Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IboCa_kr9wH3UwZGKztlSj_1m6w.roa
File: IboCa_kr9wH3UwZGKztlSj_1m6w.roa (raw, json)
Hash identifier: pvxJ4Dw/HFllU2PziiglEeUQ6WzdHkS+t0nHsmjFg3M=
Subject key identifier: 21:BA:02:6B:F9:2B:F7:01:F7:53:06:46:2B:3B:65:4A:3F:F5:9B:AC
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0185730C9EDEBD6D5BEF5B5D97C702D304D2
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IboCa_kr9wH3UwZGKztlSj_1m6w.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 185.177.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9e:de:bd:6d:5b:ef:5b:5d:97:c7:02:d3:04:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ba026bf92bf701f75306462b3b654a3ff59bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:0b:8c:1b:82:ed:50:e0:fc:1e:80:8a:c0:
68:8d:a2:b8:14:4c:87:f9:d1:3f:91:92:ab:75:ae:
08:91:96:60:68:4a:c0:c1:87:07:3c:9d:91:a8:75:
70:61:c0:9c:a6:88:32:24:4d:c8:09:df:62:95:23:
94:9d:9a:2c:0a:1d:a6:56:53:96:f8:8d:b0:4c:68:
25:8e:17:33:77:6c:1f:b3:d3:b3:63:7c:08:3f:db:
1c:22:70:2b:aa:6c:e5:e3:b4:40:b4:84:45:aa:b4:
bd:65:e6:d2:48:a5:60:a3:e9:2b:de:39:9e:62:0a:
a4:a4:e9:47:84:19:88:92:63:44:4e:8b:a3:de:2e:
b9:4a:3c:dc:06:9e:68:f6:13:4b:43:bf:29:7e:42:
15:e1:f1:c0:a5:c1:33:68:eb:d6:c9:f9:0a:6c:20:
35:ca:e0:8e:37:fe:03:b5:bc:7b:2f:81:de:02:d6:
db:b1:eb:82:64:51:4f:95:0a:7a:7e:03:fd:14:2b:
32:31:1e:5f:6f:a1:5e:1e:4d:2c:46:49:e1:85:bc:
02:ed:8e:af:41:c3:7e:8a:ff:55:41:22:47:62:19:
a8:ec:90:8f:cc:50:bb:48:ec:9e:75:1d:08:a8:26:
56:c8:80:ee:6d:68:0e:03:d0:fa:b9:39:f7:62:2c:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:02:6B:F9:2B:F7:01:F7:53:06:46:2B:3B:65:4A:3F:F5:9B:AC
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IboCa_kr9wH3UwZGKztlSj_1m6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8c:2d:2d:71:cb:68:1e:f6:22:1b:b7:49:03:da:c0:06:db:
77:af:c4:d5:d6:00:f5:ef:6f:d4:52:9d:ee:37:4b:cf:ef:bb:
c1:90:18:57:4a:a2:35:6d:0e:0c:13:d0:0b:44:8e:ec:4e:58:
af:8f:78:c4:99:05:de:13:92:06:2c:aa:0c:61:ec:42:76:49:
63:4c:ba:1e:ad:73:ad:63:ed:eb:d9:db:08:1b:67:69:f2:d3:
46:a5:e5:53:ba:57:4d:ec:bc:c6:97:1f:06:5c:08:24:27:93:
01:29:78:0f:c8:29:2d:d1:7d:6c:02:cb:22:a8:88:8e:de:a6:
38:3e:fc:24:a9:78:e1:3d:67:18:02:43:e2:df:32:3a:41:ad:
0e:b9:2b:ed:0d:b0:42:bd:6b:45:19:7d:23:8f:48:9c:7f:30:
b8:89:6b:e8:55:ff:4b:2a:6a:01:a5:07:be:4e:8a:da:41:3a:
54:0d:80:45:e1:24:f9:a5:f6:ab:18:cb:fa:27:db:16:98:6d:
4a:91:81:80:58:93:9d:61:37:66:bb:57:e4:9a:82:28:0f:fb:
cf:f4:36:2c:69:d4:54:7d:87:e0:20:21:d1:0c:99:8d:1c:41:
09:0a:3a:c2:1b:a2:db:7b:38:44:1f:c5:e1:24:30:95:59:a0:
19:28:19:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzDJ7evW1b71tdl8cC0wTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjMwMTAyMTUxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWJhMDI2YmY5MmJmNzAxZjc1MzA2NDYyYjNiNjU0YTNmZjU5YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0oLjBuC7VDg/B6AisBojaK4FEyH
+dE/kZKrda4IkZZgaErAwYcHPJ2RqHVwYcCcpogyJE3ICd9ilSOUnZosCh2mVlOW
+I2wTGgljhczd2wfs9OzY3wIP9scInArqmzl47RAtIRFqrS9ZebSSKVgo+kr3jme
YgqkpOlHhBmIkmNETouj3i65SjzcBp5o9hNLQ78pfkIV4fHApcEzaOvWyfkKbCA1
yuCON/4Dtbx7L4HeAtbbseuCZFFPlQp6fgP9FCsyMR5fb6FeHk0sRknhhbwC7Y6v
QcN+iv9VQSJHYhmo7JCPzFC7SOyedR0IqCZWyIDubWgOA9D6uTn3YiyW4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCG6Amv5K/cB91MGRis7ZUo/9ZusMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvSWJvQ2Ffa3I5d0gzVXdaR0t6dGxTal8xbTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHlMA0G
CSqGSIb3DQEBCwUAA4IBAQBcjC0tcctoHvYiG7dJA9rABtt3r8TV1gD172/UUp3u
N0vP77vBkBhXSqI1bQ4ME9ALRI7sTlivj3jEmQXeE5IGLKoMYexCdkljTLoerXOt
Y+3r2dsIG2dp8tNGpeVTuldN7LzGlx8GXAgkJ5MBKXgPyCkt0X1sAssiqIiO3qY4
PvwkqXjhPWcYAkPi3zI6Qa0OuSvtDbBCvWtFGX0jj0icfzC4iWvoVf9LKmoBpQe+
ToraQTpUDYBF4ST5pfarGMv6J9sWmG1KkYGAWJOdYTdmu1fkmoIoD/vP9DYsadRU
fYfgICHRDJmNHEEJCjrCG6LbezhEH8XhJDCVWaAZKBn7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:30 2024 by rpki-client on console-ams.rpki-client.org