subject key identifier: 11:58:CF:58:CE:F5:A9:DC:27:14:83:44:B3:4C:14:EB:F7:9B:39:53
Certificate issuer: /CN=d0885b41ca81f93f583c1eca722b50558280c59a
Certificate serial: 01856C9CBA8990CF4E6C439F86E78194FF5A
Authority key identifier: D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/EVjPWM71qdwnFINEs0wU6_ebOVM.roa
Signing time: Sun 01 Jan 2023 09:14:48 +0000
ROA not before: Sun 01 Jan 2023 09:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 185.219.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:ba:89:90:cf:4e:6c:43:9f:86:e7:81:94:ff:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0885b41ca81f93f583c1eca722b50558280c59a
Validity
Not Before: Jan 1 09:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1158cf58cef5a9dc27148344b34c14ebf79b3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:f3:98:c1:e4:09:5a:0d:d7:ab:56:5a:94:
2f:dc:26:bc:6e:49:7a:d3:c5:b4:ca:d3:a2:ac:e3:
1c:fb:d9:46:f2:73:fc:35:7d:e9:fe:1c:30:e4:a7:
25:b4:79:cf:88:ce:6a:45:79:b3:c4:83:08:71:a0:
d6:cd:4b:b5:c6:76:e1:b7:63:51:e2:34:e2:e6:4c:
5e:03:60:f9:34:fd:7b:49:c9:53:3e:5c:96:e1:82:
8c:fb:fc:b1:69:07:d0:e2:75:46:f1:9c:3d:01:99:
96:4e:eb:2f:b6:2a:64:18:f9:36:d0:cd:cf:f0:56:
b9:c3:82:c4:31:9f:fc:1c:3b:22:0d:e8:79:d6:fd:
68:7e:e4:17:a3:76:92:0f:b5:60:f6:42:bb:94:2c:
4e:40:37:27:56:dc:92:8f:a1:74:19:7c:96:d8:e5:
c9:19:4a:f0:46:01:f2:13:e6:ff:aa:6e:dc:bf:25:
9b:4f:9e:24:8b:2f:4f:47:51:18:c3:ac:d5:2f:ac:
0c:52:50:f8:65:43:98:0d:5b:f7:95:25:39:13:18:
78:68:0b:7f:6b:6c:d0:a9:66:94:24:f5:58:6e:8b:
16:e9:5e:31:21:37:a2:55:8a:f5:13:9a:4a:f0:ce:
96:57:24:bb:78:6b:49:bb:5a:7b:12:5c:3f:ae:1f:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:CF:58:CE:F5:A9:DC:27:14:83:44:B3:4C:14:EB:F7:9B:39:53
X509v3 Authority Key Identifier:
keyid:D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/EVjPWM71qdwnFINEs0wU6_ebOVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:be:38:94:d9:44:c6:96:31:23:23:87:4e:7f:c8:fd:36:45:
11:1f:9d:c0:e1:7d:49:b2:3a:c8:8a:9a:1e:75:a8:0b:07:ad:
30:62:de:68:10:20:92:f5:14:04:6a:85:2a:00:a8:c3:ff:a0:
ef:79:ef:32:20:87:f6:54:6d:01:c5:30:ec:34:3b:1c:33:47:
7f:2f:ed:5a:88:5e:50:ab:2c:77:a4:2c:a4:70:99:3f:f6:09:
6d:f1:58:03:be:6d:0f:81:55:5f:09:e5:7a:78:7e:50:f2:a9:
24:99:ed:2c:68:cf:fc:1b:f7:d1:18:69:31:3b:41:6e:81:46:
24:7d:71:4f:fd:56:ec:8d:23:56:e7:68:89:2f:db:3c:a6:93:
72:07:73:8d:e2:99:02:4e:97:37:6f:2e:84:3c:ea:1c:84:36:
3b:8e:e9:b8:47:fe:ac:63:ff:33:90:37:66:dd:51:0c:69:24:
6e:e7:c4:e5:1b:5e:29:03:45:a5:16:04:dc:90:a3:1e:4b:ee:
9a:02:93:0f:f9:18:96:a9:8d:dc:a8:4d:3c:51:d3:a3:1f:17:
9c:4c:e8:b0:04:a6:34:78:56:dd:74:93:ef:5d:3f:9a:0c:a4:
eb:d8:15:9e:a4:24:1b:c9:d9:46:e2:b9:ce:54:7a:1a:17:b3:
d6:16:bb:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsnLqJkM9ObEOfhueBlP9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwODg1YjQxY2E4MWY5M2Y1ODNjMWVjYTcyMmI1MDU1ODI4
MGM1OWEwHhcNMjMwMTAxMDkxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU4Y2Y1OGNlZjVhOWRjMjcxNDgzNDRiMzRjMTRlYmY3OWIzOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7HzmMHkCVoN16tWWpQv3Ca8bkl6
08W0ytOirOMc+9lG8nP8NX3p/hww5KcltHnPiM5qRXmzxIMIcaDWzUu1xnbht2NR
4jTi5kxeA2D5NP17SclTPlyW4YKM+/yxaQfQ4nVG8Zw9AZmWTusvtipkGPk20M3P
8Fa5w4LEMZ/8HDsiDeh51v1ofuQXo3aSD7Vg9kK7lCxOQDcnVtySj6F0GXyW2OXJ
GUrwRgHyE+b/qm7cvyWbT54kiy9PR1EYw6zVL6wMUlD4ZUOYDVv3lSU5Exh4aAt/
a2zQqWaUJPVYbosW6V4xITeiVYr1E5pK8M6WVyS7eGtJu1p7Elw/rh+acwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFYz1jO9ancJxSDRLNMFOv3mzlTMB8GA1UdIwQY
MBaAFNCIW0HKgfk/WDweynIrUFWCgMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEloYlFjcUItVDlZUEI3S2NpdFFWWUtBeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80OTE2YjctMDAwZS00ODlkLTk3ODMt
ZjI1NjllYTRjZDc0LzEvRVZqUFdNNzFxZHduRklORXMwd1U2X2ViT1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80OTE2YjctMDAwZS00ODlkLTk3ODMtZjI1NjllYTRjZDc0
LzEvMEloYlFjcUItVDlZUEI3S2NpdFFWWUtBeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudvMMA0G
CSqGSIb3DQEBCwUAA4IBAQAbvjiU2UTGljEjI4dOf8j9NkURH53A4X1JsjrIipoe
dagLB60wYt5oECCS9RQEaoUqAKjD/6Dvee8yIIf2VG0BxTDsNDscM0d/L+1aiF5Q
qyx3pCykcJk/9glt8VgDvm0PgVVfCeV6eH5Q8qkkme0saM/8G/fRGGkxO0FugUYk
fXFP/VbsjSNW52iJL9s8ppNyB3ON4pkCTpc3by6EPOochDY7jum4R/6sY/8zkDdm
3VEMaSRu58TlG14pA0WlFgTckKMeS+6aApMP+RiWqY3cqE08UdOjHxecTOiwBKY0
eFbddJPvXT+aDKTr2BWepCQbydlG4rnOVHoaF7PWFrvE
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:37 2024 by rpki-client on console-ams.rpki-client.org