Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/I2H_vV6HxoyVlg0iMembIEv2Fzc.roa
File: I2H_vV6HxoyVlg0iMembIEv2Fzc.roa (raw, json)
Hash identifier: g90jNrZl1sD1GPaKBuQ/d5PFauFHLEljwcVO2GGOZV4=
Subject key identifier: 23:61:FF:BD:5E:87:C6:8C:95:96:0D:22:31:E9:9B:20:4B:F6:17:37
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0185714C4BBED78FF1CA869A7AE7597EACDA
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/I2H_vV6HxoyVlg0iMembIEv2Fzc.roa
Signing time: Mon 02 Jan 2023 07:05:03 +0000
ROA not before: Mon 02 Jan 2023 07:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 185.72.140.0/24 maxlen: 24
185.72.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:4b:be:d7:8f:f1:ca:86:9a:7a:e7:59:7e:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jan 2 07:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2361ffbd5e87c68c95960d2231e99b204bf61737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:6c:45:10:d7:bd:64:0f:36:93:da:7e:ed:
81:8c:c7:9b:c5:75:d7:63:da:90:ca:02:f9:80:cd:
6c:e3:73:7f:27:ed:82:ce:2e:99:2e:b0:d9:cc:02:
3b:b4:f7:11:01:fd:f3:7f:de:70:fe:e8:44:1d:34:
ff:43:c1:51:35:69:50:b3:be:21:cd:36:24:ea:b9:
90:ee:31:af:36:ec:37:7b:b2:fc:8e:69:99:57:80:
4d:37:e4:c1:bd:6e:9b:70:d3:14:50:dd:07:ea:90:
2a:5f:c1:41:d9:e2:5b:72:0c:94:68:50:68:ee:47:
2d:25:dc:3c:e4:a0:10:7d:1b:9b:4a:4c:57:9d:d7:
9c:c8:a4:12:88:1c:29:2c:6d:90:e8:63:d3:ea:c4:
7d:ad:24:a9:2a:9b:44:43:42:1b:59:9f:de:60:ca:
a7:d6:fc:06:dd:5e:b7:55:c4:72:57:87:18:a2:8d:
8a:a0:7f:fc:be:45:86:0a:ec:9f:aa:3e:03:97:be:
f1:57:b9:0b:ad:b2:f8:37:41:40:22:a9:2e:04:29:
e0:02:9d:74:c7:21:a0:d8:c7:23:8f:25:1e:e7:83:
f7:29:2b:ce:09:23:bd:3b:57:56:8d:c4:12:85:fc:
28:e6:ad:8c:e8:d0:38:7e:9c:cb:5f:65:a6:a4:fd:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:FF:BD:5E:87:C6:8C:95:96:0D:22:31:E9:9B:20:4B:F6:17:37
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/I2H_vV6HxoyVlg0iMembIEv2Fzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:37:c5:14:ad:af:4a:d2:2f:e2:6a:91:a9:42:5f:59:8d:19:
1f:8a:dd:a8:6b:da:c9:ef:07:42:48:94:ea:48:8d:26:b3:24:
e6:08:84:b9:37:88:b7:ac:82:21:5f:5e:46:9e:6d:10:c6:8d:
48:88:76:75:9a:be:77:6a:96:fa:65:d2:49:05:86:44:5c:e4:
c4:39:11:c3:a0:af:e1:11:fa:1c:14:1c:c6:4a:b0:29:7b:1d:
c3:4d:63:f1:85:02:1e:65:6e:f6:e9:83:cf:92:da:5b:a6:e0:
04:d9:cb:fc:50:06:04:f7:2d:f5:cd:a1:89:43:e6:77:26:fc:
67:79:67:98:55:5f:f6:55:f1:1f:a5:b2:c4:55:2c:6b:c3:64:
13:a7:e3:de:72:49:03:94:31:c8:de:e9:42:78:12:d7:09:32:
e9:79:75:6d:f4:b5:3a:db:37:8b:0a:1b:f1:f9:20:7d:14:5e:
4e:99:69:43:d9:66:fb:e9:6d:f0:fe:07:f1:21:d5:ad:3b:7e:
a7:6d:7d:d8:08:20:89:23:a1:90:b7:6f:78:e8:88:36:1f:13:
2a:e3:6d:f7:a3:91:1a:9a:0a:c3:20:c5:49:6a:34:22:7e:c7:
61:ba:16:7c:a5:82:8a:a7:a2:f1:99:8d:38:91:a1:25:ff:b2:
3a:46:4b:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTEu+14/xyoaaeudZfqzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjMwMTAyMDcwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzYxZmZiZDVlODdjNjhjOTU5NjBkMjIzMWU5OWIyMDRiZjYxNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi45sRRDXvWQPNpPafu2BjMebxXXX
Y9qQygL5gM1s43N/J+2Czi6ZLrDZzAI7tPcRAf3zf95w/uhEHTT/Q8FRNWlQs74h
zTYk6rmQ7jGvNuw3e7L8jmmZV4BNN+TBvW6bcNMUUN0H6pAqX8FB2eJbcgyUaFBo
7kctJdw85KAQfRubSkxXndecyKQSiBwpLG2Q6GPT6sR9rSSpKptEQ0IbWZ/eYMqn
1vwG3V63VcRyV4cYoo2KoH/8vkWGCuyfqj4Dl77xV7kLrbL4N0FAIqkuBCngAp10
xyGg2McjjyUe54P3KSvOCSO9O1dWjcQShfwo5q2M6NA4fpzLX2WmpP2DzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNh/71eh8aMlZYNIjHpmyBL9hc3MB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvSTJIX3ZWNkh4b3lWbGcwaU1lbWJJRXYyRnpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUiMMA0G
CSqGSIb3DQEBCwUAA4IBAQALN8UUra9K0i/iapGpQl9ZjRkfit2oa9rJ7wdCSJTq
SI0msyTmCIS5N4i3rIIhX15Gnm0Qxo1IiHZ1mr53apb6ZdJJBYZEXOTEORHDoK/h
EfocFBzGSrApex3DTWPxhQIeZW726YPPktpbpuAE2cv8UAYE9y31zaGJQ+Z3Jvxn
eWeYVV/2VfEfpbLEVSxrw2QTp+PeckkDlDHI3ulCeBLXCTLpeXVt9LU62zeLChvx
+SB9FF5OmWlD2Wb76W3w/gfxIdWtO36nbX3YCCCJI6GQt2946Ig2HxMq4233o5Ea
mgrDIMVJajQifsdhuhZ8pYKKp6LxmY04kaEl/7I6RkuB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:24 2024 by rpki-client on console-fra.rpki-client.org