Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/NojOj4DwSobsXG-LT-L9zBLkraU.roa
File: NojOj4DwSobsXG-LT-L9zBLkraU.roa (raw, json)
Hash identifier: 1BFojngFEHyuiGcC3BwrSHKbasG4sshRM/4i1Y63SJU=
Subject key identifier: 36:88:CE:8F:80:F0:4A:86:EC:5C:6F:8B:4F:E2:FD:CC:12:E4:AD:A5
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856D1CD1DA13DE049D83494D9713FBB2BA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/NojOj4DwSobsXG-LT-L9zBLkraU.roa
Signing time: Sun 01 Jan 2023 11:34:43 +0000
ROA not before: Sun 01 Jan 2023 11:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.84.160.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:d1:da:13:de:04:9d:83:49:4d:97:13:fb:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 11:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3688ce8f80f04a86ec5c6f8b4fe2fdcc12e4ada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:34:b4:85:6d:45:65:d2:3f:d9:7b:df:9d:
d1:4c:bb:7d:31:07:e1:88:a4:2c:ec:fa:e7:67:43:
aa:b7:0c:62:81:62:2d:5a:f4:66:16:12:27:e8:a3:
75:f3:ec:d1:30:f5:e7:6c:d1:02:46:33:a3:7a:7b:
e9:34:07:15:81:ce:42:68:df:16:9d:df:4e:2e:03:
60:ac:d7:6d:69:73:c5:50:bc:0d:b5:2d:ab:38:cc:
9b:75:ca:68:9a:7a:81:a6:ea:14:85:ba:f0:78:47:
a0:80:c7:6a:f1:e0:57:d1:09:34:25:76:90:aa:97:
62:27:18:5f:5c:36:97:4d:7a:0c:a4:00:18:e4:05:
94:4f:27:3d:72:2f:71:24:7c:4a:85:d3:5b:d8:86:
e7:40:39:64:9a:75:85:25:4a:d4:e0:08:42:7e:5e:
b3:58:5e:e7:78:66:29:e4:e0:5c:ed:72:cb:7b:15:
a5:96:9d:33:51:8e:6d:2a:5f:b9:c7:8a:a5:a6:1f:
51:91:0b:a1:ad:a5:35:d3:99:4d:69:e4:2b:74:05:
58:da:df:6e:14:45:2a:68:8e:15:08:49:c2:f0:96:
f6:3c:0e:98:9c:6a:b6:3c:18:a9:1f:de:1c:07:b5:
c3:ee:7a:5c:e1:69:e4:df:27:01:5f:04:04:a4:ec:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:CE:8F:80:F0:4A:86:EC:5C:6F:8B:4F:E2:FD:CC:12:E4:AD:A5
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/NojOj4DwSobsXG-LT-L9zBLkraU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
f0:2c:42:af:8f:13:be:da:a0:b0:49:f5:bb:50:a2:7c:c7:64:
5e:22:de:52:99:c5:7c:65:ef:d4:85:c1:25:c6:18:50:cb:b4:
08:e7:48:d8:7f:dc:38:98:81:d7:34:38:7d:1b:f8:eb:81:b9:
7f:b1:95:17:ea:92:15:5d:1e:91:f6:6f:af:22:55:13:9f:00:
1f:a0:27:25:ac:d9:49:95:3a:3f:1b:bf:60:d2:b8:9c:25:de:
49:e1:91:c2:00:25:d2:f7:e0:2e:04:13:8d:11:49:91:f1:b9:
99:4a:35:76:38:0a:0a:3d:e4:f0:e1:8a:47:66:b6:26:ab:cb:
99:36:08:e1:5e:32:6c:8a:ca:5a:a8:33:9a:8b:7f:ea:29:38:
b5:b5:84:6b:50:57:09:70:5e:1d:94:52:73:1c:c7:51:d6:f7:
06:00:fd:50:27:dd:6c:8d:d2:13:e6:26:08:43:d3:5f:0a:65:
96:5f:a1:7d:84:7b:0b:a6:a7:c6:15:35:cb:f9:15:e1:ff:87:
43:a5:b3:90:aa:43:1b:0b:1f:ef:8e:02:a8:c4:d6:03:a8:46:
76:d0:02:b3:d2:5e:f3:32:be:d1:c4:b3:27:93:5d:42:e3:57:
9d:a7:90:cc:7b:c0:19:fb:d2:16:16:6d:4d:1f:ad:49:e3:31:
64:be:89:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtHNHaE94EnYNJTZcT+7K6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwMTAxMTEzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjg4Y2U4ZjgwZjA0YTg2ZWM1YzZmOGI0ZmUyZmRjYzEyZTRhZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Q0tIVtRWXSP9l7353RTLt9MQfh
iKQs7PrnZ0OqtwxigWItWvRmFhIn6KN18+zRMPXnbNECRjOjenvpNAcVgc5CaN8W
nd9OLgNgrNdtaXPFULwNtS2rOMybdcpomnqBpuoUhbrweEeggMdq8eBX0Qk0JXaQ
qpdiJxhfXDaXTXoMpAAY5AWUTyc9ci9xJHxKhdNb2IbnQDlkmnWFJUrU4AhCfl6z
WF7neGYp5OBc7XLLexWllp0zUY5tKl+5x4qlph9RkQuhraU105lNaeQrdAVY2t9u
FEUqaI4VCEnC8Jb2PA6YnGq2PBipH94cB7XD7npc4Wnk3ycBXwQEpOztMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDaIzo+A8EqG7Fxvi0/i/cwS5K2lMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvTm9qT2o0RHdTb2JzWEctTFQtTDl6QkxrcmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVSgMA0G
CSqGSIb3DQEBCwUAA4IBAQDwLEKvjxO+2qCwSfW7UKJ8x2ReIt5SmcV8Ze/UhcEl
xhhQy7QI50jYf9w4mIHXNDh9G/jrgbl/sZUX6pIVXR6R9m+vIlUTnwAfoCclrNlJ
lTo/G79g0ricJd5J4ZHCACXS9+AuBBONEUmR8bmZSjV2OAoKPeTw4YpHZrYmq8uZ
NgjhXjJsispaqDOai3/qKTi1tYRrUFcJcF4dlFJzHMdR1vcGAP1QJ91sjdIT5iYI
Q9NfCmWWX6F9hHsLpqfGFTXL+RXh/4dDpbOQqkMbCx/vjgKoxNYDqEZ20AKz0l7z
Mr7RxLMnk11C41edp5DMe8AZ+9IWFm1NH61J4zFkvokG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org