Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/n8gs865O2cHv5D48Sy9EuM2hEdo.roa
File: n8gs865O2cHv5D48Sy9EuM2hEdo.roa (raw, json)
Hash identifier: u+r9qwh7scyVwp6psY9f/n+FxdWXLVJ5hIK4K0qPf5k=
Subject key identifier: 9F:C8:2C:F3:AE:4E:D9:C1:EF:E4:3E:3C:4B:2F:44:B8:CD:A1:11:DA
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 0187DB8164F278DF036EA882BFE1DECC35AE
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/n8gs865O2cHv5D48Sy9EuM2hEdo.roa
Signing time: Tue 02 May 2023 08:08:22 +0000
ROA not before: Tue 02 May 2023 08:08:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62000
IP address blocks: 185.163.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:81:64:f2:78:df:03:6e:a8:82:bf:e1:de:cc:35:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: May 2 08:08:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc82cf3ae4ed9c1efe43e3c4b2f44b8cda111da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:90:6c:01:4e:aa:21:10:ab:c5:c9:54:66:
13:85:ce:b7:d6:23:ac:88:00:63:1d:9a:89:ef:13:
b5:40:f3:24:51:35:ca:09:ef:6c:c7:ea:55:b2:ad:
16:f9:e7:a3:d5:91:50:b5:27:64:69:d5:50:92:35:
9c:db:31:48:a5:59:62:43:b4:f5:ac:88:05:1e:2c:
46:7a:69:46:81:c2:44:57:a1:f0:22:ea:6c:54:e4:
94:36:42:2c:96:1a:98:70:d4:4d:9c:d8:4f:34:87:
08:87:9f:fc:3b:cb:70:74:44:09:84:df:8c:18:f7:
ec:18:25:40:c4:d1:af:81:e8:2a:e9:f7:96:ab:d9:
24:e6:97:b8:a1:b5:50:bd:d4:b1:60:8f:4d:06:90:
8d:47:35:b5:41:b1:0a:ec:b3:b4:04:94:a7:7b:49:
ff:21:fb:78:d7:dd:2d:44:7c:ea:6c:78:58:5d:44:
2f:b3:85:55:8b:ac:ed:e7:15:dd:e5:bc:73:51:c7:
22:36:4c:70:44:e4:d6:7f:11:5d:7d:8a:f2:13:87:
11:82:aa:4f:ed:5e:17:10:02:45:c1:2e:ad:6e:eb:
99:ff:05:3d:ef:cc:69:b7:85:ca:01:b5:9b:62:23:
d7:9b:41:33:d3:61:f7:ff:e4:49:e3:3a:09:06:8f:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:2C:F3:AE:4E:D9:C1:EF:E4:3E:3C:4B:2F:44:B8:CD:A1:11:DA
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/n8gs865O2cHv5D48Sy9EuM2hEdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.124.0/22
Signature Algorithm: sha256WithRSAEncryption
99:90:c8:09:06:2d:f5:9e:af:5e:24:0e:ef:14:97:31:7b:48:
80:85:ec:93:20:b2:b4:80:64:99:31:d8:b6:e1:ba:5f:ad:f2:
39:38:d4:0a:27:4a:7d:21:18:7b:8d:8e:3e:ee:6b:cd:51:04:
5a:b2:80:94:5a:37:d7:11:37:1d:87:ab:2c:cd:b9:38:5a:d3:
78:28:14:12:f9:19:75:a9:0b:f7:ae:b7:7f:16:66:ef:76:76:
12:89:1a:2e:36:c0:56:29:fb:9a:ad:75:3c:3d:f4:4f:22:a3:
c5:26:c0:48:5d:b2:02:cc:b7:8d:94:5d:dc:21:5f:1f:10:01:
1b:45:3a:ec:f0:28:ac:13:bc:fe:71:ca:c2:39:d6:bf:96:08:
6b:d6:8f:f1:dc:e8:4f:c4:a2:23:37:55:a8:9a:7b:9d:26:42:
20:6e:23:1a:01:4f:0a:9e:82:9d:11:72:c8:27:54:72:54:6d:
3f:15:c9:99:a3:ee:c0:90:80:eb:21:06:7d:70:87:23:aa:a8:
50:0e:06:04:3f:d8:d1:71:7b:b6:8e:8d:e4:33:8a:05:f7:33:
0a:fe:e1:23:06:93:f2:d0:33:04:b8:27:d6:98:a1:4c:3c:9e:
cd:0a:e4:7f:12:3b:26:e1:09:63:65:8e:be:37:e6:45:85:d3:
ec:0a:44:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfbgWTyeN8DbqiCv+HezDWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2
YzQ2NTMwHhcNMjMwNTAyMDgwODIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmM4MmNmM2FlNGVkOWMxZWZlNDNlM2M0YjJmNDRiOGNkYTExMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9yQbAFOqiEQq8XJVGYThc631iOs
iABjHZqJ7xO1QPMkUTXKCe9sx+pVsq0W+eej1ZFQtSdkadVQkjWc2zFIpVliQ7T1
rIgFHixGemlGgcJEV6HwIupsVOSUNkIslhqYcNRNnNhPNIcIh5/8O8twdEQJhN+M
GPfsGCVAxNGvgegq6feWq9kk5pe4obVQvdSxYI9NBpCNRzW1QbEK7LO0BJSne0n/
Ift4190tRHzqbHhYXUQvs4VVi6zt5xXd5bxzUcciNkxwROTWfxFdfYryE4cRgqpP
7V4XEAJFwS6tbuuZ/wU978xpt4XKAbWbYiPXm0Ez02H3/+RJ4zoJBo9PBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/ILPOuTtnB7+Q+PEsvRLjNoRHaMB8GA1UdIwQY
MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt
Zjg3OTJmNTc3YjlhLzEvbjhnczg2NU8yY0h2NUQ0OFN5OUV1TTJoRWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh
LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaN8MA0G
CSqGSIb3DQEBCwUAA4IBAQCZkMgJBi31nq9eJA7vFJcxe0iAheyTILK0gGSZMdi2
4bpfrfI5ONQKJ0p9IRh7jY4+7mvNUQRasoCUWjfXETcdh6sszbk4WtN4KBQS+Rl1
qQv3rrd/FmbvdnYSiRouNsBWKfuarXU8PfRPIqPFJsBIXbICzLeNlF3cIV8fEAEb
RTrs8CisE7z+ccrCOda/lghr1o/x3OhPxKIjN1WomnudJkIgbiMaAU8KnoKdEXLI
J1RyVG0/FcmZo+7AkIDrIQZ9cIcjqqhQDgYEP9jRcXu2jo3kM4oF9zMK/uEjBpPy
0DMEuCfWmKFMPJ7NCuR/Ejsm4QljZY6+N+ZFhdPsCkR6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:23 2024 by rpki-client on console-fra.rpki-client.org