Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bsxw7zgWE3kQ3wBYMM9SmLmF_e8.roa
File: Bsxw7zgWE3kQ3wBYMM9SmLmF_e8.roa (raw, json)
Hash identifier: UZr2C2u1YPA4lrN0us1ooO2MKbIoMJLqGdisggA6+vA=
Subject key identifier: 06:CC:70:EF:38:16:13:79:10:DF:00:58:30:CF:52:98:B9:85:FD:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D821472521F12ED9D87DE0AFF2FE67F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bsxw7zgWE3kQ3wBYMM9SmLmF_e8.roa
Signing time: Sun 01 Jan 2023 13:25:19 +0000
ROA not before: Sun 01 Jan 2023 13:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 171.22.28.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 17:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:14:72:52:1f:12:ed:9d:87:de:0a:ff:2f:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06cc70ef3816137910df005830cf5298b985fdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:48:f0:7c:4b:8b:15:1d:3f:0a:b3:7d:7f:
f2:98:0f:ef:e0:dc:ec:9f:4a:6a:51:12:2e:9f:ab:
78:06:94:3f:94:23:e8:d4:9a:14:88:32:b4:c3:3c:
3b:81:74:c2:d7:22:9e:4a:81:ee:24:b9:eb:62:b0:
42:64:65:a1:e4:92:81:ea:a6:2f:cc:77:14:27:29:
21:62:d1:4f:58:57:27:75:55:5f:3e:08:de:69:91:
e4:a2:d2:16:44:1e:51:c6:44:52:6f:ae:c1:2e:02:
ec:be:fe:b7:e4:9f:4c:c0:02:58:b0:25:1f:f2:e6:
cc:02:16:08:35:30:cc:cf:a4:96:1b:4e:dc:9a:4e:
cb:90:8c:27:64:75:8b:6a:c8:1b:27:2f:13:63:a7:
57:65:04:b4:9d:b2:64:55:19:ed:e9:e0:67:f9:76:
48:0c:83:e0:49:4b:e0:a8:13:d7:b6:ea:12:57:ce:
cf:fd:7a:67:e6:32:71:23:a9:8a:7b:c3:b5:ed:4e:
72:1b:fb:26:b9:8e:2c:41:f6:aa:19:41:10:12:f3:
3d:4e:a8:07:7e:3a:a6:99:18:31:ae:01:13:42:0a:
b1:36:e6:13:ed:2b:49:26:a6:68:89:aa:55:4a:37:
4c:65:19:62:6d:b7:c1:52:e8:08:28:05:7f:00:ab:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:70:EF:38:16:13:79:10:DF:00:58:30:CF:52:98:B9:85:FD:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bsxw7zgWE3kQ3wBYMM9SmLmF_e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:74:20:f2:16:8b:c8:87:df:af:5d:92:33:7e:a7:a1:35:a1:
5c:17:be:85:d6:ca:b1:d0:f5:6e:65:14:00:45:63:56:8d:88:
76:63:a8:32:bd:f7:f5:83:63:74:93:5c:a0:71:f8:42:bd:8a:
aa:e0:33:81:cf:c8:f1:13:f4:28:d2:e0:f1:c6:2c:ca:38:43:
83:54:0f:6a:0b:04:b2:03:b0:a6:71:77:8d:64:73:b7:3b:a6:
0a:6b:21:f6:da:39:ca:a3:96:98:0c:4a:24:e7:55:9c:0e:80:
56:32:0d:3e:45:58:14:0a:64:5e:2b:d8:f1:c8:43:ee:d0:84:
cb:b7:60:0c:24:ba:bc:0f:68:22:82:8c:3d:e3:b5:5d:7c:02:
d8:0f:86:c2:44:61:97:d4:94:4e:2b:84:be:25:c9:bf:8d:a5:
30:50:92:c7:cf:de:d5:37:25:70:77:7d:42:82:bf:5c:03:01:
e9:08:66:f0:d7:5d:71:77:37:08:22:ac:89:0a:0e:97:06:53:
ce:80:5d:7a:fa:8a:cc:22:bc:44:ae:46:1e:e2:e0:05:80:1c:
99:44:2f:c4:93:0d:67:57:1a:21:0a:df:58:dd:98:a2:8d:e2:
ea:cf:02:a8:34:69:ce:ec:c7:84:f5:fd:06:bd:5b:03:35:2a:
b5:4a:4f:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtghRyUh8S7Z2H3gr/L+Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmNjNzBlZjM4MTYxMzc5MTBkZjAwNTgzMGNmNTI5OGI5ODVmZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVdI8HxLixUdPwqzfX/ymA/v4Nzs
n0pqURIun6t4BpQ/lCPo1JoUiDK0wzw7gXTC1yKeSoHuJLnrYrBCZGWh5JKB6qYv
zHcUJykhYtFPWFcndVVfPgjeaZHkotIWRB5RxkRSb67BLgLsvv635J9MwAJYsCUf
8ubMAhYINTDMz6SWG07cmk7LkIwnZHWLasgbJy8TY6dXZQS0nbJkVRnt6eBn+XZI
DIPgSUvgqBPXtuoSV87P/Xpn5jJxI6mKe8O17U5yG/smuY4sQfaqGUEQEvM9TqgH
fjqmmRgxrgETQgqxNuYT7StJJqZoiapVSjdMZRlibbfBUugIKAV/AKtj6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAbMcO84FhN5EN8AWDDPUpi5hf3vMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQnN4dzd6Z1dFM2tRM3dCWU1NOVNtTG1GX2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqxYcAwQA
wqmvMA0GCSqGSIb3DQEBCwUAA4IBAQA6dCDyFovIh9+vXZIzfqehNaFcF76F1sqx
0PVuZRQARWNWjYh2Y6gyvff1g2N0k1ygcfhCvYqq4DOBz8jxE/Qo0uDxxizKOEOD
VA9qCwSyA7CmcXeNZHO3O6YKayH22jnKo5aYDEok51WcDoBWMg0+RVgUCmReK9jx
yEPu0ITLt2AMJLq8D2gigow947VdfALYD4bCRGGX1JROK4S+Jcm/jaUwUJLHz97V
NyVwd31Cgr9cAwHpCGbw111xdzcIIqyJCg6XBlPOgF16+orMIrxErkYe4uAFgByZ
RC/Ekw1nVxohCt9Y3ZiijeLqzwKoNGnO7MeE9f0GvVsDNSq1Sk/C
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:27 2024 by rpki-client on console-ams.rpki-client.org