Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GvObxXUSNIJCqbd9qQZwPj74fvc.roa
File: GvObxXUSNIJCqbd9qQZwPj74fvc.roa (raw, json)
Hash identifier: PNvG7TYI36xVAZuY6Zn7IKgC8ps7QsOz1tFkp7/ah9g=
Subject key identifier: 1A:F3:9B:C5:75:12:34:82:42:A9:B7:7D:A9:06:70:3E:3E:F8:7E:F7
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 0185715E59B9CF5CF80D1E34D1E57072E4A3
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GvObxXUSNIJCqbd9qQZwPj74fvc.roa
Signing time: Mon 02 Jan 2023 07:24:46 +0000
ROA not before: Mon 02 Jan 2023 07:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 09:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:59:b9:cf:5c:f8:0d:1e:34:d1:e5:70:72:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 2 07:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af39bc57512348242a9b77da906703e3ef87ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:95:15:3b:3b:82:99:24:aa:d8:05:3e:38:
82:4d:69:4f:81:95:7b:b4:61:50:8b:9d:a4:89:7c:
b0:7a:14:cc:8a:83:16:58:a8:d4:d2:5b:45:5c:b6:
df:fe:93:ab:88:4b:2e:a1:a1:f7:32:62:e5:97:35:
f1:7f:e0:41:a2:73:3e:15:19:c1:1a:18:57:4a:62:
86:a5:91:21:b9:2a:3e:95:d4:8d:14:c9:3f:2b:20:
b3:c6:a8:81:40:9a:8d:1c:be:15:ec:5d:fd:2c:bb:
16:82:8d:8d:22:9e:27:94:46:eb:fe:7f:00:84:94:
32:2d:67:8f:87:c4:ee:71:a3:33:e9:fd:ef:90:2e:
85:22:f4:36:bd:4d:50:34:35:99:76:13:ca:8b:d2:
a5:fc:c5:bf:fd:0e:bf:9a:2a:69:a8:30:76:c9:9f:
39:9c:2e:3f:cc:45:85:57:6f:78:40:5e:58:c1:94:
88:43:06:79:59:5a:0b:2d:15:f2:ec:cb:4e:9c:c3:
8f:d3:17:a3:d9:bd:0e:8b:02:d9:20:2b:e3:fb:55:
83:ad:4c:4e:16:78:22:4a:18:f2:e0:9c:d3:ca:05:
d4:15:58:c8:08:eb:6a:b1:2b:9f:39:23:de:2b:d3:
02:cb:e8:d8:4c:fa:53:a9:ee:58:66:d6:31:69:c2:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:9B:C5:75:12:34:82:42:A9:B7:7D:A9:06:70:3E:3E:F8:7E:F7
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GvObxXUSNIJCqbd9qQZwPj74fvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:27:83:02:a4:65:6c:67:70:84:5b:6a:af:e1:39:c9:76:2f:
97:ff:fd:5e:c6:a9:ce:82:09:70:03:bf:1b:9b:5d:ae:15:43:
b6:49:46:53:86:f2:06:d8:c5:e4:05:ea:0c:64:c6:47:ec:c4:
10:b8:59:3e:81:e2:07:db:37:ff:12:2d:35:6a:62:60:6d:1a:
78:3b:38:41:50:9e:68:59:dc:39:26:55:22:5d:91:22:79:ea:
a5:f9:43:30:1d:44:bd:89:ce:9a:c9:af:fa:a1:ba:aa:83:e9:
64:7b:64:f3:12:57:8f:4c:ac:8a:e6:cf:d3:c4:43:39:46:a0:
51:37:e0:ec:b2:ea:da:0b:87:ef:a6:c9:fd:a2:71:25:65:6a:
28:7e:2c:61:72:bf:61:ab:c1:41:94:7c:4f:25:fa:09:6f:d4:
29:af:c1:72:5c:7b:3e:62:09:fd:ad:a3:2b:25:54:58:38:56:
a6:f7:c6:31:46:91:5a:e5:98:87:d4:0b:65:ee:82:bc:fa:db:
62:55:22:ee:cc:a3:a6:df:50:64:cf:dd:33:88:61:f1:b6:61:
1d:0b:aa:8f:0e:16:1e:b1:bd:ee:60:e5:0d:11:dc:b6:55:6e:
fb:66:9b:82:b5:ef:e5:c7:fe:a1:60:2f:5e:f2:ae:26:ac:36:
7e:9a:16:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXlm5z1z4DR400eVwcuSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWVjZDcxYzE5M2U0YWMzMGVkMDNkMGI5ZjA1ZGExMDFj
NjAzZDIwHhcNMjMwMTAyMDcyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWYzOWJjNTc1MTIzNDgyNDJhOWI3N2RhOTA2NzAzZTNlZjg3ZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhOVFTs7gpkkqtgFPjiCTWlPgZV7
tGFQi52kiXywehTMioMWWKjU0ltFXLbf/pOriEsuoaH3MmLllzXxf+BBonM+FRnB
GhhXSmKGpZEhuSo+ldSNFMk/KyCzxqiBQJqNHL4V7F39LLsWgo2NIp4nlEbr/n8A
hJQyLWePh8TucaMz6f3vkC6FIvQ2vU1QNDWZdhPKi9Kl/MW//Q6/mippqDB2yZ85
nC4/zEWFV294QF5YwZSIQwZ5WVoLLRXy7MtOnMOP0xej2b0OiwLZICvj+1WDrUxO
FngiShjy4JzTygXUFVjICOtqsSufOSPeK9MCy+jYTPpTqe5YZtYxacIw7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrzm8V1EjSCQqm3fakGcD4++H73MB8GA1UdIwQY
MBaAFBHuzXHBk+SsMO0D0LnwXaEBxgPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4Njgt
MTM4OTk1Yzk5Yjk3LzEvR3ZPYnhYVVNOSUpDcWJkOXFRWndQajc0ZnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4NjgtMTM4OTk1Yzk5Yjk3
LzEvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejOMA0G
CSqGSIb3DQEBCwUAA4IBAQAeJ4MCpGVsZ3CEW2qv4TnJdi+X//1exqnOgglwA78b
m12uFUO2SUZThvIG2MXkBeoMZMZH7MQQuFk+geIH2zf/Ei01amJgbRp4OzhBUJ5o
Wdw5JlUiXZEieeql+UMwHUS9ic6aya/6obqqg+lke2TzElePTKyK5s/TxEM5RqBR
N+DssuraC4fvpsn9onElZWoofixhcr9hq8FBlHxPJfoJb9Qpr8FyXHs+Ygn9raMr
JVRYOFam98YxRpFa5ZiH1Atl7oK8+ttiVSLuzKOm31Bkz90ziGHxtmEdC6qPDhYe
sb3uYOUNEdy2VW77ZpuCte/lx/6hYC9e8q4mrDZ+mhYv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org