Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/H96KhzzjO1pQRB0eXwZ9LRaKV_A.roa
File: H96KhzzjO1pQRB0eXwZ9LRaKV_A.roa (raw, json)
Hash identifier: 7TFQNE/r8J79qbJanKX7wv2WS1d/S+LBQbeT4Ys9l9s=
Subject key identifier: 1F:DE:8A:87:3C:E3:3B:5A:50:44:1D:1E:5F:06:7D:2D:16:8A:57:F0
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 01856E0AF47C837C09D2779594A9E224A1F6
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/H96KhzzjO1pQRB0eXwZ9LRaKV_A.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212321
IP address blocks: 185.217.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f4:7c:83:7c:09:d2:77:95:94:a9:e2:24:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fde8a873ce33b5a50441d1e5f067d2d168a57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:dc:b6:c7:ca:5c:ba:dc:99:01:57:8e:35:
01:59:b5:87:54:87:8f:09:a7:b6:00:a8:fa:ff:3a:
68:2e:00:27:66:9e:56:6d:a4:b8:6b:13:84:98:f3:
5c:e1:3a:05:b4:78:a2:83:2f:f5:b0:32:16:7c:55:
11:3d:bc:b4:17:53:95:95:1b:cb:2e:09:55:e7:fe:
a4:00:3b:b9:d2:06:37:4e:56:98:a7:52:99:4a:13:
f7:52:19:dc:cd:90:2f:bd:57:58:75:dd:81:e8:6e:
49:64:94:b4:0a:a2:7f:67:a0:79:8e:21:46:4a:09:
4e:58:82:90:27:a7:db:23:73:5f:ea:a1:16:8d:02:
e9:1a:e8:82:7d:4b:a5:5f:86:7a:bb:4e:44:f4:c9:
2b:71:1b:79:8a:bd:b3:9e:e3:9a:d3:b0:b1:d8:dc:
ac:cd:d0:3b:7a:0e:7d:3d:77:64:58:70:4a:48:0b:
d0:dc:7a:44:d6:3c:8b:9a:93:db:a0:bd:4c:6f:e1:
7f:da:bc:ec:7a:8d:f6:4c:3f:9a:a3:3d:14:73:69:
20:41:28:2e:67:bb:67:3f:f5:61:9d:8b:95:c1:e4:
92:35:3e:04:d5:70:de:45:58:5c:41:75:26:55:c3:
24:38:c1:0e:93:ea:4f:26:96:4d:c3:d1:3c:29:3c:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DE:8A:87:3C:E3:3B:5A:50:44:1D:1E:5F:06:7D:2D:16:8A:57:F0
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/H96KhzzjO1pQRB0eXwZ9LRaKV_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:69:d0:07:8d:a2:e0:1d:12:26:5f:ce:7e:dd:f5:51:0d:
ea:95:3a:0a:41:52:f6:08:2b:16:d6:e4:67:f5:aa:15:98:1e:
e8:e2:94:79:57:c4:57:1e:a7:0b:72:e9:a3:a1:e0:3b:4e:d5:
1d:f8:bb:ca:19:a1:36:b3:b7:4e:38:9b:22:ef:51:c8:65:43:
1c:01:65:7a:e1:75:da:85:90:76:b3:a3:29:0d:64:2b:c2:ad:
d9:99:bd:1c:c1:3e:c6:9e:3e:52:55:b1:f4:8a:6c:ee:90:88:
60:6a:69:01:26:41:4e:d5:f6:f0:1b:4e:05:25:8d:7e:43:dc:
57:ec:d7:ff:57:82:ec:4f:ca:4f:8a:fa:a5:8c:4d:48:f8:cf:
45:fc:8c:c9:e0:3c:90:ff:60:0e:97:c3:e5:b8:ee:f5:ed:d3:
81:5d:7f:82:aa:fe:0c:af:4d:72:56:a2:e3:5e:d0:ae:66:fe:
2f:9d:d6:b0:00:7d:24:4d:95:44:02:15:f5:9c:8d:ba:94:2a:
b5:a9:5f:7c:ed:e9:2f:bc:23:92:ae:ad:14:15:68:7f:4c:fb:
a2:b9:d0:50:71:5c:1d:c6:ae:72:9e:3d:ce:25:a6:47:d3:65:
d5:92:b1:a0:cf:d2:59:50:83:0e:04:32:d9:f7:35:51:12:f3:
db:07:24:2d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVuCvR8g3wJ0neVlKniJKH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDJiYWM3Yjc5YTMxMDllOWJlM2RmZTRmMDZkNTg1YmI5
ZjkwNTEwHhcNMjMwMTAxMTU1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmRlOGE4NzNjZTMzYjVhNTA0NDFkMWU1ZjA2N2QyZDE2OGE1N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYLctsfKXLrcmQFXjjUBWbWHVIeP
Cae2AKj6/zpoLgAnZp5WbaS4axOEmPNc4ToFtHiigy/1sDIWfFURPby0F1OVlRvL
LglV5/6kADu50gY3TlaYp1KZShP3UhnczZAvvVdYdd2B6G5JZJS0CqJ/Z6B5jiFG
SglOWIKQJ6fbI3Nf6qEWjQLpGuiCfUulX4Z6u05E9MkrcRt5ir2znuOa07Cx2Nys
zdA7eg59PXdkWHBKSAvQ3HpE1jyLmpPboL1Mb+F/2rzseo32TD+aoz0Uc2kgQSgu
Z7tnP/VhnYuVweSSNT4E1XDeRVhcQXUmVcMkOMEOk+pPJpZNw9E8KTwTLQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB/eioc84ztaUEQdHl8GfS0WilfwMB8GA1UdIwQY
MBaAFPsCuse3mjEJ6b49/k8G1YW7n5BRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SzZ4N2VhTVFucHZqMy1Ud2JWaGJ1ZmtGRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1
LTQ5NTBmODZjYmI1Yi8xL0g5NktoenpqTzFwUVJCMGVYd1o5TFJhS1ZfQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1LTQ5NTBmODZjYmI1
Yi8xLzEtd0s2eDdlYU1RbnB2ajMtVHdiVmhidWZrRkUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC52Y4w
DQYJKoZIhvcNAQELBQADggEBAErmadAHjaLgHRImX85+3fVRDeqVOgpBUvYIKxbW
5Gf1qhWYHujilHlXxFcepwty6aOh4DtO1R34u8oZoTazt044myLvUchlQxwBZXrh
ddqFkHazoykNZCvCrdmZvRzBPsaePlJVsfSKbO6QiGBqaQEmQU7V9vAbTgUljX5D
3Ffs1/9XguxPyk+K+qWMTUj4z0X8jMngPJD/YA6Xw+W47vXt04Fdf4Kq/gyvTXJW
ouNe0K5m/i+d1rAAfSRNlUQCFfWcjbqUKrWpX3zt6S+8I5KurRQVaH9M+6K50FBx
XB3GrnKePc4lpkfTZdWSsaDP0llQgw4EMtn3NVES89sHJC0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-ams.rpki-client.org