Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/18czJkzIe6JANpAY6u9WM0i_lXY.roa
File: 18czJkzIe6JANpAY6u9WM0i_lXY.roa (raw, json)
Hash identifier: PesIDjI3Ie2EkF+4vrUXrzp7lrLSgv1oLKkZkcbw284=
Subject key identifier: D7:C7:33:26:4C:C8:7B:A2:40:36:90:18:EA:EF:56:33:48:BF:95:76
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0188BF93F20C155FB50DD7519C31ED7580E1
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/18czJkzIe6JANpAY6u9WM0i_lXY.roa
Signing time: Thu 15 Jun 2023 15:02:03 +0000
ROA not before: Thu 15 Jun 2023 15:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.219.161.0/24 maxlen: 24
45.81.160.0/24 maxlen: 24
2.56.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Oct 2023 11:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:93:f2:0c:15:5f:b5:0d:d7:51:9c:31:ed:75:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jun 15 15:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c733264cc87ba240369018eaef563348bf9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:0a:33:7e:ac:d6:58:04:30:b2:30:de:dd:
a4:f4:b7:18:c3:62:80:e9:c9:8e:be:a0:9e:46:16:
dc:18:49:67:52:2f:10:87:13:d1:43:86:41:4b:d6:
18:8a:3b:2d:69:68:5e:68:ae:5e:c5:6d:eb:e3:53:
cb:8a:df:05:54:76:2e:41:a4:68:90:a6:b2:c6:94:
93:fb:ad:79:73:a7:f7:04:94:2f:36:e3:b3:49:48:
af:ca:6e:99:3f:84:5d:78:ed:60:1a:d7:a4:18:35:
e9:0a:a0:b5:14:cc:42:84:0d:50:a0:04:e0:9f:39:
f5:d4:0f:a5:12:8f:a1:ff:77:b2:f8:43:7a:53:99:
aa:72:16:b5:56:00:bc:76:a0:b3:1e:b7:59:b8:55:
a3:f8:e7:37:61:31:54:90:1a:0e:e1:e7:e4:00:53:
0f:dd:0b:58:e5:09:39:36:ef:4b:06:64:4c:8b:bf:
69:5f:4c:f3:9e:b7:75:42:33:93:8f:8f:80:7b:e0:
ed:d3:5f:0d:85:98:cb:9d:35:06:ae:4c:28:38:9a:
ce:94:89:78:98:d5:f8:f9:11:8c:fb:0c:70:27:04:
7b:53:e9:93:8e:54:0a:8b:27:b9:35:d4:a2:78:8b:
f9:da:86:2a:75:64:5e:7b:d4:94:11:60:ee:20:d0:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:33:26:4C:C8:7B:A2:40:36:90:18:EA:EF:56:33:48:BF:95:76
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/18czJkzIe6JANpAY6u9WM0i_lXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
45.81.160.0/24
185.219.161.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f8:27:3a:f5:aa:6c:75:c6:07:2c:f6:35:82:a0:4a:96:45:
46:3d:6e:70:21:18:34:68:8c:bd:6b:f5:09:0d:3b:2a:30:f7:
0f:00:d8:94:0c:28:2e:a7:72:82:b4:09:54:ae:89:9a:ae:d0:
55:d4:b5:8c:a6:4b:04:06:4b:7b:a8:95:80:3d:e5:bf:72:24:
f9:b1:93:a7:e2:67:9c:52:70:72:72:1c:30:9a:55:58:63:26:
11:e7:09:a0:18:ef:e8:36:f1:74:34:10:5b:92:ec:db:36:9a:
dd:61:4a:57:4d:07:3c:32:24:41:de:79:13:76:14:80:e2:0c:
d4:6e:3b:cd:77:54:d9:ab:06:fa:be:52:4a:44:b7:61:57:c9:
ad:1d:a6:25:43:65:55:ef:21:be:c9:03:32:1c:b4:2f:b6:38:
47:86:ae:98:f5:5c:5d:25:b2:51:4e:43:50:da:dc:0a:ad:a7:
c4:28:46:d8:fb:7f:2d:b6:0d:ec:fc:e5:1a:c8:4c:e0:7c:ea:
e1:77:64:3e:c0:e8:f1:61:ca:73:bd:1b:fd:cd:ff:17:87:f6:
63:42:f7:4c:f1:09:1a:ab:dc:aa:36:75:28:af:d0:20:db:d9:
c1:45:dd:6b:c4:b8:43:8a:f5:32:4c:92:65:bb:dd:54:a7:9a:
f1:3b:74:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYi/k/IMFV+1DddRnDHtdYDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjMwNjE1MTUwMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2M3MzMyNjRjYzg3YmEyNDAzNjkwMThlYWVmNTYzMzQ4YmY5NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLcKM36s1lgEMLIw3t2k9LcYw2KA
6cmOvqCeRhbcGElnUi8QhxPRQ4ZBS9YYijstaWheaK5exW3r41PLit8FVHYuQaRo
kKayxpST+615c6f3BJQvNuOzSUivym6ZP4RdeO1gGtekGDXpCqC1FMxChA1QoATg
nzn11A+lEo+h/3ey+EN6U5mqcha1VgC8dqCzHrdZuFWj+Oc3YTFUkBoO4efkAFMP
3QtY5Qk5Nu9LBmRMi79pX0zznrd1QjOTj4+Ae+Dt018NhZjLnTUGrkwoOJrOlIl4
mNX4+RGM+wxwJwR7U+mTjlQKiye5NdSieIv52oYqdWRee9SUEWDuINCnJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNfHMyZMyHuiQDaQGOrvVjNIv5V2MB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEvMThjekprekllNkpBTnBBWTZ1OVdNMGlfbFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjggAwQA
LVGgAwQAuduhMA0GCSqGSIb3DQEBCwUAA4IBAQBm+Cc69apsdcYHLPY1gqBKlkVG
PW5wIRg0aIy9a/UJDTsqMPcPANiUDCgup3KCtAlUromartBV1LWMpksEBkt7qJWA
PeW/ciT5sZOn4mecUnBychwwmlVYYyYR5wmgGO/oNvF0NBBbkuzbNprdYUpXTQc8
MiRB3nkTdhSA4gzUbjvNd1TZqwb6vlJKRLdhV8mtHaYlQ2VV7yG+yQMyHLQvtjhH
hq6Y9VxdJbJRTkNQ2twKrafEKEbY+38ttg3s/OUayEzgfOrhd2Q+wOjxYcpzvRv9
zf8Xh/ZjQvdM8Qkaq9yqNnUor9Ag29nBRd1rxLhDivUyTJJlu91Up5rxO3QX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:16 2024 by rpki-client on console-fra.rpki-client.org