Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mZF6Np-9Drdy1vudPA1XdXITIno.roa
File: mZF6Np-9Drdy1vudPA1XdXITIno.roa (raw, json)
Hash identifier: RCmdOU8NOXUnSgpcRTuZk2fbIeiguCHtGqg09HM2sfE=
Subject key identifier: 99:91:7A:36:9F:BD:0E:B7:72:D6:FB:9D:3C:0D:57:75:72:13:22:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C7CCE0783A5A3E49F7B7AE623BB80288A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mZF6Np-9Drdy1vudPA1XdXITIno.roa
Signing time: Mon 18 Dec 2023 12:02:06 +0000
ROA not before: Mon 18 Dec 2023 12:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200623
IP address blocks: 185.222.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:ce:07:83:a5:a3:e4:9f:7b:7a:e6:23:bb:80:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 18 12:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99917a369fbd0eb772d6fb9d3c0d57757213227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:fa:ed:72:1e:8f:90:c2:5d:d1:03:4c:77:
38:78:dd:ce:6d:83:31:4a:da:a6:c9:2c:e9:31:0b:
57:80:5f:c5:a8:59:e3:cb:24:9f:9c:ed:df:c5:2e:
7e:76:27:4c:ba:6c:e0:f1:5c:18:9b:5f:5f:7a:61:
fe:6a:a5:45:bc:b8:68:b7:47:3b:cd:56:cd:86:b9:
0a:c8:21:f2:ca:df:5a:ba:95:73:e8:a8:f7:18:79:
60:87:51:c5:d6:c2:5e:90:5c:10:80:9d:82:04:ee:
26:43:61:93:45:92:95:e9:10:c0:d8:23:b5:2e:87:
49:d3:e2:3e:dc:7c:c2:22:c7:45:db:91:ce:8a:cb:
e1:5b:d8:f5:e0:1c:fd:86:17:47:10:2b:92:69:dd:
79:4c:a9:21:cf:30:83:92:f0:f7:7a:69:b5:6d:7a:
1c:ba:be:69:c6:10:19:ca:8d:47:68:84:c9:5c:5c:
7d:6a:10:b5:cc:8e:5a:8d:89:e7:97:55:5e:c8:25:
c5:2d:e5:58:37:e7:ba:3e:0e:a6:29:ff:c5:fb:bf:
16:cb:72:b4:16:2d:44:a3:87:53:aa:0f:dd:2b:34:
9c:56:97:af:48:9b:78:e8:8e:0d:cd:67:a4:61:30:
c0:4b:07:57:cc:9b:e8:6e:6c:5e:03:4e:93:1d:b9:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:7A:36:9F:BD:0E:B7:72:D6:FB:9D:3C:0D:57:75:72:13:22:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mZF6Np-9Drdy1vudPA1XdXITIno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:6a:81:6b:93:d4:22:fa:fd:c7:67:85:17:8f:04:76:57:d0:
fd:c0:c0:c5:6b:05:6c:9d:30:5a:c5:83:52:70:9f:09:0d:57:
13:62:a4:d7:c3:13:b6:84:9e:31:14:21:fe:70:a1:53:ba:53:
50:b6:99:ae:50:a6:19:0e:25:42:a1:3b:de:3f:29:bb:b0:04:
cd:57:a6:cf:20:38:9d:58:27:e0:0f:d6:54:fd:14:76:6f:e7:
33:fd:3a:55:91:de:2a:e9:7e:40:cd:9e:18:f8:1c:71:23:16:
3c:c6:ae:95:8f:52:92:f6:ba:bd:fc:b7:29:26:28:40:ad:02:
3c:4f:36:75:30:a8:a7:28:02:15:2d:2b:9e:b1:78:00:48:62:
fa:ac:b4:1f:73:99:e2:e1:86:a6:50:a5:79:69:44:60:31:db:
86:04:c6:d5:39:88:a1:19:65:dc:9a:08:e1:e4:29:4d:81:9b:
33:01:da:39:ed:47:45:51:9c:6c:02:03:17:ae:3d:7c:2f:0a:
b0:fe:24:6a:68:2d:2e:7c:26:10:ea:40:ca:36:5a:ae:7d:4b:
31:41:db:b7:71:2f:3a:9c:f7:b8:61:71:42:7c:61:21:f2:41:
4e:e1:03:ef:a2:05:ea:d0:5e:e9:ad:be:a5:d3:7d:a3:00:0c:
c1:65:e7:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx8zgeDpaPkn3t65iO7gCiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjE4MTIwMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTkxN2EzNjlmYmQwZWI3NzJkNmZiOWQzYzBkNTc3NTcyMTMyMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD367XIej5DCXdEDTHc4eN3ObYMx
StqmySzpMQtXgF/FqFnjyySfnO3fxS5+didMumzg8VwYm19femH+aqVFvLhot0c7
zVbNhrkKyCHyyt9aupVz6Kj3GHlgh1HF1sJekFwQgJ2CBO4mQ2GTRZKV6RDA2CO1
LodJ0+I+3HzCIsdF25HOisvhW9j14Bz9hhdHECuSad15TKkhzzCDkvD3emm1bXoc
ur5pxhAZyo1HaITJXFx9ahC1zI5ajYnnl1VeyCXFLeVYN+e6Pg6mKf/F+78Wy3K0
Fi1Eo4dTqg/dKzScVpevSJt46I4NzWekYTDASwdXzJvobmxeA06THbk5owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmRejafvQ63ctb7nTwNV3VyEyJ6MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbVpGNk5wLTlEcmR5MXZ1ZFBBMVhkWElUSW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud6jMA0G
CSqGSIb3DQEBCwUAA4IBAQCraoFrk9Qi+v3HZ4UXjwR2V9D9wMDFawVsnTBaxYNS
cJ8JDVcTYqTXwxO2hJ4xFCH+cKFTulNQtpmuUKYZDiVCoTvePym7sATNV6bPIDid
WCfgD9ZU/RR2b+cz/TpVkd4q6X5AzZ4Y+BxxIxY8xq6Vj1KS9rq9/LcpJihArQI8
TzZ1MKinKAIVLSuesXgASGL6rLQfc5ni4YamUKV5aURgMduGBMbVOYihGWXcmgjh
5ClNgZszAdo57UdFUZxsAgMXrj18Lwqw/iRqaC0ufCYQ6kDKNlqufUsxQdu3cS86
nPe4YXFCfGEh8kFO4QPvogXq0F7prb6l032jAAzBZeca
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org