Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1fdeuhQdG5EZafh5GH55HzvsYY.roa
File: y1fdeuhQdG5EZafh5GH55HzvsYY.roa (raw, json)
Hash identifier: aOPYskOaqr8xji/05SPCMRSUO2VNtIrQSEd99jcdPlQ=
Subject key identifier: CB:57:DD:7A:E8:50:74:6E:44:65:A7:E1:E4:61:F9:E4:7C:EF:B1:86
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7BA6E8889D3B5DB05E444F42F5D57
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1fdeuhQdG5EZafh5GH55HzvsYY.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207159
IP address blocks: 185.195.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ba:6e:88:89:d3:b5:db:05:e4:44:f4:2f:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb57dd7ae850746e4465a7e1e461f9e47cefb186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:b9:d7:7d:9f:2a:3f:9f:cb:7f:c3:32:fe:
df:02:cc:9c:57:2c:5f:e3:47:a1:2b:a4:fc:a6:69:
74:26:85:32:e3:fb:f2:2f:c0:e4:cf:00:10:62:db:
3e:5f:00:53:d3:a9:f0:cb:f7:62:53:fa:74:61:00:
50:4f:19:c2:5f:99:73:c8:72:5f:6c:f4:16:93:a0:
7d:4c:e3:ee:33:f4:10:0b:98:2f:9c:5a:48:a4:48:
52:5f:1a:ba:97:59:41:b3:6f:02:dc:84:a5:95:f9:
66:11:ad:43:91:b9:b5:79:57:ca:a5:7f:56:a5:0e:
58:59:68:44:f2:47:8e:85:ba:17:b5:4c:04:0b:50:
84:3a:45:35:47:91:70:4f:17:7d:f3:fb:8a:49:52:
c3:ec:40:36:c6:eb:f8:b9:29:4e:cb:34:f8:56:ca:
4a:68:c0:2f:8e:9c:c3:6e:1d:f0:ff:7d:6f:24:07:
fa:94:72:a6:04:7d:4a:81:79:7a:af:e3:7a:b7:5a:
0a:47:f9:40:8e:fc:5d:9e:0c:d7:32:23:1b:69:29:
cd:fe:47:d1:c4:9f:cd:8f:b7:40:29:32:13:92:b9:
d3:39:ae:8a:ee:b6:ff:85:cb:de:01:61:88:7c:0a:
9c:1d:8c:c6:7d:71:d9:9a:4d:31:71:aa:6e:a7:cf:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:DD:7A:E8:50:74:6E:44:65:A7:E1:E4:61:F9:E4:7C:EF:B1:86
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1fdeuhQdG5EZafh5GH55HzvsYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.184.0/22
Signature Algorithm: sha256WithRSAEncryption
96:76:f8:55:5d:cd:33:e9:80:b9:00:92:d6:a1:a7:31:7a:24:
50:b1:05:c9:a1:b4:1c:31:2d:2a:17:30:c0:7b:66:86:d3:d2:
97:c0:ef:ef:a1:6e:21:15:e9:72:bc:2c:a7:86:cf:23:e6:17:
65:5a:d0:f2:d9:31:69:a7:0e:8e:e1:32:36:40:ba:c8:14:de:
9b:d5:2b:29:cf:90:03:64:59:0a:03:00:ac:3f:12:be:a1:9d:
ae:5b:64:27:0a:1b:97:cc:2c:5f:0c:cc:37:3c:52:c6:90:e3:
04:8b:7d:dd:0c:4e:50:c8:e6:a6:6b:a2:ce:f1:2b:e7:af:ab:
bb:38:d9:3d:ea:70:e2:98:cf:89:5f:fa:2f:ad:63:0d:da:77:
1b:e7:81:a8:1b:c1:fd:44:c8:ac:61:3f:96:86:a6:8e:e0:b6:
4a:9a:55:de:2e:87:a0:fc:6a:bc:14:d3:16:91:8d:e4:c9:b0:
18:58:73:0d:33:32:e4:c5:cd:a4:c5:dc:fe:3f:ff:65:f4:6d:
df:25:f8:af:c0:14:91:37:82:9d:b3:49:20:b0:7d:b3:44:70:
66:a1:3b:15:62:f1:23:7c:b4:13:83:e2:04:3b:37:dc:cf:93:
ed:1a:db:2b:15:8b:4b:79:b5:a0:22:c0:a7:04:95:14:42:0d:
44:15:d4:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp7puiInTtdsF5ET0L11XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjU3ZGQ3YWU4NTA3NDZlNDQ2NWE3ZTFlNDYxZjllNDdjZWZiMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1y5132fKj+fy3/DMv7fAsycVyxf
40ehK6T8pml0JoUy4/vyL8DkzwAQYts+XwBT06nwy/diU/p0YQBQTxnCX5lzyHJf
bPQWk6B9TOPuM/QQC5gvnFpIpEhSXxq6l1lBs28C3ISllflmEa1Dkbm1eVfKpX9W
pQ5YWWhE8keOhboXtUwEC1CEOkU1R5FwTxd98/uKSVLD7EA2xuv4uSlOyzT4VspK
aMAvjpzDbh3w/31vJAf6lHKmBH1KgXl6r+N6t1oKR/lAjvxdngzXMiMbaSnN/kfR
xJ/Nj7dAKTITkrnTOa6K7rb/hcveAWGIfAqcHYzGfXHZmk0xcapup8/e5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtX3XroUHRuRGWn4eRh+eR877GGMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEveTFmZGV1aFFkRzVFWmFmaDVHSDU1SHp2c1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucO4MA0G
CSqGSIb3DQEBCwUAA4IBAQCWdvhVXc0z6YC5AJLWoacxeiRQsQXJobQcMS0qFzDA
e2aG09KXwO/voW4hFelyvCynhs8j5hdlWtDy2TFppw6O4TI2QLrIFN6b1Sspz5AD
ZFkKAwCsPxK+oZ2uW2QnChuXzCxfDMw3PFLGkOMEi33dDE5QyOama6LO8Svnr6u7
ONk96nDimM+JX/ovrWMN2ncb54GoG8H9RMisYT+WhqaO4LZKmlXeLoeg/Gq8FNMW
kY3kybAYWHMNMzLkxc2kxdz+P/9l9G3fJfivwBSRN4Kds0kgsH2zRHBmoTsVYvEj
fLQTg+IEOzfcz5PtGtsrFYtLebWgIsCnBJUUQg1EFdRX
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org