Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/3429Rhh0WoZZ0EyVF1A4OxXdHno.roa
File: 3429Rhh0WoZZ0EyVF1A4OxXdHno.roa (raw, json)
Hash identifier: M6BEx8eJQs2FTjekj44zijrhxVO/qe5EpjDSrdJRJLE=
Subject key identifier: DF:8D:BD:46:18:74:5A:86:59:D0:4C:95:17:50:38:3B:15:DD:1E:7A
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 018CC94E692A9F356CB3107B5C9C46BDF763
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/3429Rhh0WoZZ0EyVF1A4OxXdHno.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47455
IP address blocks: 185.144.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 29 May 2024 16:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:69:2a:9f:35:6c:b3:10:7b:5c:9c:46:bd:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8dbd4618745a8659d04c951750383b15dd1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:26:d4:0d:45:6a:27:89:61:00:85:90:18:
99:7a:f9:0d:30:43:b7:e2:bd:e7:59:64:3c:fe:7d:
b5:50:a4:1f:5c:3a:24:89:92:79:58:84:13:77:13:
f4:89:84:8b:f9:62:4f:33:5f:94:27:d2:d8:f3:65:
4d:bc:d4:7f:b8:26:ef:b2:da:32:bc:88:55:e0:d8:
55:d9:68:ae:74:1c:33:f0:86:49:a6:04:c6:5b:4c:
08:26:54:f2:6a:7a:30:a1:79:0b:e0:16:4e:ec:bd:
93:8a:12:7c:9f:36:b4:8f:55:ce:02:6c:2f:7f:86:
2a:53:59:5e:fa:76:b8:bf:91:5c:f2:66:09:5b:f3:
9d:73:4b:01:c0:eb:79:9d:74:87:8b:92:5b:08:82:
8f:52:86:9c:4f:37:93:0f:94:6e:78:bd:16:1b:5f:
4f:45:d3:21:49:c2:0f:cc:58:55:89:11:d6:01:8c:
0a:12:6d:bf:e8:fc:a7:43:5b:e0:92:19:12:e0:6b:
8b:e7:5c:25:77:19:01:a7:8b:17:cc:59:2b:df:4a:
65:de:44:12:39:d8:1a:34:77:d7:e2:c0:ae:a3:fd:
0f:45:5c:63:cd:cf:9e:87:1b:e2:f4:b2:67:41:a0:
fa:61:81:cf:5e:66:eb:c9:4f:70:3d:f1:41:b8:df:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8D:BD:46:18:74:5A:86:59:D0:4C:95:17:50:38:3B:15:DD:1E:7A
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/3429Rhh0WoZZ0EyVF1A4OxXdHno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.252.0/22
Signature Algorithm: sha256WithRSAEncryption
14:a3:1e:ed:11:12:0f:6d:90:46:03:30:78:8b:96:7f:85:02:
56:de:f5:84:3b:d6:a8:3b:57:81:fe:b0:73:f5:53:b0:49:70:
bb:66:4b:7d:00:25:67:25:90:ec:79:84:06:27:2e:e3:da:b5:
60:92:6f:e6:23:30:6b:2c:9c:69:92:f7:6c:63:a5:c3:64:89:
ef:be:ea:e4:79:21:da:8b:9e:9d:c0:9d:85:7a:45:5e:57:1f:
3e:b7:c8:bf:62:87:a4:0a:f3:c6:f2:ad:a1:18:81:16:26:f5:
61:37:1e:0c:33:bf:6b:7c:07:a0:e9:5e:4f:e1:b9:76:94:fe:
57:05:b2:0a:30:26:32:ab:69:17:c2:53:d1:b1:df:2a:b4:f8:
2e:35:0b:89:7c:f7:3d:c2:e0:8b:1b:40:02:a1:f6:b2:b0:70:
5b:57:95:e0:80:5f:46:ed:5e:60:7b:a3:26:d7:0f:ea:94:a8:
0c:2a:c1:82:4a:36:9e:98:b6:80:f4:f2:c4:08:7f:80:11:5b:
3b:c1:a4:68:40:c3:c1:46:23:94:38:41:4d:ff:1c:b1:c0:8d:
d6:fe:29:81:01:fb:9e:89:40:2e:f6:06:a9:95:e6:03:be:3b:
66:f9:8f:2d:a2:26:ea:f5:9c:6b:38:0d:10:49:bf:6e:77:7a:
86:cb:47:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmkqnzVssxB7XJxGvfdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4
NjI5OTIwHhcNMjQwMTAyMDgzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjhkYmQ0NjE4NzQ1YTg2NTlkMDRjOTUxNzUwMzgzYjE1ZGQxZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdAm1A1FaieJYQCFkBiZevkNMEO3
4r3nWWQ8/n21UKQfXDokiZJ5WIQTdxP0iYSL+WJPM1+UJ9LY82VNvNR/uCbvstoy
vIhV4NhV2WiudBwz8IZJpgTGW0wIJlTyanowoXkL4BZO7L2TihJ8nza0j1XOAmwv
f4YqU1le+na4v5Fc8mYJW/Odc0sBwOt5nXSHi5JbCIKPUoacTzeTD5RueL0WG19P
RdMhScIPzFhViRHWAYwKEm2/6PynQ1vgkhkS4GuL51wldxkBp4sXzFkr30pl3kQS
OdgaNHfX4sCuo/0PRVxjzc+ehxvi9LJnQaD6YYHPXmbryU9wPfFBuN8V3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+NvUYYdFqGWdBMlRdQODsV3R56MB8GA1UdIwQY
MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt
OGYyMTVjMDlhZTcyLzEvMzQyOVJoaDBXb1paMEV5VkYxQTRPeFhkSG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy
LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZD8MA0G
CSqGSIb3DQEBCwUAA4IBAQAUox7tERIPbZBGAzB4i5Z/hQJW3vWEO9aoO1eB/rBz
9VOwSXC7Zkt9ACVnJZDseYQGJy7j2rVgkm/mIzBrLJxpkvdsY6XDZInvvurkeSHa
i56dwJ2FekVeVx8+t8i/YoekCvPG8q2hGIEWJvVhNx4MM79rfAeg6V5P4bl2lP5X
BbIKMCYyq2kXwlPRsd8qtPguNQuJfPc9wuCLG0ACofaysHBbV5XggF9G7V5ge6Mm
1w/qlKgMKsGCSjaemLaA9PLECH+AEVs7waRoQMPBRiOUOEFN/xyxwI3W/imBAfue
iUAu9gapleYDvjtm+Y8toibq9ZxrOA0QSb9ud3qGy0cn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:34 2024 by rpki-client on console-ams.rpki-client.org