Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/vgQCZLisU9Ngn-VvQHOnWUZxlcE.roa
File: vgQCZLisU9Ngn-VvQHOnWUZxlcE.roa (raw, json)
Hash identifier: KnRq02vWjuboJ9pzhuG3COg0+sdZ/2UzNhTDxB4D5SI=
Subject key identifier: BE:04:02:64:B8:AC:53:D3:60:9F:E5:6F:40:73:A7:59:46:71:95:C1
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 01869770EC66CE9A788F1266A64A41FF8A7C
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/vgQCZLisU9Ngn-VvQHOnWUZxlcE.roa
Signing time: Tue 28 Feb 2023 09:53:25 +0000
ROA not before: Tue 28 Feb 2023 09:53:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201225
IP address blocks: 185.236.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:70:ec:66:ce:9a:78:8f:12:66:a6:4a:41:ff:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Feb 28 09:53:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be040264b8ac53d3609fe56f4073a759467195c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:e8:8e:c0:d9:dd:9b:76:a3:11:78:3f:4b:
24:e0:58:ea:41:b6:8e:45:a6:1c:61:8c:4b:f0:af:
cb:e2:54:4c:4b:57:3d:57:6a:ad:47:a2:c5:9e:fe:
ab:6b:10:eb:40:ed:56:a3:5e:23:44:a9:79:31:36:
56:81:e7:7d:12:93:6a:95:07:19:fa:ff:ac:7e:6c:
24:28:77:aa:3b:a8:13:01:eb:e1:2a:77:84:bd:c4:
e0:a4:3a:c4:92:70:ef:24:5d:76:39:9e:97:26:1a:
16:34:8d:36:18:58:74:43:43:34:8d:a2:c3:bd:51:
37:97:6e:9a:39:86:f4:07:b3:a8:29:78:39:55:6f:
ae:76:8c:c6:ec:42:6c:c6:61:86:b6:75:d8:0b:ce:
11:19:ed:db:0f:c3:6f:5d:47:5c:cb:56:68:84:3d:
49:aa:ef:de:8e:fd:5e:25:d3:23:d2:e0:c6:d7:ef:
21:0d:2a:5d:46:cc:a0:88:31:41:dc:5c:5c:3d:07:
19:2d:d3:59:29:86:ef:01:fc:89:00:07:67:3f:54:
3d:26:15:3f:c2:4f:a7:b7:b5:38:61:a8:2b:31:4a:
4d:34:74:ae:7d:4f:dd:14:45:fe:1e:77:3d:25:ea:
cc:9b:55:37:56:b9:00:a4:fe:32:73:2a:0b:fe:cb:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:02:64:B8:AC:53:D3:60:9F:E5:6F:40:73:A7:59:46:71:95:C1
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/vgQCZLisU9Ngn-VvQHOnWUZxlcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:07:7e:7c:88:36:b5:a8:32:c8:02:de:fe:67:c3:af:57:
12:42:ea:6c:bf:67:93:43:df:c6:79:f0:6b:cc:b2:e6:10:70:
56:63:a8:ef:42:65:b6:d7:c1:89:eb:c3:8a:8c:3b:d8:7d:e1:
40:cb:1f:5b:a4:76:48:3a:d6:83:2a:51:00:25:e1:d1:52:39:
00:5f:f3:ad:10:96:1a:e8:fc:ce:9b:1c:0b:8d:99:9f:52:10:
e4:a0:25:70:60:38:f9:fe:43:fb:b1:d0:e5:41:6f:c5:45:d1:
73:f0:ba:52:5b:7c:5f:2a:05:22:f6:0d:8d:6e:f0:24:85:c4:
67:92:13:0e:34:df:6d:82:3c:1a:e6:15:7c:f7:ad:48:e1:8c:
57:bb:92:dc:0a:e0:80:04:64:16:7d:d6:d9:da:91:cb:b8:9a:
be:10:12:da:3d:d0:d6:89:5c:78:29:76:5f:df:68:02:fd:64:
44:8b:93:3d:14:4a:74:c4:ac:7c:41:97:4e:d1:cc:16:e1:9c:
61:02:41:b0:c7:e5:22:44:b4:22:e2:3e:6c:c0:a5:a6:6e:40:
75:fb:a9:f0:90:0a:56:b0:78:06:dd:a2:5c:1a:fd:46:08:6a:
20:b6:9d:ef:7b:5b:aa:c6:12:a3:4d:31:ca:19:bd:35:83:f1:
d4:16:59:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaXcOxmzpp4jxJmpkpB/4p8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl
MGYzZjcwHhcNMjMwMjI4MDk1MzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTA0MDI2NGI4YWM1M2QzNjA5ZmU1NmY0MDczYTc1OTQ2NzE5NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiibojsDZ3Zt2oxF4P0sk4FjqQbaO
RaYcYYxL8K/L4lRMS1c9V2qtR6LFnv6raxDrQO1Wo14jRKl5MTZWged9EpNqlQcZ
+v+sfmwkKHeqO6gTAevhKneEvcTgpDrEknDvJF12OZ6XJhoWNI02GFh0Q0M0jaLD
vVE3l26aOYb0B7OoKXg5VW+udozG7EJsxmGGtnXYC84RGe3bD8NvXUdcy1ZohD1J
qu/ejv1eJdMj0uDG1+8hDSpdRsygiDFB3FxcPQcZLdNZKYbvAfyJAAdnP1Q9JhU/
wk+nt7U4YagrMUpNNHSufU/dFEX+Hnc9JerMm1U3VrkApP4ycyoL/sv2MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4EAmS4rFPTYJ/lb0Bzp1lGcZXBMB8GA1UdIwQY
MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt
NmNkYmMyMTIyNzQ5LzEvdmdRQ1pMaXNVOU5nbi1WdlFIT25XVVp4bGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5
LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuey0MA0G
CSqGSIb3DQEBCwUAA4IBAQB+igd+fIg2tagyyALe/mfDr1cSQupsv2eTQ9/GefBr
zLLmEHBWY6jvQmW218GJ68OKjDvYfeFAyx9bpHZIOtaDKlEAJeHRUjkAX/OtEJYa
6PzOmxwLjZmfUhDkoCVwYDj5/kP7sdDlQW/FRdFz8LpSW3xfKgUi9g2NbvAkhcRn
khMONN9tgjwa5hV8961I4YxXu5LcCuCABGQWfdbZ2pHLuJq+EBLaPdDWiVx4KXZf
32gC/WREi5M9FEp0xKx8QZdO0cwW4ZxhAkGwx+UiRLQi4j5swKWmbkB1+6nwkApW
sHgG3aJcGv1GCGogtp3ve1uqxhKjTTHKGb01g/HUFlmp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org