Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/4Oir2anAYvfzSNJh7csPy10mArg.roa
File: 4Oir2anAYvfzSNJh7csPy10mArg.roa (raw, json)
Hash identifier: Jk9uDMSMYgrBeEyaoE3PJZR2ZN9DoASZ9tE0LQsk1bc=
Subject key identifier: E0:E8:AB:D9:A9:C0:62:F7:F3:48:D2:61:ED:CB:0F:CB:5D:26:02:B8
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E095C4BDAF21EDCE501138B239F41
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/4Oir2anAYvfzSNJh7csPy10mArg.roa
Signing time: Sun 01 Jan 2023 23:15:06 +0000
ROA not before: Sun 01 Jan 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 185.152.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 19:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:09:5c:4b:da:f2:1e:dc:e5:01:13:8b:23:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0e8abd9a9c062f7f348d261edcb0fcb5d2602b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:ea:e2:a4:a2:b9:38:08:f8:bb:6b:51:c7:
f4:19:1f:8d:29:bf:d6:ba:3c:70:bc:e4:23:71:2b:
bb:94:4e:e9:9b:b2:3a:a6:e1:23:54:31:f7:f9:28:
ea:da:1b:0d:62:43:db:71:16:63:16:18:31:5b:39:
96:f7:aa:90:6d:c9:c2:17:af:ca:8f:20:4d:2c:95:
bb:e2:1e:31:1f:37:c2:82:ea:f1:09:ff:04:e4:70:
f6:ac:b1:58:cc:a9:88:70:95:fa:2c:2a:26:ad:a6:
dc:48:5d:47:15:5c:21:8a:12:6e:da:65:42:6c:59:
af:8f:14:a8:c6:b5:c2:8f:53:fe:ec:94:b3:3b:c7:
5d:e1:57:3e:c2:14:9d:73:01:61:98:b4:c4:05:0e:
be:59:3d:ab:98:9e:bb:4b:e9:8b:59:2f:c0:01:68:
34:6e:e8:65:5e:10:87:98:46:b0:3a:b2:68:bf:d6:
77:4c:6d:53:ac:b9:87:53:c9:25:3e:e1:60:b6:4f:
e2:2e:73:a5:69:4b:5b:55:2a:b3:2b:ae:97:55:35:
20:4f:c0:92:dc:c1:a3:b5:e1:22:90:4e:b2:7f:44:
ac:0e:e2:e4:ff:d9:85:87:e5:8e:16:3b:e4:bf:68:
02:f8:17:bd:de:19:61:b9:9e:56:00:5b:62:9e:b6:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:AB:D9:A9:C0:62:F7:F3:48:D2:61:ED:CB:0F:CB:5D:26:02:B8
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/4Oir2anAYvfzSNJh7csPy10mArg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.92.0/22
Signature Algorithm: sha256WithRSAEncryption
76:7d:00:b4:21:75:0d:1e:bd:2c:6b:61:6c:c1:70:6c:6b:1b:
9f:04:36:9b:65:db:ea:77:a8:dd:52:a8:63:65:8b:73:fe:cb:
77:e9:0f:38:d4:ae:9d:d8:fb:59:0b:9b:82:22:25:a2:2c:76:
92:83:8c:c8:bb:3f:a5:0d:49:d6:b7:b3:cf:75:34:7a:c3:ca:
c6:88:a1:b4:0f:84:f7:0c:fb:fb:d6:4e:41:2b:06:8b:8d:2a:
a5:c5:ef:80:8f:ca:75:0c:d7:d0:c5:18:c7:94:c2:09:eb:43:
1c:77:65:ac:03:38:6d:79:3a:f8:af:7f:2f:bb:98:68:aa:76:
82:d3:f8:ad:c0:02:e8:8b:78:13:4e:9f:f0:08:b0:f5:90:e8:
4f:3c:d0:00:57:ae:22:2a:93:dd:df:40:0a:ac:b6:78:ac:5b:
64:93:ab:a8:3d:40:89:7f:c3:f6:44:fa:d6:a8:84:dd:04:0a:
cf:3f:bf:9f:eb:03:01:19:8d:81:09:38:22:ee:61:dd:49:fc:
79:3b:41:35:7f:0c:ab:f8:f1:b3:b0:61:08:67:ca:85:cd:92:
89:03:ed:9d:2f:fc:4e:3e:bf:44:7d:92:39:05:a6:00:15:b2:
76:07:de:38:53:ff:81:f8:7e:d2:0e:e5:c4:d9:da:e2:2a:64:
40:98:90:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvnglcS9ryHtzlAROLI59BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy
NjAzNzkwHhcNMjMwMTAxMjMxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGU4YWJkOWE5YzA2MmY3ZjM0OGQyNjFlZGNiMGZjYjVkMjYwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR3q4qSiuTgI+LtrUcf0GR+NKb/W
ujxwvOQjcSu7lE7pm7I6puEjVDH3+Sjq2hsNYkPbcRZjFhgxWzmW96qQbcnCF6/K
jyBNLJW74h4xHzfCgurxCf8E5HD2rLFYzKmIcJX6LComrabcSF1HFVwhihJu2mVC
bFmvjxSoxrXCj1P+7JSzO8dd4Vc+whSdcwFhmLTEBQ6+WT2rmJ67S+mLWS/AAWg0
buhlXhCHmEawOrJov9Z3TG1TrLmHU8klPuFgtk/iLnOlaUtbVSqzK66XVTUgT8CS
3MGjteEikE6yf0SsDuLk/9mFh+WOFjvkv2gC+Be93hlhuZ5WAFtinrbrBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODoq9mpwGL380jSYe3LD8tdJgK4MB8GA1UdIwQY
MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt
MWQxMGYzYzcwYmI0LzEvNE9pcjJhbkFZdmZ6U05KaDdjc1B5MTBtQXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0
LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZhcMA0G
CSqGSIb3DQEBCwUAA4IBAQB2fQC0IXUNHr0sa2FswXBsaxufBDabZdvqd6jdUqhj
ZYtz/st36Q841K6d2PtZC5uCIiWiLHaSg4zIuz+lDUnWt7PPdTR6w8rGiKG0D4T3
DPv71k5BKwaLjSqlxe+Aj8p1DNfQxRjHlMIJ60Mcd2WsAzhteTr4r38vu5hoqnaC
0/itwALoi3gTTp/wCLD1kOhPPNAAV64iKpPd30AKrLZ4rFtkk6uoPUCJf8P2RPrW
qITdBArPP7+f6wMBGY2BCTgi7mHdSfx5O0E1fwyr+PGzsGEIZ8qFzZKJA+2dL/xO
Pr9EfZI5BaYAFbJ2B944U/+B+H7SDuXE2driKmRAmJDn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org