Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/dOg9jABOK7fm8uC43vZIl-5mtkU.roa
File: dOg9jABOK7fm8uC43vZIl-5mtkU.roa (raw, json)
Hash identifier: Iichpp8E5MFg6eraBS12F98gjThO+6/9jyDDlMO6bOw=
Subject key identifier: 74:E8:3D:8C:00:4E:2B:B7:E6:F2:E0:B8:DE:F6:48:97:EE:66:B6:45
Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial: 01856CC1614EE75A9BB5BB6078FC11387836
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/dOg9jABOK7fm8uC43vZIl-5mtkU.roa
Signing time: Sun 01 Jan 2023 09:54:50 +0000
ROA not before: Sun 01 Jan 2023 09:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51355
IP address blocks: 185.88.252.0/23 maxlen: 23
185.88.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:61:4e:e7:5a:9b:b5:bb:60:78:fc:11:38:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
Validity
Not Before: Jan 1 09:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e83d8c004e2bb7e6f2e0b8def64897ee66b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:28:92:fe:93:b5:d7:a1:1a:fd:61:c7:2c:
f3:4d:0e:d2:65:b2:f7:f8:d6:90:51:c5:86:dc:21:
3e:05:2e:fa:19:ad:72:19:f0:e5:8a:e6:30:97:b4:
57:cb:91:3a:fb:c3:cb:78:80:fb:78:c5:a4:79:80:
2d:93:c8:97:31:0a:64:c6:af:15:02:51:de:57:0e:
2a:a4:77:01:26:b0:98:82:94:ad:86:90:c1:6d:31:
cb:a7:17:a8:7c:c3:7b:d1:f4:ff:d2:09:b1:a9:6f:
11:00:b6:82:c9:e4:79:4b:4d:4b:01:4d:af:d0:f3:
37:6a:00:f6:a9:2f:43:b4:90:53:a8:6b:4d:b4:fa:
2c:dd:b5:c3:da:5c:41:c7:b0:24:f1:9d:9f:68:92:
88:4e:88:3e:50:e0:54:78:9b:0c:a2:c0:84:93:5f:
61:7e:9b:7c:03:5b:be:78:dc:c8:1a:29:05:14:7e:
9f:20:df:41:aa:20:ae:2b:0a:a2:4e:8b:b2:33:b7:
8a:ba:92:4c:3f:12:dc:e7:51:cd:c9:8a:b7:3d:82:
ac:31:2c:da:dd:2b:71:d9:4f:86:91:c2:9c:ef:65:
cf:0e:c8:26:7b:cb:95:89:74:89:9d:e4:91:da:f6:
52:0a:ef:e1:da:67:3d:05:15:82:b3:c5:0a:49:0d:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:3D:8C:00:4E:2B:B7:E6:F2:E0:B8:DE:F6:48:97:EE:66:B6:45
X509v3 Authority Key Identifier:
keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/dOg9jABOK7fm8uC43vZIl-5mtkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.252.0/22
Signature Algorithm: sha256WithRSAEncryption
89:bf:d0:00:84:b0:e6:8b:c2:ff:c9:2c:18:a8:40:67:c7:f4:
6a:c6:fc:b6:ce:6d:c5:78:54:ff:d1:a3:ac:e1:b7:c1:c4:1b:
9f:a1:9b:d6:a7:16:69:58:65:9a:61:f5:12:e8:57:54:67:4f:
5a:ea:18:eb:39:cc:85:6c:7f:00:ef:f6:89:b4:d4:00:26:cb:
3c:f0:1d:96:c5:da:83:83:6a:61:c7:23:7e:81:55:64:e3:31:
70:46:be:97:e1:a8:56:cb:c9:b8:6b:a2:6e:74:cd:5a:bf:21:
ed:c9:7f:89:14:1a:5a:b1:97:b1:7e:a2:78:c9:39:e2:6b:0c:
ac:8c:77:c3:b9:61:c2:0c:91:fc:ba:b5:4b:ed:58:cd:65:57:
a1:05:fe:1d:29:99:df:3e:9e:d2:29:e1:a8:42:68:15:f3:bb:
60:51:59:ba:63:2f:a4:0a:7e:c4:2d:97:69:de:bc:90:7d:99:
ec:79:e9:3c:41:f9:84:3d:2a:10:13:7a:23:d0:f4:41:3c:19:
1c:68:44:4a:a4:9e:56:20:12:5c:21:8f:b8:39:7d:50:f5:09:
48:d2:c0:a9:a1:54:6a:f1:39:b1:d3:77:72:c2:ad:81:bd:c7:
96:a1:c4:f8:02:4c:a6:93:de:4c:c9:15:69:7b:78:97:17:d0:
1a:7d:d8:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswWFO51qbtbtgePwROHg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi
NjYwZDUwHhcNMjMwMTAxMDk1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGU4M2Q4YzAwNGUyYmI3ZTZmMmUwYjhkZWY2NDg5N2VlNjZiNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFgokv6TtdehGv1hxyzzTQ7SZbL3
+NaQUcWG3CE+BS76Ga1yGfDliuYwl7RXy5E6+8PLeID7eMWkeYAtk8iXMQpkxq8V
AlHeVw4qpHcBJrCYgpSthpDBbTHLpxeofMN70fT/0gmxqW8RALaCyeR5S01LAU2v
0PM3agD2qS9DtJBTqGtNtPos3bXD2lxBx7Ak8Z2faJKITog+UOBUeJsMosCEk19h
fpt8A1u+eNzIGikFFH6fIN9BqiCuKwqiTouyM7eKupJMPxLc51HNyYq3PYKsMSza
3Stx2U+GkcKc72XPDsgme8uViXSJneSR2vZSCu/h2mc9BRWCs8UKSQ1PRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHToPYwATiu35vLguN72SJfuZrZFMB8GA1UdIwQY
MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct
MmZmYWVkMDQ3MzhhLzEvZE9nOWpBQk9LN2ZtOHVDNDN2WklsLTVtdGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh
LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVj8MA0G
CSqGSIb3DQEBCwUAA4IBAQCJv9AAhLDmi8L/ySwYqEBnx/Rqxvy2zm3FeFT/0aOs
4bfBxBufoZvWpxZpWGWaYfUS6FdUZ09a6hjrOcyFbH8A7/aJtNQAJss88B2WxdqD
g2phxyN+gVVk4zFwRr6X4ahWy8m4a6JudM1avyHtyX+JFBpasZexfqJ4yTniawys
jHfDuWHCDJH8urVL7VjNZVehBf4dKZnfPp7SKeGoQmgV87tgUVm6Yy+kCn7ELZdp
3ryQfZnseek8QfmEPSoQE3oj0PRBPBkcaERKpJ5WIBJcIY+4OX1Q9QlI0sCpoVRq
8Tmx03dywq2BvceWocT4Akymk95MyRVpe3iXF9Aafdj3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org