Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/p4CAoeT5zBmr1Fs-hvypM-zk_bc.roa
File: p4CAoeT5zBmr1Fs-hvypM-zk_bc.roa (raw, json)
Hash identifier: rk8arn/pW2nW/s8ACFeno8ETiPBK4yknJ0zgWvz/hWk=
Subject key identifier: A7:80:80:A1:E4:F9:CC:19:AB:D4:5B:3E:86:FC:A9:33:EC:E4:FD:B7
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 0185709506C6824FA9EB6CC5C8CDC7F99545
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/p4CAoeT5zBmr1Fs-hvypM-zk_bc.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9304
IP address blocks: 185.25.244.0/22 maxlen: 22
2a00:8420::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:06:c6:82:4f:a9:eb:6c:c5:c8:cd:c7:f9:95:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78080a1e4f9cc19abd45b3e86fca933ece4fdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:5b:8f:f9:c0:10:5a:de:53:70:d6:62:09:
d2:c8:68:fe:e2:21:77:80:e9:99:d7:70:8b:57:1b:
df:25:c6:37:45:ec:b6:3c:41:e4:86:41:ce:23:9d:
1a:31:18:a0:bb:32:f9:a6:29:e0:97:47:39:b0:6f:
69:5f:7d:fc:97:00:fd:f0:e2:e7:f0:33:fa:2f:6d:
7c:9d:b7:d2:19:18:6d:83:ec:43:7e:16:6d:86:3a:
ba:81:fe:3e:65:0f:3f:d2:b8:ad:2d:f4:3a:23:31:
ee:32:0f:93:85:60:21:c4:95:7f:7c:74:6c:bb:61:
a0:c3:d4:48:bc:2a:df:52:72:59:c1:fe:27:a3:8f:
3b:21:6c:d4:ba:16:79:1c:15:ce:04:8a:98:4a:4f:
8a:5c:ee:74:e2:e5:be:6b:dc:52:8a:d1:b5:3b:bd:
c8:9a:d8:9d:67:d7:72:dd:cf:47:f5:ec:ce:68:07:
00:cd:7b:f5:cb:8f:d6:4e:09:b2:92:a4:fe:36:de:
5b:94:f2:27:4f:ff:bc:f1:df:0d:27:52:16:51:87:
71:69:26:54:1b:da:a8:68:e6:cf:df:1f:31:ff:97:
c0:d0:62:7d:42:0b:a1:bb:cf:d0:d2:d8:bc:a8:7d:
05:01:bc:31:38:af:0f:0c:6d:0e:ed:fa:60:85:d5:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:80:A1:E4:F9:CC:19:AB:D4:5B:3E:86:FC:A9:33:EC:E4:FD:B7
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/p4CAoeT5zBmr1Fs-hvypM-zk_bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.244.0/22
IPv6:
2a00:8420::/32
Signature Algorithm: sha256WithRSAEncryption
74:89:c2:00:4f:16:7d:80:51:e8:56:bf:14:c3:ff:46:f2:bf:
0b:7d:ae:ef:8c:9c:65:af:45:d0:1e:03:03:f3:07:65:49:d1:
f5:f0:3a:36:2f:55:d5:cb:ab:d7:fc:96:6f:63:c9:a9:1e:b0:
a1:07:0e:bc:6e:d3:7f:79:e5:0f:27:5d:04:d1:2d:dc:81:87:
be:c0:11:56:b9:8b:0e:21:76:00:84:91:f0:eb:11:d5:fb:6d:
e6:c3:f4:f2:35:c9:3c:b1:c1:8f:5b:ad:e9:b7:8c:b6:9f:e8:
f1:0e:2d:83:74:03:03:99:c7:1e:9c:35:ee:bd:43:88:b4:16:
d1:b9:73:55:60:39:86:60:1f:95:a2:7e:d7:1f:e2:47:4a:33:
e4:6c:15:0d:6c:a6:84:b6:f7:aa:56:c7:07:9b:a9:b4:e5:da:
ec:8e:75:38:3b:2e:7a:22:a0:94:59:8e:97:bf:21:d7:c6:aa:
d5:2f:8a:3c:20:c0:04:f1:58:80:5b:38:ea:c7:70:4b:26:16:
04:db:e5:62:62:3e:dd:0e:3d:66:13:20:a9:44:fe:64:50:91:
a7:74:2f:36:14:13:97:da:ca:47:33:85:62:ef:6e:6b:45:c9:
15:3c:b3:c5:e8:d9:45:6a:ac:5a:ed:af:1c:b9:9c:09:88:59:
6d:88:11:e5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwlQbGgk+p62zFyM3H+ZVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2
NDEzMzMwHhcNMjMwMTAyMDM0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzgwODBhMWU0ZjljYzE5YWJkNDViM2U4NmZjYTkzM2VjZTRmZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5bj/nAEFreU3DWYgnSyGj+4iF3
gOmZ13CLVxvfJcY3Rey2PEHkhkHOI50aMRiguzL5pingl0c5sG9pX338lwD98OLn
8DP6L218nbfSGRhtg+xDfhZthjq6gf4+ZQ8/0ritLfQ6IzHuMg+ThWAhxJV/fHRs
u2Ggw9RIvCrfUnJZwf4no487IWzUuhZ5HBXOBIqYSk+KXO504uW+a9xSitG1O73I
mtidZ9dy3c9H9ezOaAcAzXv1y4/WTgmykqT+Nt5blPInT/+88d8NJ1IWUYdxaSZU
G9qoaObP3x8x/5fA0GJ9Qguhu8/Q0ti8qH0FAbwxOK8PDG0O7fpghdU1YQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKeAgKHk+cwZq9RbPob8qTPs5P23MB8GA1UdIwQY
MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt
NDg5NGY4OGJlZGRjLzEvcDRDQW9lVDV6Qm1yMUZzLWh2eXBNLXprX2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj
LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRn0MA0E
AgACMAcDBQAqAIQgMA0GCSqGSIb3DQEBCwUAA4IBAQB0icIATxZ9gFHoVr8Uw/9G
8r8Lfa7vjJxlr0XQHgMD8wdlSdH18Do2L1XVy6vX/JZvY8mpHrChBw68btN/eeUP
J10E0S3cgYe+wBFWuYsOIXYAhJHw6xHV+23mw/TyNck8scGPW63pt4y2n+jxDi2D
dAMDmccenDXuvUOItBbRuXNVYDmGYB+Von7XH+JHSjPkbBUNbKaEtveqVscHm6m0
5drsjnU4Oy56IqCUWY6XvyHXxqrVL4o8IMAE8ViAWzjqx3BLJhYE2+ViYj7dDj1m
EyCpRP5kUJGndC82FBOX2spHM4Vi725rRckVPLPF6NlFaqxa7a8cuZwJiFltiBHl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org