Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/x3BaAfRXc_emqdLUh3kU_DCUC2Y.roa
File: x3BaAfRXc_emqdLUh3kU_DCUC2Y.roa (raw, json)
Hash identifier: pBq4iQ/Pzjd7X+65kqUBkU3+xC2A4FZsv/ymDrMX8IY=
Subject key identifier: C7:70:5A:01:F4:57:73:F7:A6:A9:D2:D4:87:79:14:FC:30:94:0B:66
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 018570704078B8131A1F2A8CAD6B42D31E10
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/x3BaAfRXc_emqdLUh3kU_DCUC2Y.roa
Signing time: Mon 02 Jan 2023 03:04:42 +0000
ROA not before: Mon 02 Jan 2023 03:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24931
IP address blocks: 185.187.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:40:78:b8:13:1a:1f:2a:8c:ad:6b:42:d3:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 2 03:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7705a01f45773f7a6a9d2d4877914fc30940b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:f3:dd:d7:ab:97:ba:38:ce:cc:ca:c5:64:
33:9b:65:33:98:fb:6e:a7:1d:72:8f:3a:80:4b:ec:
17:21:fb:f7:f4:fe:8b:b1:5b:a7:5f:e5:a7:9b:31:
c1:30:ed:e0:13:6e:1f:20:f4:0a:41:00:7d:a5:23:
08:db:97:b2:a9:1d:c5:28:2f:4d:f1:39:cc:c0:e9:
82:43:cc:41:b8:96:d7:48:3f:d6:af:7e:b4:28:bf:
85:8c:5f:ca:a8:d5:8d:85:b0:fd:33:1b:b3:74:dd:
91:db:cb:ca:4a:1d:62:da:19:eb:75:1f:44:f7:6a:
48:3a:bc:d8:a1:50:49:e2:17:15:46:0e:35:cf:86:
cb:1e:34:12:71:f4:b5:5c:ba:c8:a9:6a:3d:93:fe:
cc:fa:b9:01:c2:92:5a:ac:d6:b0:4b:14:bb:7d:39:
6d:e5:b3:da:36:d5:68:54:d0:2d:cd:54:83:b6:79:
e0:88:59:60:ed:42:fa:61:68:cf:12:38:d8:47:89:
9c:88:af:59:aa:e3:5b:1a:67:bc:8e:d5:2b:3a:be:
75:cf:c3:e0:13:46:6f:44:1b:80:1f:99:b8:48:9a:
ae:5a:ab:95:cc:2c:57:14:27:e5:e6:f6:6a:a1:b7:
7b:00:77:9c:86:12:83:e8:f0:56:72:53:af:72:92:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:5A:01:F4:57:73:F7:A6:A9:D2:D4:87:79:14:FC:30:94:0B:66
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/x3BaAfRXc_emqdLUh3kU_DCUC2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/24
Signature Algorithm: sha256WithRSAEncryption
08:25:3b:78:2e:ec:14:e3:ce:00:e7:50:75:7e:51:96:f7:c1:
d8:a7:7a:03:14:97:40:92:0c:51:5f:6b:fc:40:ed:36:28:62:
68:ac:a8:c9:98:55:ee:e8:09:30:c8:c5:9a:47:44:29:96:a8:
b8:0a:0c:4c:e5:72:0f:ae:0e:80:c6:ea:32:78:c4:bd:63:67:
86:6e:4e:1f:67:0a:89:3e:de:f4:82:12:3c:c9:b3:3e:fb:93:
f8:c4:3d:74:2a:c7:66:a9:08:48:7f:df:8b:3e:a5:8d:e4:58:
da:32:dc:80:fc:58:21:bb:fe:86:91:30:af:95:07:11:88:6e:
45:1d:8a:8e:68:32:8a:e4:fa:5c:d0:47:d5:89:e3:78:f7:3c:
f8:b5:76:15:09:60:01:d8:41:6f:0d:3b:13:83:17:60:e1:f3:
4b:48:20:80:57:a0:46:49:b4:81:1f:25:16:6a:b5:0a:3e:05:
c3:c0:bf:b1:37:c2:d2:d3:0d:e6:9f:89:8c:3e:6b:cc:b1:4a:
27:37:80:b4:3b:35:a3:4e:da:1d:6b:a4:6d:5c:e7:1a:8f:3a:
0b:df:eb:4f:9d:4f:87:1a:b5:4c:73:c1:92:20:c1:08:12:1c:
b3:6a:74:b7:5a:12:df:46:a0:e0:0e:67:7d:d4:0b:c4:31:33:
ed:a4:df:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcEB4uBMaHyqMrWtC0x4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTYzMTFmMjA3ZTMwZTA0ZTVlZDE4OTYwYjMxZmIzYmE2
N2Q5Y2MwHhcNMjMwMTAyMDMwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzcwNWEwMWY0NTc3M2Y3YTZhOWQyZDQ4Nzc5MTRmYzMwOTQwYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscrz3derl7o4zszKxWQzm2UzmPtu
px1yjzqAS+wXIfv39P6LsVunX+WnmzHBMO3gE24fIPQKQQB9pSMI25eyqR3FKC9N
8TnMwOmCQ8xBuJbXSD/Wr360KL+FjF/KqNWNhbD9MxuzdN2R28vKSh1i2hnrdR9E
92pIOrzYoVBJ4hcVRg41z4bLHjQScfS1XLrIqWo9k/7M+rkBwpJarNawSxS7fTlt
5bPaNtVoVNAtzVSDtnngiFlg7UL6YWjPEjjYR4mciK9ZquNbGme8jtUrOr51z8Pg
E0ZvRBuAH5m4SJquWquVzCxXFCfl5vZqobd7AHechhKD6PBWclOvcpIRHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdwWgH0V3P3pqnS1Id5FPwwlAtmMB8GA1UdIwQY
MBaAFPyWMR8gfjDgTl7RiWCzH7O6Z9nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEt
MDM4OTdmNGNiMzVkLzEveDNCYUFmUlhjX2VtcWRMVWgza1VfRENVQzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEtMDM4OTdmNGNiMzVk
LzEvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubt0MA0G
CSqGSIb3DQEBCwUAA4IBAQAIJTt4LuwU484A51B1flGW98HYp3oDFJdAkgxRX2v8
QO02KGJorKjJmFXu6AkwyMWaR0Qplqi4CgxM5XIPrg6AxuoyeMS9Y2eGbk4fZwqJ
Pt70ghI8ybM++5P4xD10KsdmqQhIf9+LPqWN5FjaMtyA/Fghu/6GkTCvlQcRiG5F
HYqOaDKK5Ppc0EfVieN49zz4tXYVCWAB2EFvDTsTgxdg4fNLSCCAV6BGSbSBHyUW
arUKPgXDwL+xN8LS0w3mn4mMPmvMsUonN4C0OzWjTtoda6RtXOcajzoL3+tPnU+H
GrVMc8GSIMEIEhyzanS3WhLfRqDgDmd91AvEMTPtpN98
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:48 2024 by rpki-client on console-fra.rpki-client.org