Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/DSUWeaIfTTWYSkmlHsYb84lWd78.roa
File: DSUWeaIfTTWYSkmlHsYb84lWd78.roa (raw, json)
Hash identifier: KXC53C36SrGlJNuX6xjWB83QrIBuMYXiqAqa4RPSv1s=
Subject key identifier: 0D:25:16:79:A2:1F:4D:35:98:4A:49:A5:1E:C6:1B:F3:89:56:77:BF
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: 018572A7F4AE65939ED576C2F4124B46F24E
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/DSUWeaIfTTWYSkmlHsYb84lWd78.roa
Signing time: Mon 02 Jan 2023 13:24:47 +0000
ROA not before: Mon 02 Jan 2023 13:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43824
IP address blocks: 185.111.162.0/24 maxlen: 24
185.111.161.0/24 maxlen: 24
185.111.160.0/24 maxlen: 24
185.111.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f4:ae:65:93:9e:d5:76:c2:f4:12:4b:46:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Jan 2 13:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d251679a21f4d35984a49a51ec61bf3895677bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:57:21:cb:cc:f2:99:17:64:3a:6d:02:fd:
f9:4b:46:45:c2:f8:af:52:c5:10:b9:3c:1f:11:9e:
9c:09:c9:39:15:09:d4:df:6e:ba:fa:09:53:2f:6c:
8f:27:53:c2:1a:aa:07:c4:54:90:1c:be:57:df:64:
e3:70:98:75:16:18:d1:24:c5:2e:fa:59:d3:5f:bd:
9e:f2:83:99:92:a8:56:63:4d:66:4a:a7:cc:37:52:
3f:0d:3e:3a:be:02:82:1c:60:af:36:a9:c4:85:c6:
8f:5e:f4:bc:ed:29:8e:54:42:e2:40:73:d4:2e:19:
56:68:cd:88:80:aa:db:8e:50:34:86:ce:8b:15:a7:
b4:bf:88:e9:5c:c2:01:e2:98:1f:d7:0c:f2:b0:0b:
c3:fc:96:27:46:cd:c8:d9:a0:b7:8b:48:b8:0e:d3:
27:cd:0d:e7:a5:22:f6:17:9d:97:b1:21:9b:cc:e5:
2a:d4:d6:3c:80:3b:08:46:1c:b2:a7:db:dd:50:7e:
3f:70:aa:14:3d:2c:0e:ad:e4:ea:c8:4b:e8:27:23:
0c:0e:3f:9b:a1:bd:64:93:81:94:35:cf:ee:cd:36:
36:89:09:bd:a4:b5:82:ac:73:3c:c6:ac:94:8d:67:
0c:49:03:d0:8d:7f:a0:84:a6:6d:b0:12:9e:22:95:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:16:79:A2:1F:4D:35:98:4A:49:A5:1E:C6:1B:F3:89:56:77:BF
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/DSUWeaIfTTWYSkmlHsYb84lWd78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.160.0/22
Signature Algorithm: sha256WithRSAEncryption
22:c3:f4:51:91:58:91:72:32:2d:28:e9:fb:5b:07:42:23:6f:
6e:45:24:8b:93:4b:5f:17:f8:89:ff:ea:38:66:6a:ee:09:02:
b2:66:77:93:b5:32:9e:fa:35:6f:78:5d:ac:34:1c:ce:6d:43:
0b:d9:dd:1d:17:d7:f1:a8:01:66:79:47:1c:8e:da:17:e7:d1:
4d:6b:81:a3:7e:3e:52:02:c9:7b:ff:4f:50:bc:66:46:bb:dd:
dc:2c:96:9c:96:6b:46:c7:a3:ff:ec:9e:35:52:d3:17:b0:ef:
67:2f:3a:ab:bd:75:0d:9a:8f:b1:41:31:29:98:c9:9f:fe:bb:
b5:73:30:6f:93:98:2a:91:fb:c4:28:59:84:a6:fc:23:04:fc:
46:86:a4:05:6b:97:1d:5e:c8:ff:19:15:d4:a7:da:86:47:7b:
12:24:d1:ad:f9:e9:a2:b3:ad:4c:be:63:c3:3b:c2:ff:81:c1:
9d:53:55:b7:1a:a6:32:a9:2d:a0:96:2f:26:cb:24:41:9e:5f:
a1:aa:94:6f:9a:e0:bf:8c:b3:4e:d1:9d:b6:dc:9f:21:a8:2c:
35:0d:b9:ad:92:ef:56:4a:94:7f:89:34:4c:5c:f5:3f:2c:cb:
99:c2:e5:1a:1d:03:6d:db:61:12:72:80:f1:86:c9:5a:4c:42:
3b:23:e5:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyp/SuZZOe1XbC9BJLRvJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl
YTAyZDAwHhcNMjMwMTAyMTMyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDI1MTY3OWEyMWY0ZDM1OTg0YTQ5YTUxZWM2MWJmMzg5NTY3N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0tXIcvM8pkXZDptAv35S0ZFwviv
UsUQuTwfEZ6cCck5FQnU3266+glTL2yPJ1PCGqoHxFSQHL5X32TjcJh1FhjRJMUu
+lnTX72e8oOZkqhWY01mSqfMN1I/DT46vgKCHGCvNqnEhcaPXvS87SmOVELiQHPU
LhlWaM2IgKrbjlA0hs6LFae0v4jpXMIB4pgf1wzysAvD/JYnRs3I2aC3i0i4DtMn
zQ3npSL2F52XsSGbzOUq1NY8gDsIRhyyp9vdUH4/cKoUPSwOreTqyEvoJyMMDj+b
ob1kk4GUNc/uzTY2iQm9pLWCrHM8xqyUjWcMSQPQjX+ghKZtsBKeIpWAMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0lFnmiH001mEpJpR7GG/OJVne/MB8GA1UdIwQY
MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt
ZjIxMzYzMDcxNTkxLzEvRFNVV2VhSWZUVFdZU2ttbEhzWWI4NGxXZDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx
LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW+gMA0G
CSqGSIb3DQEBCwUAA4IBAQAiw/RRkViRcjItKOn7WwdCI29uRSSLk0tfF/iJ/+o4
ZmruCQKyZneTtTKe+jVveF2sNBzObUML2d0dF9fxqAFmeUccjtoX59FNa4Gjfj5S
Asl7/09QvGZGu93cLJaclmtGx6P/7J41UtMXsO9nLzqrvXUNmo+xQTEpmMmf/ru1
czBvk5gqkfvEKFmEpvwjBPxGhqQFa5cdXsj/GRXUp9qGR3sSJNGt+emis61MvmPD
O8L/gcGdU1W3GqYyqS2gli8myyRBnl+hqpRvmuC/jLNO0Z223J8hqCw1Dbmtku9W
SpR/iTRMXPU/LMuZwuUaHQNt22EScoDxhslaTEI7I+UI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-fra.rpki-client.org