Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4ixjJPxSIUCZ3GM8szZSn6uNqY.roa
File: s4ixjJPxSIUCZ3GM8szZSn6uNqY.roa (raw, json)
Hash identifier: 4UJBHrcjzdnnGPS8oEePEbuUja+B+g53PqadldwJwVU=
Subject key identifier: B3:88:B1:8C:93:F1:48:85:02:67:71:8C:F2:CC:D9:4A:7E:AE:36:A6
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7C15D76EEDF9E759B656FA7D85747
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4ixjJPxSIUCZ3GM8szZSn6uNqY.roa
Signing time: Mon 02 Jan 2023 08:44:57 +0000
ROA not before: Mon 02 Jan 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209963
IP address blocks: 185.147.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c1:5d:76:ee:df:9e:75:9b:65:6f:a7:d8:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b388b18c93f148850267718cf2ccd94a7eae36a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:e5:57:86:b4:01:56:54:a3:43:22:a5:b6:
f0:13:bd:d0:90:df:65:b7:24:40:a8:59:c4:95:2c:
6e:f9:fd:4c:65:a2:dd:d2:18:2a:16:f8:e8:29:67:
2c:5d:60:da:20:34:66:3d:b9:54:4f:a0:35:ee:6a:
e2:ea:2a:a5:3a:57:f7:b6:00:6f:0c:a2:db:65:03:
2e:a0:7d:98:f6:ad:8e:a9:58:75:32:9c:67:e8:2c:
30:c2:03:77:99:46:0f:43:45:28:5b:f4:81:bd:23:
48:75:f7:3f:de:b6:be:3e:82:cd:ef:91:b1:75:a2:
b7:dd:a8:33:91:f8:73:b3:f9:c5:97:92:3b:ab:c8:
f0:e1:b3:48:b9:54:db:ae:17:6d:7e:7e:58:37:00:
67:69:c9:99:eb:de:5c:9f:0c:53:ef:b1:78:b9:c6:
80:3c:37:f4:12:e1:1b:ed:24:53:9f:9a:df:25:e1:
90:c4:33:1b:22:33:13:67:c9:fd:13:da:44:ee:f1:
68:b5:83:c8:c0:27:22:51:4c:43:b6:08:42:48:2f:
c3:fc:2a:7d:bf:57:a1:72:18:53:c3:da:2a:e2:80:
c6:7b:59:77:cb:71:84:95:f0:45:37:e7:82:82:38:
94:ae:29:10:87:67:94:91:8b:7a:d3:4c:70:8b:4d:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:B1:8C:93:F1:48:85:02:67:71:8C:F2:CC:D9:4A:7E:AE:36:A6
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4ixjJPxSIUCZ3GM8szZSn6uNqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.49.0/24
Signature Algorithm: sha256WithRSAEncryption
20:78:fc:67:c7:ed:e4:85:92:5c:c0:0e:8f:b3:5b:80:ff:60:
73:a2:eb:0f:84:66:69:68:9f:d9:34:31:98:59:9b:da:56:d8:
08:78:f1:a4:4e:de:f1:bd:ce:bd:db:ee:59:45:3a:7a:d1:09:
05:83:41:fa:de:96:c7:f0:bb:24:fb:0b:f8:63:87:7f:0f:82:
f5:58:9a:ec:28:4a:62:73:39:76:8a:56:5b:8a:cd:28:33:b0:
ec:08:83:e0:cb:f7:b5:9d:c4:28:05:91:6f:96:7d:ba:b4:aa:
ce:64:d0:e8:49:ce:e4:35:97:51:ee:6d:cf:f0:3e:fd:61:d8:
a3:02:04:d5:69:ac:16:cd:4e:65:c0:5c:bd:bb:04:3e:a7:51:
5d:13:44:dd:0d:08:51:de:b0:d4:5e:97:a0:fa:cd:59:eb:44:
06:46:17:d7:e5:e7:37:60:db:68:1f:cf:9f:91:03:76:26:2b:
9f:c5:ee:df:c3:06:0c:36:f8:83:59:57:d6:ce:fc:3c:a2:b7:
37:fa:12:20:df:92:fe:76:6c:d6:e7:20:95:2d:56:d9:bb:15:
c7:78:3f:67:da:a5:15:7e:93:f6:04:3c:3b:96:46:07:16:b4:
01:f1:ba:2e:cf:91:3e:ee:22:0c:a6:34:be:02:67:42:aa:f7:
19:46:d5:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp8Fddu7fnnWbZW+n2FdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzg4YjE4YzkzZjE0ODg1MDI2NzcxOGNmMmNjZDk0YTdlYWUzNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9HlV4a0AVZUo0MipbbwE73QkN9l
tyRAqFnElSxu+f1MZaLd0hgqFvjoKWcsXWDaIDRmPblUT6A17mri6iqlOlf3tgBv
DKLbZQMuoH2Y9q2OqVh1Mpxn6CwwwgN3mUYPQ0UoW/SBvSNIdfc/3ra+PoLN75Gx
daK33agzkfhzs/nFl5I7q8jw4bNIuVTbrhdtfn5YNwBnacmZ695cnwxT77F4ucaA
PDf0EuEb7SRTn5rfJeGQxDMbIjMTZ8n9E9pE7vFotYPIwCciUUxDtghCSC/D/Cp9
v1ehchhTw9oq4oDGe1l3y3GElfBFN+eCgjiUrikQh2eUkYt600xwi00oBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOIsYyT8UiFAmdxjPLM2Up+rjamMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvczRpeGpKUHhTSVVDWjNHTThzelpTbjZ1TnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZMxMA0G
CSqGSIb3DQEBCwUAA4IBAQAgePxnx+3khZJcwA6Ps1uA/2BzousPhGZpaJ/ZNDGY
WZvaVtgIePGkTt7xvc692+5ZRTp60QkFg0H63pbH8Lsk+wv4Y4d/D4L1WJrsKEpi
czl2ilZbis0oM7DsCIPgy/e1ncQoBZFvln26tKrOZNDoSc7kNZdR7m3P8D79Ydij
AgTVaawWzU5lwFy9uwQ+p1FdE0TdDQhR3rDUXpeg+s1Z60QGRhfX5ec3YNtoH8+f
kQN2Jiufxe7fwwYMNviDWVfWzvw8orc3+hIg35L+dmzW5yCVLVbZuxXHeD9n2qUV
fpP2BDw7lkYHFrQB8bouz5E+7iIMpjS+AmdCqvcZRtXZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org