Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/_6wz0_VRjW7w9yos325vzAoFfQ4.roa
File: _6wz0_VRjW7w9yos325vzAoFfQ4.roa (raw, json)
Hash identifier: 7RhOj7Zzz1EKjwo01Tgwne2xmhPFHEh1s4Y8j0jIblI=
Subject key identifier: FF:AC:33:D3:F5:51:8D:6E:F0:F7:2A:2C:DF:6E:6F:CC:0A:05:7D:0E
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 01856F9DD7F5F046E3FEC1DF7F413DC9C0B3
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/_6wz0_VRjW7w9yos325vzAoFfQ4.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60903
IP address blocks: 185.128.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d7:f5:f0:46:e3:fe:c1:df:7f:41:3d:c9:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffac33d3f5518d6ef0f72a2cdf6e6fcc0a057d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:c0:c0:bd:c2:0a:5c:71:dc:23:42:bc:87:
71:c9:86:e7:13:cc:39:b8:33:35:9e:3e:29:25:db:
8a:fe:f6:20:67:40:5e:e2:5d:45:87:d9:a0:b6:eb:
c1:25:e5:9e:60:51:73:7d:e8:b5:ae:3b:47:d4:b5:
67:c9:3d:b2:36:f2:0d:f2:86:ec:6d:91:c8:e6:9e:
95:2f:a3:bb:c8:31:77:8f:2a:31:01:79:1e:d2:37:
05:85:63:52:94:32:d9:55:2e:1f:a8:04:6a:3b:f5:
30:1f:df:75:d3:4d:75:a8:5c:ec:2b:cb:a5:91:d1:
ff:8c:66:35:50:5f:64:91:02:0b:0e:e4:50:a6:60:
8f:4b:62:c1:62:1d:6b:81:36:60:0c:d0:24:d6:a0:
f7:df:66:c2:fb:22:a3:ce:d8:95:7e:50:a4:4b:4e:
4d:7f:45:e6:58:a4:6c:29:ad:22:d7:4f:d9:41:5f:
31:f3:a7:82:04:e0:3c:89:a0:f6:47:19:29:7e:43:
6a:47:2c:98:0b:b0:cc:5b:a4:a9:d7:4b:d2:44:63:
d4:4f:58:a4:67:4a:fe:b6:f2:41:34:4b:0b:19:d2:
62:88:14:56:6e:91:d2:01:56:82:db:fb:6b:69:a8:
16:10:2d:14:87:79:62:ff:bc:84:d5:5b:75:2a:d2:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:33:D3:F5:51:8D:6E:F0:F7:2A:2C:DF:6E:6F:CC:0A:05:7D:0E
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/_6wz0_VRjW7w9yos325vzAoFfQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:3d:2b:4f:08:49:6c:1e:72:47:72:fc:e0:fd:8c:e5:8b:e3:
5b:82:70:28:be:fa:f5:e2:1d:de:23:4a:3a:c5:57:b9:3e:58:
c6:80:e2:80:e6:39:00:04:d0:74:58:99:b9:cc:76:dc:cd:bb:
e5:9a:94:bd:30:eb:51:34:f1:00:24:e2:0c:02:44:bc:9b:9c:
60:80:da:72:6f:83:41:4f:a8:45:00:dc:ad:50:33:57:38:fb:
6e:bd:79:65:e2:c2:7a:19:ec:aa:6c:69:2f:e3:c1:6e:a8:24:
66:c7:14:d1:35:76:15:48:c8:fa:30:16:35:6e:09:7b:ca:3b:
b7:d2:12:69:e9:43:7e:ca:fd:30:90:a8:05:0d:c9:6d:d7:d2:
2d:78:1d:76:6e:67:62:92:e8:d2:7c:9f:e4:d3:b3:51:18:5c:
03:1e:de:4b:13:a4:de:e8:dd:33:8f:8f:81:f6:68:b6:ce:89:
b9:fd:ed:48:1f:a0:31:a2:c2:eb:74:3b:4a:bc:7a:0c:0c:ce:
9c:5b:3f:18:fe:a9:32:9e:0c:28:07:4f:ec:43:08:12:bf:2e:
83:cb:e3:6b:0e:38:0e:10:b7:f7:6c:21:bd:d4:6c:be:22:ef:
f6:74:6e:d9:58:fd:f0:84:3c:9a:3a:b5:75:86:90:18:36:03:
34:85:a3:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvndf18Ebj/sHff0E9ycCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTVjM2FjZTM2NmRiNDFiY2RjMjU2YzVkNWIzYmU0OTBh
NGY3NjEwHhcNMjMwMTAxMjMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFjMzNkM2Y1NTE4ZDZlZjBmNzJhMmNkZjZlNmZjYzBhMDU3ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvnAwL3CClxx3CNCvIdxyYbnE8w5
uDM1nj4pJduK/vYgZ0Be4l1Fh9mgtuvBJeWeYFFzfei1rjtH1LVnyT2yNvIN8obs
bZHI5p6VL6O7yDF3jyoxAXke0jcFhWNSlDLZVS4fqARqO/UwH9910011qFzsK8ul
kdH/jGY1UF9kkQILDuRQpmCPS2LBYh1rgTZgDNAk1qD332bC+yKjztiVflCkS05N
f0XmWKRsKa0i10/ZQV8x86eCBOA8iaD2RxkpfkNqRyyYC7DMW6Sp10vSRGPUT1ik
Z0r+tvJBNEsLGdJiiBRWbpHSAVaC2/traagWEC0Uh3li/7yE1Vt1KtLoWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+sM9P1UY1u8PcqLN9ub8wKBX0OMB8GA1UdIwQY
MBaAFA6Vw6zjZttBvNwlbF1bO+SQpPdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMt
ZjUzZTUxYzA5NzRmLzEvXzZ3ejBfVlJqVzd3OXlvczMyNXZ6QW9GZlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMtZjUzZTUxYzA5NzRm
LzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYCgMA0G
CSqGSIb3DQEBCwUAA4IBAQCCPStPCElsHnJHcvzg/Yzli+NbgnAovvr14h3eI0o6
xVe5PljGgOKA5jkABNB0WJm5zHbczbvlmpS9MOtRNPEAJOIMAkS8m5xggNpyb4NB
T6hFANytUDNXOPtuvXll4sJ6GeyqbGkv48FuqCRmxxTRNXYVSMj6MBY1bgl7yju3
0hJp6UN+yv0wkKgFDclt19IteB12bmdikujSfJ/k07NRGFwDHt5LE6Te6N0zj4+B
9mi2zom5/e1IH6AxosLrdDtKvHoMDM6cWz8Y/qkyngwoB0/sQwgSvy6Dy+NrDjgO
ELf3bCG91Gy+Iu/2dG7ZWP3whDyaOrV1hpAYNgM0haOy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:23 2024 by rpki-client on console-fra.rpki-client.org