Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/xbHIyUrIrO2nb7QrPGUwdRLl3Yw.roa
File: xbHIyUrIrO2nb7QrPGUwdRLl3Yw.roa (raw, json)
Hash identifier: p9W53LSi+rToOc6DauiQDnLq7lLBxoNYlRwfKWcK2vI=
Subject key identifier: C5:B1:C8:C9:4A:C8:AC:ED:A7:6F:B4:2B:3C:65:30:75:12:E5:DD:8C
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 01856EA6866570D10C776DF70273B27F37FA
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/xbHIyUrIrO2nb7QrPGUwdRLl3Yw.roa
Signing time: Sun 01 Jan 2023 18:44:45 +0000
ROA not before: Sun 01 Jan 2023 18:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204918
IP address blocks: 185.171.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:86:65:70:d1:0c:77:6d:f7:02:73:b2:7f:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Jan 1 18:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b1c8c94ac8aceda76fb42b3c65307512e5dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:2b:14:61:bf:e6:e2:03:e8:b8:d0:bc:50:
6e:83:91:b5:89:45:da:9b:09:c3:7d:14:68:a3:49:
ee:5b:bf:9f:d1:2a:5a:c2:b8:dd:5e:61:d1:65:08:
40:82:c7:ab:a4:5e:72:43:e0:0e:b8:50:92:d9:c2:
21:ea:34:ff:34:c2:d5:ee:fc:dc:db:01:e3:d4:c1:
29:a5:43:b0:db:4d:8b:75:12:5b:ea:67:71:a6:dc:
e9:f3:9a:88:43:c1:55:ba:e5:21:ef:10:c9:4b:83:
a0:47:df:6b:8b:55:40:6c:b4:37:12:81:46:17:61:
b1:18:f6:75:42:00:a9:bc:19:43:98:a5:66:80:79:
00:3b:04:68:dd:ee:bd:b7:64:6c:d7:18:01:19:ec:
57:4b:20:6a:22:73:57:e9:98:d1:76:54:28:46:b7:
21:27:3c:93:bd:eb:6f:4e:55:98:15:fe:38:e7:ac:
82:18:bc:3d:02:c9:80:ee:74:0b:a6:a9:8e:ba:75:
08:51:ac:95:dc:aa:65:2e:ed:fd:fb:09:af:fd:6d:
fa:ec:c8:4d:72:b3:5d:ce:62:c5:7c:71:75:56:7a:
22:45:c0:f8:2d:a8:1b:55:e2:f7:bc:49:43:69:5e:
f9:a8:ff:fb:1c:19:da:9e:d8:b7:ab:69:57:6b:fb:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:C8:C9:4A:C8:AC:ED:A7:6F:B4:2B:3C:65:30:75:12:E5:DD:8C
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/xbHIyUrIrO2nb7QrPGUwdRLl3Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a3:11:95:a1:1d:ab:d7:48:28:69:3d:cb:48:f3:dd:2b:dc:
de:fd:1c:fc:b6:50:93:c9:7f:12:36:aa:9f:37:4d:ee:2a:17:
dd:41:75:a1:89:4d:6c:4f:e4:e7:08:37:9c:15:04:62:2a:5e:
26:98:69:b5:e5:b4:f9:de:fb:3b:56:43:2a:70:97:6b:cc:1a:
38:a4:b1:e5:ee:25:a8:e6:1c:9f:c5:e3:86:7d:13:71:0c:99:
c0:58:d1:02:2a:02:03:54:a8:cf:0e:3a:14:c5:36:12:4d:ca:
0e:cf:76:08:23:a4:89:6e:cf:21:cc:a7:3a:9e:e5:e7:4c:25:
8f:2c:4e:c6:bb:36:4a:3c:07:ef:f9:06:95:16:8c:e4:ff:c1:
30:a1:6e:67:f5:ce:39:44:42:d4:4f:af:65:04:68:e9:a0:6c:
69:4f:20:86:fb:db:76:41:c3:16:70:4b:64:de:f0:90:7a:56:
a3:67:4e:02:7a:b8:cc:c6:0a:e4:37:e9:ae:31:37:7d:ea:88:
e0:2c:25:6e:34:27:f2:ef:bb:5d:21:68:12:46:3f:fd:fc:0c:
b0:89:49:4b:41:4e:a6:d0:2e:0f:74:e6:74:27:70:bc:05:d6:
88:35:c1:36:eb:08:86:46:2c:e1:96:c6:4c:ce:60:7e:9e:0f:
91:43:a0:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupoZlcNEMd233AnOyfzf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTRjNGJjNGQyNTYzZTI1MmViZmNjMGZiYzJhYzE5OWNj
ZTYwOGEwHhcNMjMwMTAxMTg0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWIxYzhjOTRhYzhhY2VkYTc2ZmI0MmIzYzY1MzA3NTEyZTVkZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL0rFGG/5uID6LjQvFBug5G1iUXa
mwnDfRRoo0nuW7+f0SpawrjdXmHRZQhAgserpF5yQ+AOuFCS2cIh6jT/NMLV7vzc
2wHj1MEppUOw202LdRJb6mdxptzp85qIQ8FVuuUh7xDJS4OgR99ri1VAbLQ3EoFG
F2GxGPZ1QgCpvBlDmKVmgHkAOwRo3e69t2Rs1xgBGexXSyBqInNX6ZjRdlQoRrch
JzyTvetvTlWYFf4456yCGLw9AsmA7nQLpqmOunUIUayV3KplLu39+wmv/W367MhN
crNdzmLFfHF1VnoiRcD4LagbVeL3vElDaV75qP/7HBnanti3q2lXa/t8IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWxyMlKyKztp2+0KzxlMHUS5d2MMB8GA1UdIwQY
MBaAFFqUxLxNJWPiUuv8wPvCrBmczmCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAt
YTdhNWY0NzhkZDcyLzEveGJISXlVcklyTzJuYjdRclBHVXdkUkxsM1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAtYTdhNWY0NzhkZDcy
LzEvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuatfMA0G
CSqGSIb3DQEBCwUAA4IBAQCboxGVoR2r10goaT3LSPPdK9ze/Rz8tlCTyX8SNqqf
N03uKhfdQXWhiU1sT+TnCDecFQRiKl4mmGm15bT53vs7VkMqcJdrzBo4pLHl7iWo
5hyfxeOGfRNxDJnAWNECKgIDVKjPDjoUxTYSTcoOz3YII6SJbs8hzKc6nuXnTCWP
LE7GuzZKPAfv+QaVFozk/8EwoW5n9c45RELUT69lBGjpoGxpTyCG+9t2QcMWcEtk
3vCQelajZ04CerjMxgrkN+muMTd96ojgLCVuNCfy77tdIWgSRj/9/AywiUlLQU6m
0C4PdOZ0J3C8BdaINcE26wiGRizhlsZMzmB+ng+RQ6A3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:30 2024 by rpki-client on console-fra.rpki-client.org