Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHF0xq_0kaoDbJvJJbP1qf72M8k.roa
File: tHF0xq_0kaoDbJvJJbP1qf72M8k.roa (raw, json)
Hash identifier: IP5DsQZMp/VS9Hj/Yjt7jOXUUObahk+QWnrsyk3geJE=
Subject key identifier: B4:71:74:C6:AF:F4:91:AA:03:6C:9B:C9:25:B3:F5:A9:FE:F6:33:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EF170D09A861235224D554FDA4AED076A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHF0xq_0kaoDbJvJJbP1qf72M8k.roa
Signing time: Thu 18 Apr 2024 13:41:26 +0000
ROA not before: Thu 18 Apr 2024 13:41:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 185.222.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 13:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:70:d0:9a:86:12:35:22:4d:55:4f:da:4a:ed:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 18 13:41:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b47174c6aff491aa036c9bc925b3f5a9fef633c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:6b:f6:c8:45:03:44:0c:11:6c:e9:1b:20:
b1:24:ff:e0:3c:d0:89:16:08:c2:45:72:c5:fd:74:
da:3e:6d:b8:47:b4:dc:f2:b0:58:34:22:72:de:cc:
14:10:c5:07:1c:02:ce:cd:f9:cd:48:7a:18:09:75:
4b:cf:51:47:29:8e:15:61:c1:9b:d0:fb:6c:de:1a:
57:e7:2a:2c:78:c1:da:e8:18:f4:da:6d:60:a1:1c:
e6:41:50:ae:61:db:21:78:50:17:ed:ad:80:7f:0d:
27:ee:1d:88:d3:a1:2a:c7:26:e5:a7:77:dc:d9:c1:
fe:fa:dd:48:28:5f:49:03:3f:ec:ae:38:ce:71:5b:
1a:24:fb:45:90:9f:c2:a3:cb:e5:a5:7c:0e:4e:21:
95:6f:54:c3:f7:73:7e:6f:cf:09:04:9a:47:ce:ad:
f0:a5:8b:36:b6:3a:b4:2f:55:f1:1a:ab:57:2d:58:
93:94:4a:ac:45:83:34:f5:4f:91:72:ba:ee:a0:f4:
38:b1:aa:47:ab:c1:54:f7:47:ae:0f:8d:d2:aa:21:
77:24:4a:90:57:3f:60:1c:82:7e:3b:aa:5f:e9:cb:
61:46:2c:13:e5:1a:78:d8:22:f2:98:71:0a:39:9b:
14:0f:e7:88:31:f4:43:87:31:e7:e4:6e:f8:7a:46:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:74:C6:AF:F4:91:AA:03:6C:9B:C9:25:B3:F5:A9:FE:F6:33:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHF0xq_0kaoDbJvJJbP1qf72M8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:24:28:6c:4d:08:3d:bc:90:8d:d7:42:d7:1e:4b:65:f3:74:
4a:04:0a:0e:31:92:4b:f2:7d:b2:cf:60:39:c3:e8:ef:ec:d8:
17:4d:69:d5:50:be:f0:ee:90:18:df:df:18:83:d8:f8:95:6b:
63:3a:98:38:d4:16:c9:39:de:a1:71:73:cc:3b:27:26:92:a5:
be:e4:14:94:06:b7:99:ab:fe:80:a9:7f:83:0c:ac:b4:7b:f0:
20:00:62:ec:18:f4:3b:10:05:28:4b:d9:14:a6:b1:b9:cc:7e:
ca:7b:a4:d2:79:31:ec:65:cc:74:07:a0:49:91:7a:9f:4a:bc:
12:de:7d:e0:90:ef:e5:ea:ae:64:36:05:d7:03:ea:89:06:b2:
bd:4c:29:f3:75:7b:d4:c1:f2:cb:52:9d:d6:2e:3b:db:c8:81:
7b:6c:d6:4d:42:8e:e5:b1:45:85:a1:db:97:9f:3c:3c:03:06:
01:87:20:fa:fb:df:f9:69:22:70:3c:bc:ce:4b:71:a5:eb:31:
5c:68:48:68:9a:c5:1d:4b:c2:8e:4c:e5:50:6c:04:2a:65:f5:
5e:b8:7f:6d:37:05:02:7e:5a:9d:59:7b:26:52:1f:32:af:1b:
93:41:cb:e2:7c:05:6b:6e:67:c1:e9:a0:86:11:68:1d:cf:a1:
d7:aa:4b:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7xcNCahhI1Ik1VT9pK7QdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDE4MTM0MTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDcxNzRjNmFmZjQ5MWFhMDM2YzliYzkyNWIzZjVhOWZlZjYzM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqFr9shFA0QMEWzpGyCxJP/gPNCJ
FgjCRXLF/XTaPm24R7Tc8rBYNCJy3swUEMUHHALOzfnNSHoYCXVLz1FHKY4VYcGb
0Pts3hpX5yoseMHa6Bj02m1goRzmQVCuYdsheFAX7a2Afw0n7h2I06Eqxyblp3fc
2cH++t1IKF9JAz/srjjOcVsaJPtFkJ/Co8vlpXwOTiGVb1TD93N+b88JBJpHzq3w
pYs2tjq0L1XxGqtXLViTlEqsRYM09U+RcrruoPQ4sapHq8FU90euD43SqiF3JEqQ
Vz9gHIJ+O6pf6cthRiwT5Rp42CLymHEKOZsUD+eIMfRDhzHn5G74ekbvMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLRxdMav9JGqA2ybySWz9an+9jPJMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdEhGMHhxXzBrYW9EYkp2SkpiUDFxZjcyTThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud6gMA0G
CSqGSIb3DQEBCwUAA4IBAQAmJChsTQg9vJCN10LXHktl83RKBAoOMZJL8n2yz2A5
w+jv7NgXTWnVUL7w7pAY398Yg9j4lWtjOpg41BbJOd6hcXPMOycmkqW+5BSUBreZ
q/6AqX+DDKy0e/AgAGLsGPQ7EAUoS9kUprG5zH7Ke6TSeTHsZcx0B6BJkXqfSrwS
3n3gkO/l6q5kNgXXA+qJBrK9TCnzdXvUwfLLUp3WLjvbyIF7bNZNQo7lsUWFoduX
nzw8AwYBhyD6+9/5aSJwPLzOS3Gl6zFcaEhomsUdS8KOTOVQbAQqZfVeuH9tNwUC
flqdWXsmUh8yrxuTQcvifAVrbmfB6aCGEWgdz6HXqktD
-----END CERTIFICATE-----
Generated at Fri May 17 16:58:24 2024 by rpki-client on console-ams.rpki-client.org