Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/4Rll_FBjGrgCkoTAk8zLcSuq3s8.roa
File: 4Rll_FBjGrgCkoTAk8zLcSuq3s8.roa (raw, json)
Hash identifier: P3+WylkFIYTMMVlEKPZf1swIQqgs4/S+5jv/OXzhFn4=
Subject key identifier: E1:19:65:FC:50:63:1A:B8:02:92:84:C0:93:CC:CB:71:2B:AA:DE:CF
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 018571D7B21F8BB32D05234350EA862C3E41
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/4Rll_FBjGrgCkoTAk8zLcSuq3s8.roa
Signing time: Mon 02 Jan 2023 09:37:19 +0000
ROA not before: Mon 02 Jan 2023 09:37:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28883
IP address blocks: 185.251.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:b2:1f:8b:b3:2d:05:23:43:50:ea:86:2c:3e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jan 2 09:37:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e11965fc50631ab8029284c093cccb712baadecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:b3:7d:2a:b6:fd:80:60:1c:ea:2e:f8:a4:
43:29:08:0d:e5:a5:b9:5d:87:f1:a3:e7:83:5c:05:
e6:ac:0f:71:29:04:29:ab:2d:31:ac:d3:d2:64:fc:
72:98:2d:1c:c2:28:53:a1:87:14:05:85:c1:cd:94:
8e:27:df:83:86:5c:ca:74:67:39:ce:98:39:e6:91:
9f:a4:0d:36:c4:96:8f:73:d9:d3:8c:5f:31:0c:67:
cd:6e:46:47:60:87:37:2f:f4:86:32:89:36:35:b7:
81:eb:9a:8c:e1:2e:d7:cd:dd:41:af:48:56:f3:39:
13:13:57:c4:12:b5:77:99:80:63:eb:08:0b:3d:b7:
83:33:b7:27:84:6b:fa:8d:6e:f2:ac:78:15:c5:ba:
15:cf:4d:a0:5b:0b:0e:26:19:7c:5c:97:07:9e:a5:
cc:f0:d8:97:4b:fc:08:fc:42:de:ec:db:65:23:a2:
3f:bf:fb:67:68:ae:c2:0b:ad:c0:f9:a5:c7:90:1e:
15:bb:60:e2:a1:cd:85:f9:30:f4:b0:38:ed:d8:b8:
dd:25:43:5f:81:88:8f:94:f0:19:66:6c:6d:c0:85:
30:0f:15:5a:ae:db:38:c1:92:0a:e0:fa:fb:3d:9e:
4c:ae:c0:38:e9:59:ab:c4:a8:23:c1:e7:5f:d4:00:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:65:FC:50:63:1A:B8:02:92:84:C0:93:CC:CB:71:2B:AA:DE:CF
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/4Rll_FBjGrgCkoTAk8zLcSuq3s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.48.0/22
Signature Algorithm: sha256WithRSAEncryption
87:59:70:4c:87:cb:5e:4c:5d:a8:ac:00:ef:bf:aa:67:fe:f7:
4d:ec:b8:f7:99:6a:f5:0f:b2:e6:33:6f:65:21:e9:97:ac:e4:
ca:a3:24:93:e2:64:b6:ef:e4:bb:0c:b9:83:9e:61:bd:2e:f2:
2b:17:b1:cc:38:86:6d:96:17:9b:e8:48:2c:23:6e:c3:cb:f2:
64:c9:92:d3:fb:16:6b:ab:c7:17:60:b0:cd:e6:df:b6:7e:f0:
c5:bd:31:df:f5:2e:0f:90:f5:f3:69:b8:ed:5b:49:8a:c2:b9:
d6:14:61:66:89:68:66:a5:4c:4f:02:18:da:8a:6a:00:cf:8f:
d5:df:da:6f:7b:bc:08:36:38:22:d1:18:dd:97:f3:2d:68:63:
c3:a3:f3:25:86:bf:98:70:39:b1:1b:c8:5c:e4:67:3d:0e:96:
46:6e:9a:7b:e6:08:f2:fd:c1:84:7c:aa:46:6f:e8:ee:a0:ec:
9c:51:5a:ad:6d:e4:6a:ea:2c:45:c2:82:39:08:57:0f:2f:dd:
a6:be:53:82:39:71:1f:bd:b5:08:dd:22:47:8a:3d:b0:2f:46:
ec:53:e6:73:4b:c9:aa:d9:e6:ba:e3:f4:35:35:00:97:69:50:
fe:f2:65:1c:eb:55:4c:ba:72:d0:26:6f:c3:cc:b8:c0:26:3e:
2d:87:d2:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx17Ifi7MtBSNDUOqGLD5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjMwMTAyMDkzNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTE5NjVmYzUwNjMxYWI4MDI5Mjg0YzA5M2NjY2I3MTJiYWFkZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKzfSq2/YBgHOou+KRDKQgN5aW5
XYfxo+eDXAXmrA9xKQQpqy0xrNPSZPxymC0cwihToYcUBYXBzZSOJ9+DhlzKdGc5
zpg55pGfpA02xJaPc9nTjF8xDGfNbkZHYIc3L/SGMok2NbeB65qM4S7Xzd1Br0hW
8zkTE1fEErV3mYBj6wgLPbeDM7cnhGv6jW7yrHgVxboVz02gWwsOJhl8XJcHnqXM
8NiXS/wI/ELe7NtlI6I/v/tnaK7CC63A+aXHkB4Vu2Dioc2F+TD0sDjt2LjdJUNf
gYiPlPAZZmxtwIUwDxVarts4wZIK4Pr7PZ5MrsA46VmrxKgjwedf1AAFtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEZZfxQYxq4ApKEwJPMy3Erqt7PMB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvNFJsbF9GQmpHcmdDa29UQWs4ekxjU3VxM3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufswMA0G
CSqGSIb3DQEBCwUAA4IBAQCHWXBMh8teTF2orADvv6pn/vdN7Lj3mWr1D7LmM29l
IemXrOTKoyST4mS27+S7DLmDnmG9LvIrF7HMOIZtlheb6EgsI27Dy/JkyZLT+xZr
q8cXYLDN5t+2fvDFvTHf9S4PkPXzabjtW0mKwrnWFGFmiWhmpUxPAhjaimoAz4/V
39pve7wINjgi0Rjdl/MtaGPDo/Mlhr+YcDmxG8hc5Gc9DpZGbpp75gjy/cGEfKpG
b+juoOycUVqtbeRq6ixFwoI5CFcPL92mvlOCOXEfvbUI3SJHij2wL0bsU+ZzS8mq
2ea64/Q1NQCXaVD+8mUc61VMunLQJm/DzLjAJj4th9Jr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:45 2024 by rpki-client on console-ams.rpki-client.org