Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jWpUQWUFnzIsv-a4nQgvQ8YJvNY.roa
File: jWpUQWUFnzIsv-a4nQgvQ8YJvNY.roa (raw, json)
Hash identifier: fxyjmxaCEfAQXoZWPDOaC+Q8GI7cF4+MsJGLjUNg6hg=
Subject key identifier: 8D:6A:54:41:65:05:9F:32:2C:BF:E6:B8:9D:08:2F:43:C6:09:BC:D6
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB949FD231E43BA4A8DB7CB4D41717
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jWpUQWUFnzIsv-a4nQgvQ8YJvNY.roa
Signing time: Sun 01 Jan 2023 19:25:13 +0000
ROA not before: Sun 01 Jan 2023 19:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:94:9f:d2:31:e4:3b:a4:a8:db:7c:b4:d4:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d6a544165059f322cbfe6b89d082f43c609bcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:6f:93:88:47:ef:85:f7:f8:b7:dc:e4:c8:
7c:a8:6d:f1:1d:04:06:d4:5e:63:d1:96:d5:2e:2a:
17:4d:74:dc:d5:5e:dc:c6:2e:09:55:8c:69:3e:63:
eb:e9:68:28:5c:7f:71:fc:82:a6:c5:df:ed:30:32:
26:cf:70:3c:8f:4b:e1:16:f9:53:7b:b8:b2:90:f2:
47:95:02:e8:4b:68:3e:0f:c2:63:02:86:5d:07:e6:
b6:59:cc:31:0b:1d:88:a1:d1:12:ea:ba:50:da:5b:
32:e2:f3:c0:65:2f:6b:a4:a7:21:f8:8c:54:fc:dc:
c3:b6:a3:23:e6:07:ac:90:d3:6d:9c:45:65:65:4b:
a4:70:d3:48:8b:e3:e8:50:1b:91:94:b7:34:97:ef:
e7:8c:7b:42:e9:06:1e:44:3a:5d:9b:27:7e:29:21:
45:26:b3:24:14:8e:ea:5f:23:b9:35:d0:63:3d:9b:
d1:c5:37:bb:26:80:74:6c:75:54:b0:08:78:3d:0a:
11:c4:3b:53:12:2a:8a:f5:19:d8:72:c3:3b:5a:18:
6e:b3:13:90:09:bd:b9:38:c6:56:9c:12:fa:27:c7:
da:cd:34:63:c8:c3:c0:ad:fd:e9:a5:a0:70:eb:7a:
8a:c3:36:8f:22:82:9b:db:f4:dc:9a:33:2f:b0:a9:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:54:41:65:05:9F:32:2C:BF:E6:B8:9D:08:2F:43:C6:09:BC:D6
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jWpUQWUFnzIsv-a4nQgvQ8YJvNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:67:ee:0d:d1:4f:91:b6:5b:b1:36:ab:99:45:78:80:94:a5:
ec:ad:f3:5d:f9:e4:d9:76:24:4e:55:7c:97:c9:46:aa:fe:6a:
0d:fc:5f:4b:f0:a7:90:6d:0f:dc:42:2f:d9:65:e7:0b:12:89:
ac:02:2b:ef:b3:f3:8d:c5:4c:41:44:32:db:e4:9d:04:84:9f:
90:26:09:7c:d7:81:59:a8:d6:7b:86:cf:b6:63:be:16:d8:a5:
21:e2:6e:40:0c:cb:b2:9b:82:74:7a:d3:1f:d3:46:6d:09:6d:
40:6b:96:ab:0b:58:6a:db:c9:bf:40:3b:5a:7d:f5:49:f0:ac:
08:84:62:2a:85:b6:9c:88:7a:52:4c:67:4a:8f:79:60:b3:c1:
5b:44:00:87:84:55:92:69:16:23:1a:b9:a1:46:ae:3a:96:c7:
43:9e:3d:70:6d:b5:64:bc:81:e2:dd:ea:38:c5:bb:e6:20:81:
7e:d5:a5:dc:83:81:f5:6e:76:dc:1c:67:65:f4:8c:c0:31:69:
00:5d:d7:63:a1:08:e1:c7:a2:ff:af:48:21:a0:da:85:9f:1c:
2b:1f:02:ac:12:02:d1:63:ab:d9:ce:1c:4f:c9:38:2e:3c:ab:
51:c2:50:00:2b:85:5d:cb:5c:26:4e:dd:f9:7b:97:79:67:1f:
f0:f5:20:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy5Sf0jHkO6So23y01BcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwMTAxMTkyNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDZhNTQ0MTY1MDU5ZjMyMmNiZmU2Yjg5ZDA4MmY0M2M2MDliY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE9vk4hH74X3+Lfc5Mh8qG3xHQQG
1F5j0ZbVLioXTXTc1V7cxi4JVYxpPmPr6WgoXH9x/IKmxd/tMDImz3A8j0vhFvlT
e7iykPJHlQLoS2g+D8JjAoZdB+a2WcwxCx2IodES6rpQ2lsy4vPAZS9rpKch+IxU
/NzDtqMj5geskNNtnEVlZUukcNNIi+PoUBuRlLc0l+/njHtC6QYeRDpdmyd+KSFF
JrMkFI7qXyO5NdBjPZvRxTe7JoB0bHVUsAh4PQoRxDtTEiqK9RnYcsM7WhhusxOQ
Cb25OMZWnBL6J8fazTRjyMPArf3ppaBw63qKwzaPIoKb2/TcmjMvsKmDHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1qVEFlBZ8yLL/muJ0IL0PGCbzWMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvaldwVVFXVUZueklzdi1hNG5RZ3ZROFlKdk5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRrMA0G
CSqGSIb3DQEBCwUAA4IBAQB8Z+4N0U+RtluxNquZRXiAlKXsrfNd+eTZdiROVXyX
yUaq/moN/F9L8KeQbQ/cQi/ZZecLEomsAivvs/ONxUxBRDLb5J0EhJ+QJgl814FZ
qNZ7hs+2Y74W2KUh4m5ADMuym4J0etMf00ZtCW1Aa5arC1hq28m/QDtaffVJ8KwI
hGIqhbaciHpSTGdKj3lgs8FbRACHhFWSaRYjGrmhRq46lsdDnj1wbbVkvIHi3eo4
xbvmIIF+1aXcg4H1bnbcHGdl9IzAMWkAXddjoQjhx6L/r0ghoNqFnxwrHwKsEgLR
Y6vZzhxPyTguPKtRwlAAK4Vdy1wmTt35e5d5Zx/w9SC7
-----END CERTIFICATE-----
Generated at Sat Jul 22 08:52:53 2023 by rpki-client on console-fra.rpki-client.org