Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/XAOdpwUnpZHqkt8caIdQCzw2jsk.roa
File: XAOdpwUnpZHqkt8caIdQCzw2jsk.roa (raw, json)
Hash identifier: 1pNYQT7Dk3uzwbYhkxONz+YxVtxxf+rfr5Brv+ydIlw=
Subject key identifier: 5C:03:9D:A7:05:27:A5:91:EA:92:DF:1C:68:87:50:0B:3C:36:8E:C9
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 0185BBFB393D1B2FD8C524D9D9D7ACD77011
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/XAOdpwUnpZHqkt8caIdQCzw2jsk.roa
Signing time: Mon 16 Jan 2023 19:08:01 +0000
ROA not before: Mon 16 Jan 2023 19:08:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198726
IP address blocks: 185.238.160.0/22 maxlen: 22
185.240.224.0/22 maxlen: 22
2a02:acc1::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:fb:39:3d:1b:2f:d8:c5:24:d9:d9:d7:ac:d7:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jan 16 19:08:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c039da70527a591ea92df1c6887500b3c368ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:50:68:68:d6:fb:cb:2f:ce:8e:06:01:6a:
06:ab:df:b4:c3:02:0c:c0:35:3d:74:23:fa:91:4e:
8f:f4:41:ef:d9:0c:df:bf:22:f5:79:c3:9b:d5:34:
71:06:5f:7c:a2:6e:0a:99:fc:48:0d:10:e3:53:05:
4b:42:81:f2:b5:9c:86:13:8f:04:c2:63:1c:65:e5:
70:fa:56:00:2e:a1:6c:4f:1d:86:d8:44:a1:68:1c:
f9:5f:c2:de:57:8a:63:00:42:dc:93:8d:e0:0c:a3:
01:a4:ac:8f:df:ed:0c:3f:68:e1:4a:d9:14:ea:75:
24:c2:6c:12:75:82:de:d2:8f:66:41:f4:77:01:22:
b0:f5:d2:67:9f:75:c6:44:19:4e:d0:70:d5:e0:f7:
3a:8e:22:dd:8f:c0:8a:63:bb:3e:3c:6f:43:cd:11:
9d:83:1a:73:03:34:0e:ad:c4:9f:c5:45:88:b6:e9:
c5:23:59:87:55:01:52:a2:cf:44:a6:a3:6d:36:a5:
6f:bf:c0:7a:39:81:c4:c3:70:2d:dd:d1:2f:01:1c:
e2:81:56:54:1f:d4:40:04:78:4b:55:94:34:e3:1d:
80:8c:fb:e2:ac:86:ec:38:7f:63:e3:2e:03:be:92:
fa:45:a9:37:29:6d:c3:34:3a:b6:1c:af:b4:e5:61:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:9D:A7:05:27:A5:91:EA:92:DF:1C:68:87:50:0B:3C:36:8E:C9
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/XAOdpwUnpZHqkt8caIdQCzw2jsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.160.0/22
185.240.224.0/22
IPv6:
2a02:acc1::/32
Signature Algorithm: sha256WithRSAEncryption
9d:71:77:c6:46:0c:b4:97:a1:91:03:06:06:73:f7:7d:c5:93:
d2:cd:71:c5:b6:02:7b:2f:18:72:60:bd:9b:01:31:99:b1:5a:
1a:36:c9:94:27:8e:76:10:a7:f8:99:6c:62:81:2c:79:cd:60:
08:61:05:90:c6:dc:73:dc:66:4a:e9:7b:ab:05:de:b1:4e:6d:
cd:c3:44:45:a1:11:3c:aa:f9:42:89:2d:86:6b:ff:6a:61:c8:
64:c2:21:62:07:df:81:38:a0:1c:6e:0d:7b:7f:6b:40:a5:d6:
bb:54:f7:3d:32:82:c1:97:90:f0:f5:77:17:28:02:12:ba:a7:
9f:57:8b:f9:08:ad:4a:3f:2f:ff:81:d8:08:cc:9d:23:45:4f:
d9:6d:92:8e:f3:ee:1c:8a:71:8c:22:fa:6e:4e:8a:9e:01:b2:
58:5f:b3:3d:81:be:e1:24:79:fa:a4:3a:62:c5:c3:a7:a6:ff:
cd:f7:9a:75:7f:64:fd:69:07:8b:9f:d0:73:c4:7a:f1:de:fa:
03:de:63:23:9a:a5:1a:33:84:ce:26:1b:0a:d6:32:76:21:42:
49:19:a5:7d:8e:f1:39:49:06:e2:6b:cf:3c:0a:a1:a7:5f:5a:
a1:cc:74:c9:76:eb:b3:c9:c0:1f:1c:e0:85:7e:f4:78:35:f2:
d8:90:f3:2f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYW7+zk9Gy/YxSTZ2des13ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGFjZDQzYzAwMzNiMTNiODhiYjM5NzQxNTU4M2FhNTFk
OTMwM2EwHhcNMjMwMTE2MTkwODAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAzOWRhNzA1MjdhNTkxZWE5MmRmMWM2ODg3NTAwYjNjMzY4ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2dQaGjW+8svzo4GAWoGq9+0wwIM
wDU9dCP6kU6P9EHv2QzfvyL1ecOb1TRxBl98om4KmfxIDRDjUwVLQoHytZyGE48E
wmMcZeVw+lYALqFsTx2G2EShaBz5X8LeV4pjAELck43gDKMBpKyP3+0MP2jhStkU
6nUkwmwSdYLe0o9mQfR3ASKw9dJnn3XGRBlO0HDV4Pc6jiLdj8CKY7s+PG9DzRGd
gxpzAzQOrcSfxUWItunFI1mHVQFSos9EpqNtNqVvv8B6OYHEw3At3dEvARzigVZU
H9RABHhLVZQ04x2AjPvirIbsOH9j4y4DvpL6Rak3KW3DNDq2HK+05WGtcwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFwDnacFJ6WR6pLfHGiHUAs8No7JMB8GA1UdIwQY
MBaAFPWKzUPAAzsTuIuzl0FVg6pR2TA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlyTlE4QURPeE80aTdPWFFWV0RxbEhaTURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wZTY2ZTktY2YyZC00MGRmLWFhYWUt
Y2YyZDU4ZDBlMGVlLzEvWEFPZHB3VW5wWkhxa3Q4Y2FJZFFDencyanNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wZTY2ZTktY2YyZC00MGRmLWFhYWUtY2YyZDU4ZDBlMGVl
LzEvOVlyTlE4QURPeE80aTdPWFFWV0RxbEhaTURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCue6gAwQC
ufDgMA0EAgACMAcDBQAqAqzBMA0GCSqGSIb3DQEBCwUAA4IBAQCdcXfGRgy0l6GR
AwYGc/d9xZPSzXHFtgJ7LxhyYL2bATGZsVoaNsmUJ452EKf4mWxigSx5zWAIYQWQ
xtxz3GZK6XurBd6xTm3Nw0RFoRE8qvlCiS2Ga/9qYchkwiFiB9+BOKAcbg17f2tA
pda7VPc9MoLBl5Dw9XcXKAISuqefV4v5CK1KPy//gdgIzJ0jRU/ZbZKO8+4cinGM
IvpuToqeAbJYX7M9gb7hJHn6pDpixcOnpv/N95p1f2T9aQeLn9BzxHrx3voD3mMj
mqUaM4TOJhsK1jJ2IUJJGaV9jvE5SQbia888CqGnX1qhzHTJduuzycAfHOCFfvR4
NfLYkPMv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-ams.rpki-client.org