Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4eYeJesIj60L7cKw0nd_iTPyaqw.roa
File: 4eYeJesIj60L7cKw0nd_iTPyaqw.roa (raw, json)
Hash identifier: HGWL7X2t8I45u+pTTErGsjHQe13yyhrfoIp4ccDpVWk=
Subject key identifier: E1:E6:1E:25:EB:08:8F:AD:0B:ED:C2:B0:D2:77:7F:89:33:F2:6A:AC
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018A8D8AFA63C371C58F3766B800164857CD
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4eYeJesIj60L7cKw0nd_iTPyaqw.roa
Signing time: Wed 13 Sep 2023 07:56:50 +0000
ROA not before: Wed 13 Sep 2023 07:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.36.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:8a:fa:63:c3:71:c5:8f:37:66:b8:00:16:48:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Sep 13 07:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1e61e25eb088fad0bedc2b0d2777f8933f26aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:fe:97:ee:aa:f8:02:7e:c7:41:b7:72:5d:
c2:c5:1d:b4:32:ab:27:8f:c4:d9:eb:77:8f:25:a5:
37:ce:97:1a:4e:b2:8f:22:12:9b:70:64:4e:9d:9d:
dc:1a:9f:5a:17:f1:51:0c:a9:02:28:e8:ea:eb:7a:
02:cf:49:fd:06:b0:6d:0a:38:d6:26:a0:26:e0:d4:
06:aa:b4:e4:17:54:94:93:3c:c4:94:5b:c3:df:4f:
ae:f1:e7:63:20:e1:d1:13:c5:a6:d9:53:52:f2:40:
10:ad:53:63:67:3d:6f:31:b5:25:0a:36:d0:98:0b:
df:c1:3c:26:cc:fe:e2:b2:3a:69:82:34:8c:76:0d:
d0:c7:2f:1d:a1:c5:cc:88:34:41:92:46:7e:f8:35:
5e:05:0f:a7:4b:a2:0f:f3:25:c8:17:e1:08:7b:9b:
19:de:41:b2:d1:3b:38:14:3b:b5:e6:ff:5d:ab:1c:
db:24:fa:b5:00:b9:bd:af:e2:b1:ef:20:eb:9a:06:
92:4c:4a:cb:b2:bc:06:ea:75:fe:98:55:b6:c5:50:
70:a9:e9:98:29:dc:8f:72:59:bf:4c:c4:d9:25:6b:
b5:9b:5e:19:fb:33:60:64:2e:9d:b6:95:92:bd:5e:
bc:c8:a7:26:73:66:de:f5:44:35:60:89:5c:70:5d:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:1E:25:EB:08:8F:AD:0B:ED:C2:B0:D2:77:7F:89:33:F2:6A:AC
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4eYeJesIj60L7cKw0nd_iTPyaqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
95:65:7d:53:1b:f2:02:1d:61:2f:37:36:cd:57:8b:af:bb:17:
48:55:16:70:69:64:a4:4e:15:ea:34:2e:a6:d0:f1:db:b9:51:
8d:4c:f9:ea:1a:58:d7:74:89:95:9c:7a:fc:c6:27:68:1d:c2:
52:4a:4e:ab:aa:6a:7d:46:ff:5e:0c:8a:cc:04:1a:ae:e5:d0:
08:b3:b2:7d:79:d9:a8:25:eb:de:32:84:a5:1a:49:fa:25:3f:
21:f8:e6:0c:ef:b7:aa:cb:1c:5a:6e:2b:b9:d9:04:27:d4:65:
26:02:51:b9:97:61:ed:64:9e:a5:c9:3a:c1:33:0a:00:ff:e3:
e2:6d:5a:a6:3d:2d:ac:5d:d2:3b:f3:8f:ea:23:97:d1:df:1a:
58:57:56:67:24:81:70:94:e4:b7:34:1d:72:86:19:5e:32:2e:
b5:b0:33:4b:e8:6f:ed:a2:57:c4:d5:f3:6c:fe:b7:19:a0:48:
5b:8b:c1:6f:9f:2b:1c:e6:50:12:2b:81:8e:fe:7a:f7:1b:6b:
3d:11:be:41:50:6b:2e:75:67:63:ac:5c:ef:ea:36:98:16:63:
6d:f7:0d:68:26:4f:1f:40:91:d1:0c:47:06:1f:a8:0a:37:27:
88:8d:d6:05:63:60:18:80:69:d3:e0:a0:7a:c4:88:8f:ae:a5:
ce:d6:72:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqNivpjw3HFjzdmuAAWSFfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjMwOTEzMDc1NjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWU2MWUyNWViMDg4ZmFkMGJlZGMyYjBkMjc3N2Y4OTMzZjI2YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVX+l+6q+AJ+x0G3cl3CxR20Mqsn
j8TZ63ePJaU3zpcaTrKPIhKbcGROnZ3cGp9aF/FRDKkCKOjq63oCz0n9BrBtCjjW
JqAm4NQGqrTkF1SUkzzElFvD30+u8edjIOHRE8Wm2VNS8kAQrVNjZz1vMbUlCjbQ
mAvfwTwmzP7isjppgjSMdg3Qxy8docXMiDRBkkZ++DVeBQ+nS6IP8yXIF+EIe5sZ
3kGy0Ts4FDu15v9dqxzbJPq1ALm9r+Kx7yDrmgaSTErLsrwG6nX+mFW2xVBwqemY
KdyPclm/TMTZJWu1m14Z+zNgZC6dtpWSvV68yKcmc2be9UQ1YIlccF2H9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHmHiXrCI+tC+3CsNJ3f4kz8mqsMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvNGVZZUplc0lqNjBMN2NLdzBuZF9pVFB5YXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR/MA0G
CSqGSIb3DQEBCwUAA4IBAQCVZX1TG/ICHWEvNzbNV4uvuxdIVRZwaWSkThXqNC6m
0PHbuVGNTPnqGljXdImVnHr8xidoHcJSSk6rqmp9Rv9eDIrMBBqu5dAIs7J9edmo
JeveMoSlGkn6JT8h+OYM77eqyxxabiu52QQn1GUmAlG5l2HtZJ6lyTrBMwoA/+Pi
bVqmPS2sXdI784/qI5fR3xpYV1ZnJIFwlOS3NB1yhhleMi61sDNL6G/tolfE1fNs
/rcZoEhbi8Fvnysc5lASK4GO/nr3G2s9Eb5BUGsudWdjrFzv6jaYFmNt9w1oJk8f
QJHRDEcGH6gKNyeIjdYFY2AYgGnT4KB6xIiPrqXO1nJ7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org