Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/H4_4ELaDbGOC7qntb344Req0J_k.roa
File: H4_4ELaDbGOC7qntb344Req0J_k.roa (raw, json)
Hash identifier: Qr5Tz/214wJABH2Z4NgPBE4BBbYLS3ywH0FAMoFBV0k=
Subject key identifier: 1F:8F:F8:10:B6:83:6C:63:82:EE:A9:ED:6F:7E:38:45:EA:B4:27:F9
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01856CB86B5729E73D238EF1055A3975BADE
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/H4_4ELaDbGOC7qntb344Req0J_k.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16188
IP address blocks: 185.178.116.0/22 maxlen: 22
217.29.32.0/20 maxlen: 20
2a00:b580::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6b:57:29:e7:3d:23:8e:f1:05:5a:39:75:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f8ff810b6836c6382eea9ed6f7e3845eab427f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:53:52:33:3a:50:be:a7:3a:51:ef:0c:4e:
5e:0d:e7:c5:41:41:e5:15:10:0c:c7:88:2b:e9:c7:
69:8f:dd:6d:48:cf:e2:df:cb:15:77:a9:17:0a:fa:
ec:b5:ab:e5:6c:5b:8e:7c:fa:2a:73:33:7d:6c:12:
df:ae:95:27:2f:88:3f:cf:bb:2b:b0:45:88:d3:0a:
9e:ad:fa:b2:08:8c:94:9d:ee:4c:23:9c:48:cb:24:
dd:3b:2c:c0:cb:de:3e:59:8e:5a:c6:84:cb:8e:cf:
90:8f:08:28:76:73:a4:29:13:86:4e:23:e1:33:48:
6b:57:66:aa:c2:d9:dc:e4:3d:5b:c3:da:2e:c2:1e:
b3:98:dd:66:4d:f8:00:49:d2:af:05:54:7c:f4:21:
75:98:06:c5:d7:0c:a7:80:a0:bd:00:aa:d4:05:2c:
1d:4c:cc:db:53:d6:65:cb:80:a6:59:71:81:80:13:
be:a6:ba:14:9e:48:27:1c:63:1f:89:1b:7d:7f:40:
e8:a5:e7:cf:c9:09:64:2d:e2:d0:5d:b6:d6:3b:52:
41:ba:64:16:bf:3e:6f:df:4e:5d:e1:54:a9:9a:15:
3c:1a:e2:c6:bd:c8:0f:b2:a3:c4:8d:28:6a:3b:9c:
37:77:59:dc:5a:67:34:cb:ff:3c:e1:78:fc:3f:b7:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:F8:10:B6:83:6C:63:82:EE:A9:ED:6F:7E:38:45:EA:B4:27:F9
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/H4_4ELaDbGOC7qntb344Req0J_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.116.0/22
217.29.32.0/20
IPv6:
2a00:b580::/32
Signature Algorithm: sha256WithRSAEncryption
54:a0:72:3a:85:fa:db:6d:18:24:7b:fa:13:7e:e0:98:56:77:
47:c9:4c:ef:26:f8:52:68:31:4f:2c:8f:f3:20:37:ad:e7:7c:
74:46:24:bf:b1:46:2b:c7:db:66:28:ce:4b:d1:da:1b:82:68:
5a:fd:5f:db:c8:39:06:95:4a:53:c6:f0:ca:66:a1:1b:bd:5b:
61:4c:78:88:3e:e7:aa:b0:e5:d0:4b:ad:03:db:08:6e:24:10:
3b:89:84:50:6e:a6:1a:d7:8e:53:c4:af:a6:d1:73:5b:fe:80:
a2:42:a7:4d:ff:fd:4d:21:3a:3e:7b:23:dd:6e:70:f8:f6:44:
bf:2d:74:5e:6d:73:3b:da:37:29:4f:54:0f:c2:6d:5c:20:40:
64:a3:be:06:cd:5a:a2:c7:0b:ac:3b:e2:79:e6:d4:ac:ae:3d:
4a:b0:93:a4:d5:a8:e7:ce:58:bb:86:61:78:5d:4b:4a:0e:5a:
42:5b:04:69:db:ae:5d:32:c2:7e:1b:9e:17:31:75:80:1c:c9:
f9:a7:67:4a:fb:2a:8f:bb:2b:dd:a0:6c:2a:86:39:82:c1:a1:
eb:6f:3a:d0:d7:de:e3:fc:2c:7a:59:19:de:0f:6b:0e:40:59:
68:de:15:f4:14:0d:ea:b1:12:14:a5:be:93:27:ee:89:ce:52:
6b:28:c1:15
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsuGtXKec9I47xBVo5dbreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3
YzEwOTgwHhcNMjMwMTAxMDk0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjhmZjgxMGI2ODM2YzYzODJlZWE5ZWQ2ZjdlMzg0NWVhYjQyN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNlTUjM6UL6nOlHvDE5eDefFQUHl
FRAMx4gr6cdpj91tSM/i38sVd6kXCvrstavlbFuOfPoqczN9bBLfrpUnL4g/z7sr
sEWI0wqerfqyCIyUne5MI5xIyyTdOyzAy94+WY5axoTLjs+QjwgodnOkKROGTiPh
M0hrV2aqwtnc5D1bw9ouwh6zmN1mTfgASdKvBVR89CF1mAbF1wyngKC9AKrUBSwd
TMzbU9Zly4CmWXGBgBO+proUnkgnHGMfiRt9f0DopefPyQlkLeLQXbbWO1JBumQW
vz5v305d4VSpmhU8GuLGvcgPsqPEjShqO5w3d1ncWmc0y/884Xj8P7dQMwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB+P+BC2g2xjgu6p7W9+OEXqtCf5MB8GA1UdIwQY
MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt
OTgyY2NlODY4ZmZhLzEvSDRfNEVMYURiR09DN3FudGIzNDRSZXEwSl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh
LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubJ0AwQE
2R0gMA0EAgACMAcDBQAqALWAMA0GCSqGSIb3DQEBCwUAA4IBAQBUoHI6hfrbbRgk
e/oTfuCYVndHyUzvJvhSaDFPLI/zIDet53x0RiS/sUYrx9tmKM5L0dobgmha/V/b
yDkGlUpTxvDKZqEbvVthTHiIPueqsOXQS60D2whuJBA7iYRQbqYa145TxK+m0XNb
/oCiQqdN//1NITo+eyPdbnD49kS/LXRebXM72jcpT1QPwm1cIEBko74GzVqixwus
O+J55tSsrj1KsJOk1ajnzli7hmF4XUtKDlpCWwRp265dMsJ+G54XMXWAHMn5p2dK
+yqPuyvdoGwqhjmCwaHrbzrQ197j/Cx6WRneD2sOQFlo3hX0FA3qsRIUpb6TJ+6J
zlJrKMEV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:02 2024 by rpki-client on console-ams.rpki-client.org