Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Gg-dqUCGlz-gdwTl2zq7bjNRb74.roa
File: Gg-dqUCGlz-gdwTl2zq7bjNRb74.roa (raw, json)
Hash identifier: AM8I9hmOV5qp4WG9g00WAj5aLhi8rumd29YFN/9M5tw=
Subject key identifier: 1A:0F:9D:A9:40:86:97:3F:A0:77:04:E5:DB:3A:BB:6E:33:51:6F:BE
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018BE1EEFC69A48DE3A6B32AB51479963E7B
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Gg-dqUCGlz-gdwTl2zq7bjNRb74.roa
Signing time: Sat 18 Nov 2023 10:16:57 +0000
ROA not before: Sat 18 Nov 2023 10:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:ee:fc:69:a4:8d:e3:a6:b3:2a:b5:14:79:96:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Nov 18 10:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0f9da94086973fa07704e5db3abb6e33516fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:c3:0a:70:3b:30:fc:7c:ec:eb:b3:cb:7e:
d8:71:db:99:b5:74:23:49:3f:36:10:a9:e2:58:7e:
9f:08:0f:49:c4:6a:37:26:fa:30:ee:96:aa:7b:f2:
fd:61:be:1d:86:11:d8:45:8f:fc:28:77:59:6a:a7:
0f:69:40:c0:a6:a4:3c:0d:a9:b9:36:48:ce:1d:05:
48:7f:1a:a1:0e:f5:e0:58:5a:39:d4:c6:cf:4b:27:
49:c2:8c:c1:f9:41:da:c1:75:4a:5e:7e:fe:9f:b0:
0b:8b:ee:11:32:cf:e7:01:3f:5b:55:c7:07:98:34:
65:c6:39:3b:bf:41:37:6c:00:9a:89:85:2a:b0:1a:
30:73:58:88:c2:da:59:b5:dc:a4:7e:c6:78:ad:d9:
e6:a9:ca:62:d5:08:a4:07:26:64:c4:86:d5:9d:39:
88:c3:24:08:31:06:92:16:a7:75:1b:bb:d9:16:02:
14:b9:58:03:fa:67:28:d8:8a:64:37:b2:91:59:e5:
83:83:1c:fb:6b:f8:32:6a:a1:d7:4c:59:b3:f2:75:
83:c1:e6:73:3f:8b:ab:a8:46:7b:d5:ce:cb:4c:ad:
c4:0a:c4:fa:af:91:da:58:47:07:12:f0:c2:80:5d:
a9:32:e1:b7:be:40:84:29:d0:71:5a:f8:bd:23:e7:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:9D:A9:40:86:97:3F:A0:77:04:E5:DB:3A:BB:6E:33:51:6F:BE
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Gg-dqUCGlz-gdwTl2zq7bjNRb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e1:45:23:80:d4:28:fe:59:58:97:b6:2a:ad:3f:d0:2c:01:
f2:93:e2:72:bf:35:b9:66:10:8a:d9:a8:a0:e1:81:a6:fc:5c:
5e:aa:79:a7:36:33:4f:c6:2b:da:37:b0:10:5c:0f:d1:cd:1e:
15:fd:14:60:a4:25:d0:22:44:16:27:26:0f:2e:28:b9:d8:75:
d0:93:bc:be:a0:1d:0a:53:f2:c1:85:a0:43:0e:5e:4a:2e:8f:
8d:a4:aa:f2:d9:f0:5f:8a:93:36:b0:ce:83:04:1d:b2:4a:b7:
b9:f9:1c:e6:65:41:99:82:8a:4b:6e:80:31:59:17:ee:a8:c9:
56:57:ff:64:b1:b1:a8:e1:6f:11:d0:0c:35:c2:43:6e:4f:1c:
9d:0c:b2:df:5c:a8:f4:2d:f6:87:63:f8:53:28:f6:c0:aa:03:
d0:a6:ae:6a:cc:38:e3:95:77:88:8f:1c:5e:1d:b0:0a:9f:9e:
fa:bf:5a:bb:8a:71:dd:97:fa:fa:ae:95:bd:26:b7:21:fa:2e:
70:0e:9a:61:b5:69:e0:c4:fc:ea:e1:b0:ba:2c:89:e3:5b:4e:
62:1f:7f:45:4b:93:fc:4d:5b:eb:b8:f8:0b:90:da:38:f5:81:
c3:1e:29:4a:a9:16:c3:ca:81:93:6b:71:2d:26:4b:72:73:5b:
71:7b:d5:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvh7vxppI3jprMqtRR5lj57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjMxMTE4MTAxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTBmOWRhOTQwODY5NzNmYTA3NzA0ZTVkYjNhYmI2ZTMzNTE2ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdDDCnA7MPx87Ouzy37YcduZtXQj
ST82EKniWH6fCA9JxGo3Jvow7paqe/L9Yb4dhhHYRY/8KHdZaqcPaUDApqQ8Dam5
NkjOHQVIfxqhDvXgWFo51MbPSydJwozB+UHawXVKXn7+n7ALi+4RMs/nAT9bVccH
mDRlxjk7v0E3bACaiYUqsBowc1iIwtpZtdykfsZ4rdnmqcpi1QikByZkxIbVnTmI
wyQIMQaSFqd1G7vZFgIUuVgD+mco2IpkN7KRWeWDgxz7a/gyaqHXTFmz8nWDweZz
P4urqEZ71c7LTK3ECsT6r5HaWEcHEvDCgF2pMuG3vkCEKdBxWvi9I+f7KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBoPnalAhpc/oHcE5ds6u24zUW++MB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvR2ctZHFVQ0dsei1nZHdUbDJ6cTdiak5SYjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX61MA0G
CSqGSIb3DQEBCwUAA4IBAQCi4UUjgNQo/llYl7YqrT/QLAHyk+JyvzW5ZhCK2aig
4YGm/FxeqnmnNjNPxivaN7AQXA/RzR4V/RRgpCXQIkQWJyYPLii52HXQk7y+oB0K
U/LBhaBDDl5KLo+NpKry2fBfipM2sM6DBB2ySre5+RzmZUGZgopLboAxWRfuqMlW
V/9ksbGo4W8R0Aw1wkNuTxydDLLfXKj0LfaHY/hTKPbAqgPQpq5qzDjjlXeIjxxe
HbAKn576v1q7inHdl/r6rpW9Jrch+i5wDpphtWngxPzq4bC6LInjW05iH39FS5P8
TVvruPgLkNo49YHDHilKqRbDyoGTa3EtJktyc1txe9V8
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org