Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/sVkev3iaAqZG6eyrQ_QTEY1qzvg.roa
File: sVkev3iaAqZG6eyrQ_QTEY1qzvg.roa (raw, json)
Hash identifier: rzDIocME5vuUeLWSf/iJxoDc7F8FY8nBnmRZ/OWSIo0=
Subject key identifier: B1:59:1E:BF:78:9A:02:A6:46:E9:EC:AB:43:F4:13:11:8D:6A:CE:F8
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 01856FA6FE771C4EEC27BD9D925BC1AFBA15
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/sVkev3iaAqZG6eyrQ_QTEY1qzvg.roa
Signing time: Sun 01 Jan 2023 23:24:53 +0000
ROA not before: Sun 01 Jan 2023 23:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56087
IP address blocks: 185.156.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jan 2023 21:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fe:77:1c:4e:ec:27:bd:9d:92:5b:c1:af:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Jan 1 23:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1591ebf789a02a646e9ecab43f413118d6acef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:73:78:85:86:d3:7a:01:2c:5e:eb:3a:e4:
70:5f:0b:d2:c9:58:f5:15:49:fe:df:11:e1:3f:cb:
f8:7b:4b:4a:0a:73:2d:bf:be:c0:37:5e:b9:c9:2c:
06:b8:52:b0:1e:d5:6d:a8:3e:fa:cb:41:f3:63:37:
33:63:a1:02:82:ad:4e:59:97:34:1b:94:ce:d6:69:
07:1b:55:1d:9a:34:da:9d:db:e9:11:39:12:88:ff:
c7:e6:38:fb:31:32:5c:a3:88:f4:72:8d:01:a0:d4:
d7:49:1e:9a:5d:ce:08:9c:91:d3:33:fa:ff:0f:b8:
fa:e0:08:ca:01:97:5a:5f:82:dc:1e:eb:89:0b:75:
b4:d2:e8:71:fa:e5:36:30:77:95:21:cb:25:3c:3e:
27:b6:5d:86:91:ea:31:b0:28:36:41:ba:d1:1a:ce:
c5:98:9e:3a:8c:13:fc:ac:46:aa:f7:70:70:39:d8:
78:64:96:02:7d:be:d6:f0:d0:0f:68:e5:55:88:d1:
b2:17:03:08:61:7c:f8:9c:c4:9f:df:36:77:07:c9:
a8:95:ee:c9:65:5a:97:79:64:9f:4f:82:b3:4f:1c:
1f:f3:5c:39:e0:7f:a7:9b:f8:4f:f3:a9:81:2a:4d:
f9:19:65:97:75:89:87:46:17:c6:b2:a7:04:c7:e6:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:1E:BF:78:9A:02:A6:46:E9:EC:AB:43:F4:13:11:8D:6A:CE:F8
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/sVkev3iaAqZG6eyrQ_QTEY1qzvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.170.0/23
Signature Algorithm: sha256WithRSAEncryption
19:36:b2:fa:8d:c0:d2:76:c8:d1:b8:f4:b5:1b:6c:dd:5e:3a:
d1:bb:a7:b6:cb:e5:b2:c4:6c:40:e6:8d:18:9e:4a:56:2b:15:
f6:a7:1a:58:b1:6e:d4:98:9d:1f:cb:f7:b5:16:4e:0d:76:e0:
ef:ce:03:d9:b4:c6:6f:34:b6:3e:90:22:fd:24:30:6b:61:c3:
df:4b:08:b7:c1:c9:44:38:b8:96:35:2b:0a:b5:94:ff:8c:5d:
3c:af:5e:ff:99:f2:85:1e:ab:fd:25:4c:3a:e7:25:4d:15:df:
0f:6c:c5:b9:7e:46:b4:32:41:10:36:fa:49:6d:65:38:8f:2e:
b5:8a:6d:d8:01:9c:93:5d:c1:ad:20:83:4f:e4:39:8e:0c:1b:
a9:b7:bf:bd:30:ec:3d:ed:72:39:95:b1:23:04:30:03:e8:01:
66:b4:ea:db:4c:ac:7e:fb:ac:81:00:43:ae:7c:45:9b:cf:ae:
4d:a3:1f:32:04:8b:51:da:e4:52:fa:44:25:cd:f0:10:7d:a5:
c7:0b:ce:e2:16:c6:46:9d:db:3f:a4:ec:33:56:fb:ac:6f:b6:
fd:79:43:ea:ad:a5:ef:ca:b3:6c:72:18:5a:c9:6f:ff:e1:1d:
a2:74:4f:d0:3e:47:b9:92:9b:9d:7c:39:6e:99:84:af:c8:23:
a1:43:64:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpv53HE7sJ72dklvBr7oVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNTJkZGEyNzIyNmEyNzVlM2U3OWIzNzRjOGYyNjNjZDJk
OGVjZDEwHhcNMjMwMTAxMjMyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTU5MWViZjc4OWEwMmE2NDZlOWVjYWI0M2Y0MTMxMThkNmFjZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj9zeIWG03oBLF7rOuRwXwvSyVj1
FUn+3xHhP8v4e0tKCnMtv77AN165ySwGuFKwHtVtqD76y0HzYzczY6ECgq1OWZc0
G5TO1mkHG1UdmjTandvpETkSiP/H5jj7MTJco4j0co0BoNTXSR6aXc4InJHTM/r/
D7j64AjKAZdaX4LcHuuJC3W00uhx+uU2MHeVIcslPD4ntl2GkeoxsCg2QbrRGs7F
mJ46jBP8rEaq93BwOdh4ZJYCfb7W8NAPaOVViNGyFwMIYXz4nMSf3zZ3B8mole7J
ZVqXeWSfT4KzTxwf81w54H+nm/hP86mBKk35GWWXdYmHRhfGsqcEx+apjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFZHr94mgKmRunsq0P0ExGNas74MB8GA1UdIwQY
MBaAFLJS3aJyJqJ14+ebN0yPJjzS2OzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMt
YTE3Nzk5MDRiMWM1LzEvc1ZrZXYzaWFBcVpHNmV5clFfUVRFWTFxenZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMtYTE3Nzk5MDRiMWM1
LzEvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZyqMA0G
CSqGSIb3DQEBCwUAA4IBAQAZNrL6jcDSdsjRuPS1G2zdXjrRu6e2y+WyxGxA5o0Y
nkpWKxX2pxpYsW7UmJ0fy/e1Fk4NduDvzgPZtMZvNLY+kCL9JDBrYcPfSwi3wclE
OLiWNSsKtZT/jF08r17/mfKFHqv9JUw65yVNFd8PbMW5fka0MkEQNvpJbWU4jy61
im3YAZyTXcGtIINP5DmODBupt7+9MOw97XI5lbEjBDAD6AFmtOrbTKx++6yBAEOu
fEWbz65Nox8yBItR2uRS+kQlzfAQfaXHC87iFsZGnds/pOwzVvusb7b9eUPqraXv
yrNschhayW//4R2idE/QPke5kpudfDlumYSvyCOhQ2TV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:57 2024 by rpki-client on console-ams.rpki-client.org