Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x0FtprdqAIkEzlwgUkPdonLWRUg.roa
File: x0FtprdqAIkEzlwgUkPdonLWRUg.roa (raw, json)
Hash identifier: agksmVjvN/XSnjC0M5N7o2mJV4hGiOMzXguxpG6R/xk=
Subject key identifier: C7:41:6D:A6:B7:6A:00:89:04:CE:5C:20:52:43:DD:A2:72:D6:45:48
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01879FFF4D959C5C256692EDB52FD1C778F2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x0FtprdqAIkEzlwgUkPdonLWRUg.roa
Signing time: Thu 20 Apr 2023 18:48:41 +0000
ROA not before: Thu 20 Apr 2023 18:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Apr 2023 08:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:ff:4d:95:9c:5c:25:66:92:ed:b5:2f:d1:c7:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 20 18:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7416da6b76a008904ce5c205243dda272d64548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:ee:4f:ce:32:a2:d8:86:13:fb:2d:86:78:
ee:d5:61:40:16:92:80:0b:d3:88:71:53:b4:f3:fc:
d3:91:8c:e1:6c:df:be:29:8d:11:f9:98:f3:33:cf:
42:ba:1c:7f:ab:be:ed:95:b8:30:c3:32:ec:de:82:
a9:4d:b2:f4:3e:ab:33:fa:0e:25:32:3e:12:e4:7f:
8a:80:55:9c:4c:79:b9:37:44:47:fc:cc:6a:75:4d:
de:87:b9:a5:f0:1c:f7:b0:b1:ab:1b:90:66:2c:ba:
ce:df:a6:e2:be:e7:38:83:ba:f5:ff:15:a4:ec:1b:
31:c1:ba:9c:0a:9f:de:69:47:b2:70:2b:24:b9:76:
97:46:80:ad:46:e7:38:25:86:f1:00:89:79:bb:66:
d1:2d:20:8b:23:06:6b:1f:ec:13:ed:e7:38:da:f8:
61:cb:76:97:f9:15:35:a2:fa:7c:b5:88:7f:0b:e7:
6a:70:a7:4f:7f:8f:51:10:89:bc:07:96:ee:a5:5f:
d8:8a:74:54:a7:a5:51:3d:0c:00:f9:c7:f0:f6:13:
cc:19:66:35:7d:1f:18:94:ba:87:5d:6f:50:97:2a:
d6:c0:1d:54:e4:8f:00:14:9e:ac:fd:fd:c7:c0:f8:
f3:f9:5c:5a:2b:12:34:fe:f2:e7:5d:da:bf:bf:95:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:6D:A6:B7:6A:00:89:04:CE:5C:20:52:43:DD:A2:72:D6:45:48
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x0FtprdqAIkEzlwgUkPdonLWRUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:64:bb:2a:dd:d3:ff:7c:fa:60:c7:dd:6b:2f:83:05:0a:8a:
b7:ac:39:77:6f:db:7f:58:2f:50:6a:7f:fc:0d:10:16:46:f3:
73:e7:23:07:90:1d:7e:24:40:15:8a:7d:b7:05:27:3f:20:70:
64:df:44:f6:4d:5c:31:f6:ec:68:e2:e7:aa:fa:5b:11:ae:1c:
d8:4b:fd:a9:06:b6:2e:32:3d:96:63:88:cb:68:d9:7a:69:b9:
96:a2:2e:5a:7d:88:c4:1c:60:d9:1d:1d:08:cd:90:67:cd:f0:
d9:ed:92:87:7e:4d:67:67:ba:0c:67:7a:19:e0:77:d2:80:d6:
d6:16:2a:5e:63:ca:d5:06:59:15:63:9e:d4:cb:be:72:76:93:
de:a2:45:61:92:d9:c8:d0:61:82:c1:76:9c:5d:a3:8a:f6:5a:
cb:b8:26:42:0e:b5:65:09:87:74:22:e3:89:b1:77:b2:7c:e9:
7e:1f:da:3f:df:3f:24:d6:77:3d:e1:d8:b1:d5:ff:f0:1d:a1:
ac:fa:7f:51:f7:a9:8f:e3:d0:92:88:95:a0:b1:f0:c8:77:77:
d7:e8:ba:f1:1f:c1:cb:30:32:10:ce:d2:66:4d:16:18:a9:0b:
8d:86:1d:16:3d:f6:cd:df:22:f9:28:e9:a0:ae:eb:1d:83:ba:
93:d7:2e:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYef/02VnFwlZpLttS/Rx3jyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNDIwMTg0ODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzQxNmRhNmI3NmEwMDg5MDRjZTVjMjA1MjQzZGRhMjcyZDY0NTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhInuT84yotiGE/sthnju1WFAFpKA
C9OIcVO08/zTkYzhbN++KY0R+ZjzM89Cuhx/q77tlbgwwzLs3oKpTbL0Pqsz+g4l
Mj4S5H+KgFWcTHm5N0RH/MxqdU3eh7ml8Bz3sLGrG5BmLLrO36bivuc4g7r1/xWk
7BsxwbqcCp/eaUeycCskuXaXRoCtRuc4JYbxAIl5u2bRLSCLIwZrH+wT7ec42vhh
y3aX+RU1ovp8tYh/C+dqcKdPf49REIm8B5bupV/YinRUp6VRPQwA+cfw9hPMGWY1
fR8YlLqHXW9QlyrWwB1U5I8AFJ6s/f3HwPjz+VxaKxI0/vLnXdq/v5UacQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdBbaa3agCJBM5cIFJD3aJy1kVIMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEveDBGdHByZHFBSWtFemx3Z1VrUGRvbkxXUlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueGqMA0G
CSqGSIb3DQEBCwUAA4IBAQBPZLsq3dP/fPpgx91rL4MFCoq3rDl3b9t/WC9Qan/8
DRAWRvNz5yMHkB1+JEAVin23BSc/IHBk30T2TVwx9uxo4ueq+lsRrhzYS/2pBrYu
Mj2WY4jLaNl6abmWoi5afYjEHGDZHR0IzZBnzfDZ7ZKHfk1nZ7oMZ3oZ4HfSgNbW
FipeY8rVBlkVY57Uy75ydpPeokVhktnI0GGCwXacXaOK9lrLuCZCDrVlCYd0IuOJ
sXeyfOl+H9o/3z8k1nc94dix1f/wHaGs+n9R96mP49CSiJWgsfDId3fX6LrxH8HL
MDIQztJmTRYYqQuNhh0WPfbN3yL5KOmgrusdg7qT1y62
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:36 2024 by rpki-client on console-ams.rpki-client.org