Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/1UdPmK9CxmfwtJTz2I9yp2AVk9M.roa
File: 1UdPmK9CxmfwtJTz2I9yp2AVk9M.roa (raw, json)
Hash identifier: XxjQI66hHxe9iToPHGBMtMV/jSs9WTdt7KxddkYwQC0=
Subject key identifier: D5:47:4F:98:AF:42:C6:67:F0:B4:94:F3:D8:8F:72:A7:60:15:93:D3
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 01856CAF395DA1A00E5BCF11AFDC2EEDC57A
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/1UdPmK9CxmfwtJTz2I9yp2AVk9M.roa
Signing time: Sun 01 Jan 2023 09:35:00 +0000
ROA not before: Sun 01 Jan 2023 09:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62254
IP address blocks: 185.41.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:39:5d:a1:a0:0e:5b:cf:11:af:dc:2e:ed:c5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jan 1 09:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5474f98af42c667f0b494f3d88f72a7601593d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:13:d7:29:a5:34:b1:08:85:bf:53:a2:67:
09:ef:95:ab:11:a5:32:52:b7:62:85:42:0e:76:9f:
33:8f:cf:a6:fe:e5:f2:de:5f:8e:69:b4:5e:2f:c0:
51:aa:9b:99:e7:9a:05:d3:b5:e6:83:d4:de:4c:ae:
23:97:e2:42:a7:09:9a:82:3f:4b:84:42:b8:79:2c:
fa:f0:33:a3:ff:35:fc:d8:d6:cb:a1:48:96:98:44:
fe:60:9b:90:1e:19:f8:2a:3a:29:60:e9:30:2a:90:
4b:02:cc:3e:66:a9:3b:d0:d5:8d:3f:03:47:c1:18:
fb:51:db:30:8e:ac:1f:b1:b4:5e:d7:72:87:71:81:
f9:cc:48:45:7b:ee:26:2d:aa:fb:cd:3f:fc:c7:48:
ee:5b:53:f1:df:e6:6c:72:f8:8d:0b:7f:2d:9f:8e:
db:cc:ce:f0:8a:06:29:1a:ef:e4:66:39:3c:69:f2:
d1:aa:42:86:f4:e9:9f:f1:fa:44:ce:6b:6e:1b:01:
fd:67:54:57:a7:2c:af:d5:01:01:23:e5:1b:ed:ec:
ad:89:ef:52:de:dd:16:9a:7d:55:44:76:e2:50:e8:
c1:31:ac:66:dc:f4:98:db:0e:73:e6:15:c0:c1:45:
61:ee:4e:d4:43:68:05:09:26:7a:62:56:1d:07:7b:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:4F:98:AF:42:C6:67:F0:B4:94:F3:D8:8F:72:A7:60:15:93:D3
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/1UdPmK9CxmfwtJTz2I9yp2AVk9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.148.0/22
Signature Algorithm: sha256WithRSAEncryption
48:67:7f:d6:ee:05:c7:33:7d:d2:f8:b8:b8:92:58:e7:d5:0a:
3e:6f:ff:05:82:96:0b:03:c4:0a:3f:41:38:51:75:45:d8:40:
78:5f:6c:37:52:a0:62:eb:d2:2a:47:f8:a8:9a:a2:59:5e:c5:
66:cc:97:39:e5:b4:ac:8b:63:75:db:41:e5:45:7f:f2:83:9d:
0f:3f:4a:46:dd:4c:48:c5:71:02:71:21:cb:eb:0a:9e:e5:b1:
57:99:e1:32:9c:df:51:f0:8b:ee:a1:6d:3c:a4:63:dd:99:f0:
07:ca:72:c4:29:09:12:c6:be:73:c1:65:0c:fe:1d:2a:02:6f:
9e:d1:b0:3d:97:d3:b2:16:76:47:3c:c2:1c:7c:20:e7:ce:de:
ca:64:45:69:1b:78:f6:4e:ef:39:72:24:1b:ad:19:f6:0f:8a:
71:82:07:ae:81:09:7c:bb:2b:30:e1:cf:e1:a3:7f:54:76:5e:
2e:23:e7:25:42:36:07:02:57:fe:4a:63:9a:a8:fd:cf:17:a4:
07:2e:54:24:93:90:7f:c2:a4:8b:90:8b:9b:33:4b:eb:d7:e5:
34:cb:51:9e:d8:fa:5b:38:74:2f:34:c4:12:2c:3f:a9:70:32:
41:1f:cc:ea:d3:0d:c6:e8:ae:0d:68:39:4c:5d:d6:48:4a:1a:
2f:d2:13:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrzldoaAOW88Rr9wu7cV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz
ZWM1YzIwHhcNMjMwMTAxMDkzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQ3NGY5OGFmNDJjNjY3ZjBiNDk0ZjNkODhmNzJhNzYwMTU5M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYT1ymlNLEIhb9TomcJ75WrEaUy
UrdihUIOdp8zj8+m/uXy3l+OabReL8BRqpuZ55oF07Xmg9TeTK4jl+JCpwmagj9L
hEK4eSz68DOj/zX82NbLoUiWmET+YJuQHhn4KjopYOkwKpBLAsw+Zqk70NWNPwNH
wRj7UdswjqwfsbRe13KHcYH5zEhFe+4mLar7zT/8x0juW1Px3+ZscviNC38tn47b
zM7wigYpGu/kZjk8afLRqkKG9Omf8fpEzmtuGwH9Z1RXpyyv1QEBI+Ub7eytie9S
3t0Wmn1VRHbiUOjBMaxm3PSY2w5z5hXAwUVh7k7UQ2gFCSZ6YlYdB3uIxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVHT5ivQsZn8LSU89iPcqdgFZPTMB8GA1UdIwQY
MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt
MzA1NjU4ZjkxNjM1LzEvMVVkUG1LOUN4bWZ3dEpUejJJOXlwMkFWazlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1
LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSmUMA0G
CSqGSIb3DQEBCwUAA4IBAQBIZ3/W7gXHM33S+Li4kljn1Qo+b/8FgpYLA8QKP0E4
UXVF2EB4X2w3UqBi69IqR/iomqJZXsVmzJc55bSsi2N120HlRX/yg50PP0pG3UxI
xXECcSHL6wqe5bFXmeEynN9R8IvuoW08pGPdmfAHynLEKQkSxr5zwWUM/h0qAm+e
0bA9l9OyFnZHPMIcfCDnzt7KZEVpG3j2Tu85ciQbrRn2D4pxggeugQl8uysw4c/h
o39Udl4uI+clQjYHAlf+SmOaqP3PF6QHLlQkk5B/wqSLkIubM0vr1+U0y1Ge2Ppb
OHQvNMQSLD+pcDJBH8zq0w3G6K4NaDlMXdZIShov0hNN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:39 2024 by rpki-client on console-ams.rpki-client.org