Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xCAlHkEwgc23bkiGaKge7XYf3Zk.roa
File: xCAlHkEwgc23bkiGaKge7XYf3Zk.roa (raw, json)
Hash identifier: vuo4a43MGh/Uurcrw5c20k6ShB97SIJbrSfW+3leEME=
Subject key identifier: C4:20:25:1E:41:30:81:CD:B7:6E:48:86:68:A8:1E:ED:76:1F:DD:99
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5EDE6D481366DC1BBFBBAB52B30A
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xCAlHkEwgc23bkiGaKge7XYf3Zk.roa
Signing time: Sun 01 Jan 2023 08:54:45 +0000
ROA not before: Sun 01 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 185.180.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5e:de:6d:48:13:66:dc:1b:bf:bb:ab:52:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c420251e413081cdb76e488668a81eed761fdd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:f6:ea:76:fc:91:05:8d:01:dc:40:c1:2d:
0a:1a:58:c2:60:c4:49:54:09:75:0e:3c:de:7a:2b:
3b:1d:d7:05:8e:b7:0a:3e:59:36:c1:1c:c0:1d:0a:
f9:df:7f:53:dc:27:cd:f0:8e:fe:b2:6a:91:53:11:
13:03:d0:ba:aa:d6:08:08:29:8e:84:7e:6b:c4:bf:
fb:cf:6d:00:be:00:ce:d4:14:30:af:a4:16:1e:85:
d9:4c:6c:78:b0:b1:01:ca:2a:24:12:30:eb:25:90:
9b:d1:84:40:db:56:d0:28:c8:47:19:07:66:b0:05:
cc:ae:67:fe:f8:11:0a:06:cd:67:af:46:25:bb:d4:
37:ac:7d:a6:59:3e:80:d7:02:3b:fd:b0:96:33:44:
4a:ab:08:61:5b:ed:7f:d9:e4:db:1f:42:bd:95:71:
90:76:8e:85:ba:28:a1:29:de:1a:f2:e6:46:81:01:
69:85:b2:c6:6c:3a:32:17:59:56:d6:22:c5:85:66:
22:fc:aa:aa:73:bd:ac:44:c3:61:bd:22:2e:b8:e7:
0e:d6:48:fe:0e:81:e4:d7:be:bf:06:71:6c:8d:6b:
50:f6:cd:ac:c2:40:fe:b0:7e:b2:ea:31:73:ab:91:
ce:35:c7:ff:2f:40:ab:f2:ca:e1:81:ce:e1:07:7c:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:25:1E:41:30:81:CD:B7:6E:48:86:68:A8:1E:ED:76:1F:DD:99
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xCAlHkEwgc23bkiGaKge7XYf3Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.128.0/22
Signature Algorithm: sha256WithRSAEncryption
75:03:66:c1:d1:d6:3d:49:2c:6a:9c:c9:30:eb:95:f8:c4:66:
c4:2d:e4:60:64:30:95:4b:2a:7f:9f:98:9e:77:4b:fa:93:4a:
58:53:26:e0:da:54:27:83:5b:1b:b2:36:6d:33:2a:2d:80:80:
7a:40:83:79:6b:a5:57:21:3a:15:7c:92:d2:02:70:c3:41:94:
20:27:8d:29:73:35:ba:6a:52:52:6e:66:71:f5:d6:38:18:3a:
bf:42:b6:34:d2:19:d8:7e:43:14:fc:08:f1:d5:2e:bc:3f:be:
c2:ab:91:36:af:0a:ae:f8:2d:e5:1d:7b:ba:84:31:db:ef:57:
9e:b8:0c:c4:55:cd:1a:37:24:fc:68:25:d4:75:a7:13:17:54:
3d:78:cd:81:48:b7:98:5a:04:4f:ce:c2:58:5c:92:c6:22:6c:
2e:27:ec:ad:d0:6b:ab:31:61:cf:bb:50:2f:2e:5b:cc:db:72:
0c:e0:d2:55:26:07:39:67:d5:dd:99:99:a2:b0:62:cc:4a:49:
ee:b0:a2:0d:57:3f:9d:13:bb:cb:00:df:6c:78:3e:38:9d:58:
27:f5:9a:56:eb:58:d8:c5:46:6c:97:02:d4:bd:aa:23:f2:94:
be:f5:ab:00:d1:3e:36:7e:b7:57:45:b1:0b:43:63:5e:54:ce:
72:2e:08:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsil7ebUgTZtwbv7urUrMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTAxMDg1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDIwMjUxZTQxMzA4MWNkYjc2ZTQ4ODY2OGE4MWVlZDc2MWZkZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaz26nb8kQWNAdxAwS0KGljCYMRJ
VAl1Djzeeis7HdcFjrcKPlk2wRzAHQr5339T3CfN8I7+smqRUxETA9C6qtYICCmO
hH5rxL/7z20AvgDO1BQwr6QWHoXZTGx4sLEByiokEjDrJZCb0YRA21bQKMhHGQdm
sAXMrmf++BEKBs1nr0Ylu9Q3rH2mWT6A1wI7/bCWM0RKqwhhW+1/2eTbH0K9lXGQ
do6FuiihKd4a8uZGgQFphbLGbDoyF1lW1iLFhWYi/Kqqc72sRMNhvSIuuOcO1kj+
DoHk176/BnFsjWtQ9s2swkD+sH6y6jFzq5HONcf/L0Cr8srhgc7hB3xJGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQgJR5BMIHNt25IhmioHu12H92ZMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEveENBbEhrRXdnYzIzYmtpR2FLZ2U3WFlmM1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubSAMA0G
CSqGSIb3DQEBCwUAA4IBAQB1A2bB0dY9SSxqnMkw65X4xGbELeRgZDCVSyp/n5ie
d0v6k0pYUybg2lQng1sbsjZtMyotgIB6QIN5a6VXIToVfJLSAnDDQZQgJ40pczW6
alJSbmZx9dY4GDq/QrY00hnYfkMU/Ajx1S68P77Cq5E2rwqu+C3lHXu6hDHb71ee
uAzEVc0aNyT8aCXUdacTF1Q9eM2BSLeYWgRPzsJYXJLGImwuJ+yt0GurMWHPu1Av
LlvM23IM4NJVJgc5Z9XdmZmisGLMSknusKINVz+dE7vLAN9seD44nVgn9ZpW61jY
xUZslwLUvaoj8pS+9asA0T42frdXRbELQ2NeVM5yLghh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org