Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/J-VBrmZRaeAtksEUBTBIvHA-noo.roa
File: J-VBrmZRaeAtksEUBTBIvHA-noo.roa (raw, json)
Hash identifier: ti5i+QoAVSD/BeUhwa3r9+QTMDlNAlEbp6VToJvUFSw=
Subject key identifier: 27:E5:41:AE:66:51:69:E0:2D:92:C1:14:05:30:48:BC:70:3E:9E:8A
Certificate issuer: /CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Certificate serial: 0185A65807109A8B70B227D494BBE26B4167
Authority key identifier: E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/J-VBrmZRaeAtksEUBTBIvHA-noo.roa
Signing time: Thu 12 Jan 2023 14:17:44 +0000
ROA not before: Thu 12 Jan 2023 14:17:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202308
IP address blocks: 185.241.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:58:07:10:9a:8b:70:b2:27:d4:94:bb:e2:6b:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Validity
Not Before: Jan 12 14:17:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e541ae665169e02d92c114053048bc703e9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:c9:d1:40:68:fb:87:06:e9:32:76:96:4c:
7f:75:d9:34:0f:14:44:a9:43:25:5b:6c:16:da:18:
5e:9a:ac:01:03:72:e1:22:41:92:29:c4:f8:9c:8d:
de:0a:27:4a:d7:8c:c3:7f:bf:0b:c5:d6:f0:b9:1b:
55:25:37:bb:31:d2:22:59:8a:ad:76:ea:86:b8:61:
8c:f8:50:5f:c2:6a:bd:ec:ff:fa:13:f3:b2:e3:e8:
19:f3:2a:c7:a5:d9:df:f4:08:e1:bd:b3:82:60:d4:
f6:cc:cf:14:88:47:04:01:c6:d3:1a:50:63:9f:1e:
62:d5:d6:79:31:30:87:0b:38:39:2b:cd:fd:cc:2a:
b6:da:a5:7b:f5:38:af:d6:a2:30:46:7d:25:22:27:
77:3b:8f:b0:9b:21:3f:c8:2b:51:6d:b4:62:e2:ef:
2a:f9:fe:a7:32:0f:b3:14:0b:eb:80:3a:29:2b:db:
3c:2b:58:ee:32:11:6d:d5:d1:78:11:6d:83:33:f8:
25:59:d7:76:73:31:ff:c6:15:c0:51:d7:9f:80:36:
39:f5:f6:69:b1:52:d9:32:29:d3:c9:24:ca:7d:13:
c1:84:a5:a8:e5:5b:8f:b6:b7:48:70:1e:5f:55:59:
5a:62:d8:a0:47:75:fd:bf:ee:83:0d:0e:ba:69:f0:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:41:AE:66:51:69:E0:2D:92:C1:14:05:30:48:BC:70:3E:9E:8A
X509v3 Authority Key Identifier:
keyid:E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/J-VBrmZRaeAtksEUBTBIvHA-noo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/4YfVeU0K6KuFbqDCYQdyCs1EbTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.16.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c4:9c:76:a1:ef:eb:c3:dc:66:96:86:82:de:87:72:28:76:
2a:a1:fe:ad:fa:2e:22:b5:d2:ed:ab:4f:da:c1:4e:7b:2a:02:
e4:ff:f4:4b:7a:7e:90:32:34:2c:b2:45:ac:6a:d6:cb:c0:78:
3e:7c:c0:b7:da:59:7b:b7:d8:4e:e5:ef:4e:4b:44:6c:7e:3b:
60:4d:bb:10:62:29:af:f5:68:64:ef:7b:46:c6:f1:81:36:f5:
b2:cc:a7:7f:99:b5:28:dd:f0:b7:e5:08:60:61:59:04:2b:6b:
19:6b:85:94:54:76:4d:ce:f5:38:8a:ba:e1:d8:8d:ca:86:08:
7b:be:27:d5:3f:74:9c:dd:96:bc:13:75:a7:47:86:0f:03:86:
20:43:d9:60:cb:ad:50:1c:d8:15:57:7e:cc:af:dd:d4:66:0d:
33:7b:c5:c9:8d:01:ef:21:8b:11:5c:fc:96:3c:9c:93:dc:53:
44:6a:e0:de:36:a7:4c:ca:cb:58:9f:b1:7a:75:c8:45:85:a6:
85:a2:62:b6:b6:b0:d7:45:c7:06:ff:70:69:be:dd:d6:08:6c:
48:eb:61:3f:50:a0:ca:e3:e0:d0:53:e9:48:a5:4c:2c:b6:71:
aa:b5:9e:f4:35:43:a3:53:23:80:c7:1e:e0:3b:55:b0:2d:cb:
7a:93:a0:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWmWAcQmotwsifUlLvia0FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODdkNTc5NGQwYWU4YWI4NTZlYTBjMjYxMDc3MjBhY2Q0
NDZkM2EwHhcNMjMwMTEyMTQxNzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2U1NDFhZTY2NTE2OWUwMmQ5MmMxMTQwNTMwNDhiYzcwM2U5ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioHJ0UBo+4cG6TJ2lkx/ddk0DxRE
qUMlW2wW2hhemqwBA3LhIkGSKcT4nI3eCidK14zDf78LxdbwuRtVJTe7MdIiWYqt
duqGuGGM+FBfwmq97P/6E/Oy4+gZ8yrHpdnf9AjhvbOCYNT2zM8UiEcEAcbTGlBj
nx5i1dZ5MTCHCzg5K839zCq22qV79Tiv1qIwRn0lIid3O4+wmyE/yCtRbbRi4u8q
+f6nMg+zFAvrgDopK9s8K1juMhFt1dF4EW2DM/glWdd2czH/xhXAUdefgDY59fZp
sVLZMinTySTKfRPBhKWo5VuPtrdIcB5fVVlaYtigR3X9v+6DDQ66afCDiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCflQa5mUWngLZLBFAUwSLxwPp6KMB8GA1UdIwQY
MBaAFOGH1XlNCuirhW6gwmEHcgrNRG06MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlmVmVVMEs2S3VGYnFEQ1lRZHlDczFFYlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2NjZDQtZWEyYi00OWVlLTliYWYt
MjJmYjM5OTFkMmFhLzEvSi1WQnJtWlJhZUF0a3NFVUJUQkl2SEEtbm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hY2NjZDQtZWEyYi00OWVlLTliYWYtMjJmYjM5OTFkMmFh
LzEvNFlmVmVVMEs2S3VGYnFEQ1lRZHlDczFFYlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufEQMA0G
CSqGSIb3DQEBCwUAA4IBAQAAxJx2oe/rw9xmloaC3odyKHYqof6t+i4itdLtq0/a
wU57KgLk//RLen6QMjQsskWsatbLwHg+fMC32ll7t9hO5e9OS0RsfjtgTbsQYimv
9Whk73tGxvGBNvWyzKd/mbUo3fC35QhgYVkEK2sZa4WUVHZNzvU4irrh2I3Khgh7
vifVP3Sc3Za8E3WnR4YPA4YgQ9lgy61QHNgVV37Mr93UZg0ze8XJjQHvIYsRXPyW
PJyT3FNEauDeNqdMystYn7F6dchFhaaFomK2trDXRccG/3Bpvt3WCGxI62E/UKDK
4+DQU+lIpUwstnGqtZ70NUOjUyOAxx7gO1WwLct6k6A2
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:47 2024 by rpki-client on console-fra.rpki-client.org