Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BhZIwlF87NpZos4VnNxH1KZv1mo.roa
File: BhZIwlF87NpZos4VnNxH1KZv1mo.roa (raw, json)
Hash identifier: tnS4UwMrUrjsxxxQfh/ovVxAE7kVf0c23RVP8yR9FHY=
Subject key identifier: 06:16:48:C2:51:7C:EC:DA:59:A2:CE:15:9C:DC:47:D4:A6:6F:D6:6A
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018D55709BE10CB347271FCBA3F0BF145420
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BhZIwlF87NpZos4VnNxH1KZv1mo.roa
Signing time: Mon 29 Jan 2024 13:37:39 +0000
ROA not before: Mon 29 Jan 2024 13:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 14 Feb 2024 09:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:70:9b:e1:0c:b3:47:27:1f:cb:a3:f0:bf:14:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 29 13:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=061648c2517cecda59a2ce159cdc47d4a66fd66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:37:d1:9e:64:1e:a6:d9:a8:2e:4c:95:9b:
9d:61:cf:83:ec:c4:e0:4b:9d:d4:34:b6:46:3d:3b:
d7:bd:8a:1f:54:df:f8:8b:1a:a1:f4:a9:75:78:a3:
6a:b5:0a:26:dc:58:67:f4:61:52:29:6a:b0:72:78:
8d:4f:31:ca:98:4f:a7:7e:7c:df:ec:26:ca:5f:3b:
24:80:d0:60:fe:33:67:61:7e:1e:71:68:c7:1c:06:
f7:b0:2c:4c:2b:d5:e7:c6:64:7a:59:67:1d:9a:a8:
ab:6d:e7:82:19:01:5d:63:5f:f8:9e:2c:2d:23:43:
3f:18:35:b9:ee:4e:57:c7:ea:f4:23:eb:b0:ff:9c:
5d:13:52:b3:7c:37:22:87:eb:5d:c7:a7:cb:29:f3:
df:4a:0e:d0:17:e2:dd:2e:fa:65:c0:8b:b5:ba:a7:
2a:8a:13:f8:09:04:1f:c5:48:9b:89:a3:25:de:cc:
63:04:6a:54:e6:4b:76:dc:a4:cd:c4:9a:38:a4:fb:
db:a9:e7:5b:d3:6b:a1:50:16:68:b8:26:6f:cb:e8:
d1:b4:73:1b:fb:ed:4d:87:74:43:e7:0f:af:10:4c:
b4:e9:51:76:7e:f1:52:0e:7e:35:98:be:7e:5d:58:
b5:a5:e4:43:9a:c1:d2:a1:bb:2a:97:fc:f9:ba:f2:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:48:C2:51:7C:EC:DA:59:A2:CE:15:9C:DC:47:D4:A6:6F:D6:6A
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BhZIwlF87NpZos4VnNxH1KZv1mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:8c:c4:09:62:2b:0e:0a:e8:a1:af:e3:56:3e:82:52:46:7b:
5e:7c:6e:a7:da:5a:5f:f6:87:b0:4a:40:78:ac:6a:c0:2a:ca:
68:ed:72:98:2b:2b:68:f4:75:10:91:a4:17:77:79:2f:b6:f6:
ab:38:05:08:0e:72:d4:f2:3d:cd:3f:45:a1:9f:85:85:ff:f8:
8c:74:1b:71:00:dd:47:a7:53:04:99:87:d9:b2:f2:bd:f0:af:
4a:5b:73:a7:3b:a8:31:a4:8a:22:2f:c7:be:0f:e9:42:66:2f:
80:51:f7:d1:d5:0c:d0:9f:dc:d4:70:77:e0:13:a5:80:91:70:
d5:cc:bb:96:51:b1:67:99:87:63:ad:3c:cf:40:98:77:a1:ce:
aa:d9:57:42:1e:43:50:76:dd:d9:7e:0a:23:10:c9:8a:10:bd:
db:70:2c:18:c2:7f:a6:45:76:08:0c:9d:f0:bb:5c:9d:85:c7:
81:e8:94:e5:3e:f5:23:b2:62:5d:93:64:40:27:7b:11:26:d5:
bc:b3:aa:b3:6b:fb:65:9c:62:c9:b0:96:49:bb:f7:ed:68:f2:
1d:ad:72:47:bf:08:7b:5e:51:4e:55:25:4b:fd:bd:36:35:73:
86:2a:6e:3c:81:2f:60:3a:dd:0a:65:3f:26:de:19:db:ed:4b:
30:3d:98:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1VcJvhDLNHJx/Lo/C/FFQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwMTI5MTMzNzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjE2NDhjMjUxN2NlY2RhNTlhMmNlMTU5Y2RjNDdkNGE2NmZkNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobM30Z5kHqbZqC5MlZudYc+D7MTg
S53UNLZGPTvXvYofVN/4ixqh9Kl1eKNqtQom3Fhn9GFSKWqwcniNTzHKmE+nfnzf
7CbKXzskgNBg/jNnYX4ecWjHHAb3sCxMK9XnxmR6WWcdmqirbeeCGQFdY1/4niwt
I0M/GDW57k5Xx+r0I+uw/5xdE1KzfDcih+tdx6fLKfPfSg7QF+LdLvplwIu1uqcq
ihP4CQQfxUibiaMl3sxjBGpU5kt23KTNxJo4pPvbqedb02uhUBZouCZvy+jRtHMb
++1Nh3RD5w+vEEy06VF2fvFSDn41mL5+XVi1peRDmsHSobsql/z5uvI4MQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAYWSMJRfOzaWaLOFZzcR9Smb9ZqMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvQmhaSXdsRjg3TnBab3M0Vm5OeEgxS1p2MW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuagcAwQC
ucmIMA0GCSqGSIb3DQEBCwUAA4IBAQAqjMQJYisOCuihr+NWPoJSRntefG6n2lpf
9oewSkB4rGrAKspo7XKYKyto9HUQkaQXd3kvtvarOAUIDnLU8j3NP0Whn4WF//iM
dBtxAN1Hp1MEmYfZsvK98K9KW3OnO6gxpIoiL8e+D+lCZi+AUffR1QzQn9zUcHfg
E6WAkXDVzLuWUbFnmYdjrTzPQJh3oc6q2VdCHkNQdt3ZfgojEMmKEL3bcCwYwn+m
RXYIDJ3wu1ydhceB6JTlPvUjsmJdk2RAJ3sRJtW8s6qza/tlnGLJsJZJu/ftaPId
rXJHvwh7XlFOVSVL/b02NXOGKm48gS9gOt0KZT8m3hnb7UswPZhn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org