Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/rIsIUWDmI4Fsx2aHlCg5W9fNSH0.roa
File: rIsIUWDmI4Fsx2aHlCg5W9fNSH0.roa (raw, json)
Hash identifier: psqy4/RQ/FMjDGMNn7yNSuYoJ4XCnyCN9RIeEyHqOd4=
Subject key identifier: AC:8B:08:51:60:E6:23:81:6C:C7:66:87:94:28:39:5B:D7:CD:48:7D
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 018673ECB23DA5634E99DDA6474E70FEAA48
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/rIsIUWDmI4Fsx2aHlCg5W9fNSH0.roa
Signing time: Tue 21 Feb 2023 12:22:17 +0000
ROA not before: Tue 21 Feb 2023 12:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207199
IP address blocks: 185.232.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:ec:b2:3d:a5:63:4e:99:dd:a6:47:4e:70:fe:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Feb 21 12:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac8b085160e623816cc766879428395bd7cd487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:b8:5d:c1:98:15:10:d1:b6:48:af:95:66:
d3:66:ec:47:aa:53:b1:16:4c:b9:2c:75:1b:ef:25:
91:2f:59:39:a9:87:c6:ca:19:c1:7d:b9:b3:f2:9e:
cf:84:8d:83:e2:3e:de:2b:43:b1:35:fa:5f:05:ba:
e2:72:55:ec:d8:68:2d:5c:3f:e4:b5:2b:e3:ab:ba:
e3:9a:04:e6:9d:5c:ba:85:d8:2e:e6:c7:9b:67:d7:
3a:7e:8a:17:81:fa:72:18:04:cc:80:d3:cf:d5:48:
f2:c7:30:90:11:14:4b:99:a5:e0:c9:2b:8a:a1:d6:
d3:5d:68:47:6a:89:78:3c:ea:06:2f:6a:c7:4a:db:
68:95:55:1c:e4:21:e2:84:e4:67:68:c6:47:58:83:
dc:4e:75:f5:5d:f9:b3:c0:d8:f0:a3:e0:02:76:7a:
71:f5:fd:c2:ad:6d:96:71:63:90:be:28:86:92:5c:
e6:d0:96:28:be:49:fc:07:88:fb:17:1b:b7:3f:ef:
9e:f4:bc:03:c2:46:3f:cf:18:51:3a:ca:2d:7e:05:
6d:26:22:7e:1d:40:9a:23:e9:11:da:d0:cc:25:73:
a0:6b:61:3f:3c:62:b4:81:5f:3e:e1:dc:71:a6:73:
3f:58:70:ac:91:fb:43:cd:6a:70:71:3a:8c:0d:00:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:08:51:60:E6:23:81:6C:C7:66:87:94:28:39:5B:D7:CD:48:7D
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/rIsIUWDmI4Fsx2aHlCg5W9fNSH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.148.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e3:32:21:9d:66:40:97:b7:57:8b:7e:cf:c9:2f:99:ab:85:
42:09:b8:e4:90:d0:82:f7:9c:0c:d5:b3:ab:4b:d7:c6:30:b4:
43:d1:6c:ea:04:d1:81:89:31:e5:92:33:8c:5e:eb:ba:03:e0:
24:13:a1:98:2f:84:2a:85:2f:b8:6e:3b:01:30:82:0c:2b:17:
05:c1:e0:cc:5e:f9:1d:5e:81:dc:96:76:c9:0b:eb:8c:40:64:
6f:db:58:fe:91:90:da:de:1a:d7:5f:78:9a:b4:66:11:cd:a6:
95:92:ae:ec:4f:00:bc:21:a1:0b:07:a4:e0:73:b5:4e:81:15:
8c:63:5d:e4:b8:25:16:9a:ab:59:0f:34:59:a7:e9:4d:28:f9:
82:6f:fb:6c:b9:2a:05:c6:77:67:b3:6e:cf:f7:f4:01:85:89:
16:ce:b1:ff:de:e7:67:0a:02:f9:e1:b9:51:97:22:21:00:2d:
98:61:62:78:b0:59:f6:ce:e5:cc:85:2e:ac:86:30:de:8f:8b:
1b:56:33:4e:28:3d:17:15:c2:30:22:57:cd:6e:1d:5c:ba:05:
67:c6:e7:04:af:28:55:cb:a9:9a:34:5e:90:77:5c:2f:d7:d5:
08:e9:65:2a:52:58:c0:a2:4d:94:ab:a4:72:cd:bc:d0:61:88:
b5:51:0b:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZz7LI9pWNOmd2mR05w/qpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi
NzIzY2IwHhcNMjMwMjIxMTIyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhiMDg1MTYwZTYyMzgxNmNjNzY2ODc5NDI4Mzk1YmQ3Y2Q0ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4m4XcGYFRDRtkivlWbTZuxHqlOx
Fky5LHUb7yWRL1k5qYfGyhnBfbmz8p7PhI2D4j7eK0OxNfpfBbriclXs2GgtXD/k
tSvjq7rjmgTmnVy6hdgu5sebZ9c6fooXgfpyGATMgNPP1UjyxzCQERRLmaXgySuK
odbTXWhHaol4POoGL2rHSttolVUc5CHihORnaMZHWIPcTnX1XfmzwNjwo+ACdnpx
9f3CrW2WcWOQviiGklzm0JYovkn8B4j7Fxu3P++e9LwDwkY/zxhROsotfgVtJiJ+
HUCaI+kR2tDMJXOga2E/PGK0gV8+4dxxpnM/WHCskftDzWpwcTqMDQDiVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyLCFFg5iOBbMdmh5QoOVvXzUh9MB8GA1UdIwQY
MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt
ZjJjOGJhMDIxY2E4LzEvcklzSVVXRG1JNEZzeDJhSGxDZzVXOWZOU0gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4
LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueiUMA0G
CSqGSIb3DQEBCwUAA4IBAQBh4zIhnWZAl7dXi37PyS+Zq4VCCbjkkNCC95wM1bOr
S9fGMLRD0WzqBNGBiTHlkjOMXuu6A+AkE6GYL4QqhS+4bjsBMIIMKxcFweDMXvkd
XoHclnbJC+uMQGRv21j+kZDa3hrXX3iatGYRzaaVkq7sTwC8IaELB6Tgc7VOgRWM
Y13kuCUWmqtZDzRZp+lNKPmCb/tsuSoFxndns27P9/QBhYkWzrH/3udnCgL54blR
lyIhAC2YYWJ4sFn2zuXMhS6shjDej4sbVjNOKD0XFcIwIlfNbh1cugVnxucEryhV
y6maNF6Qd1wv19UI6WUqUljAok2Uq6RyzbzQYYi1UQun
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:01 2024 by rpki-client on console-ams.rpki-client.org