Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/arNwAwtKNdA6JVfbJDyPo8Gg69w.roa
File: arNwAwtKNdA6JVfbJDyPo8Gg69w.roa (raw, json)
Hash identifier: dU3t1GKFexULJwAPTfK2rQNOv4CBRS7PUqRVQeqEJTE=
Subject key identifier: 6A:B3:70:03:0B:4A:35:D0:3A:25:57:DB:24:3C:8F:A3:C1:A0:EB:DC
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018571D7A1714FA582ABE0BDB3EFF04F9D38
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/arNwAwtKNdA6JVfbJDyPo8Gg69w.roa
Signing time: Mon 02 Jan 2023 09:37:15 +0000
ROA not before: Mon 02 Jan 2023 09:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42334
IP address blocks: 185.115.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a1:71:4f:a5:82:ab:e0:bd:b3:ef:f0:4f:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 2 09:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab370030b4a35d03a2557db243c8fa3c1a0ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:cf:6f:d1:44:40:84:98:b7:5e:f8:6e:ce:
81:db:c0:39:d4:28:7c:59:d7:78:26:56:23:f4:08:
68:7f:86:c6:a3:42:4b:2d:29:7f:5b:7a:fc:65:74:
6a:8b:ba:13:6c:fc:97:81:58:ed:d6:64:da:9c:5a:
d6:18:14:34:b9:32:ae:cc:c4:97:97:04:41:8f:73:
c7:75:63:65:e5:ff:de:0c:a0:28:81:8e:93:24:e7:
8e:42:0f:7f:d7:80:4e:2f:b2:58:75:79:48:31:48:
a9:07:74:b7:b9:ec:7b:bb:39:f2:9a:14:1c:19:be:
96:f8:ad:5a:34:fe:84:fc:1a:cb:ac:0f:37:63:d7:
93:38:aa:4e:6a:2a:38:31:ce:4a:6b:dc:c3:2a:3d:
c2:26:23:5c:bb:e8:6b:bd:4b:f5:1d:8f:a1:90:26:
51:74:28:03:a9:7c:14:2f:f2:c5:7a:d5:2c:e4:35:
2c:0c:45:7d:37:a9:e3:e0:7b:d9:e9:d7:4e:53:43:
99:73:e8:35:8a:58:f6:15:a3:5a:02:5d:77:fb:e7:
08:39:98:10:e8:19:3f:19:a1:95:9a:75:93:6a:52:
c4:5d:6d:dd:b2:5c:35:ce:ba:4a:e0:22:9b:2e:e1:
93:7c:ff:a0:48:6a:08:74:3a:ce:cd:66:e2:db:fe:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:70:03:0B:4A:35:D0:3A:25:57:DB:24:3C:8F:A3:C1:A0:EB:DC
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/arNwAwtKNdA6JVfbJDyPo8Gg69w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:82:9f:2e:5e:7f:d0:dd:a8:58:75:15:c0:7a:42:38:f1:57:
12:17:0c:59:93:bd:72:ce:04:08:1a:a0:ce:ef:79:5c:d8:bc:
d2:7d:a1:1f:23:7d:5e:e0:16:02:11:a7:26:63:bc:fb:bc:52:
d7:06:02:a4:66:63:e0:ea:1f:c7:30:61:9a:48:3a:55:e0:b9:
70:f6:65:61:64:db:f6:05:50:a0:f0:62:f1:37:f6:90:41:3c:
01:22:e3:6f:85:b5:c0:5d:02:66:cd:74:2d:67:83:7d:40:5e:
3b:8d:5e:b8:e9:38:a1:cc:3c:32:9f:a8:4e:8f:9d:74:86:ed:
14:c6:91:58:24:44:57:7a:ca:ef:85:28:50:f7:e4:cf:8c:e6:
e0:33:1b:c9:ad:83:11:7f:96:23:10:76:dc:ad:29:71:3d:1a:
69:87:fe:e6:39:e9:83:d0:62:4d:40:32:c4:01:fd:e4:1c:51:
2f:e4:35:e3:f9:e6:8b:c1:a6:d8:3b:2a:9b:fe:0c:31:d2:66:
e7:55:71:b6:0d:c7:85:ee:cc:bd:12:ed:c0:f4:13:e2:ae:e7:
f0:1b:d2:13:14:94:f0:d9:bd:39:66:18:d7:a4:bb:d9:6f:38:
05:de:7d:ee:af:8c:5e:af:85:f8:74:c7:22:8b:de:3d:c0:48:
0d:6f:e5:a8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVx16FxT6WCq+C9s+/wT504MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjMwMTAyMDkzNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWIzNzAwMzBiNGEzNWQwM2EyNTU3ZGIyNDNjOGZhM2MxYTBlYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJLPb9FEQISYt174bs6B28A51Ch8
Wdd4JlYj9Ahof4bGo0JLLSl/W3r8ZXRqi7oTbPyXgVjt1mTanFrWGBQ0uTKuzMSX
lwRBj3PHdWNl5f/eDKAogY6TJOeOQg9/14BOL7JYdXlIMUipB3S3uex7uznymhQc
Gb6W+K1aNP6E/BrLrA83Y9eTOKpOaio4Mc5Ka9zDKj3CJiNcu+hrvUv1HY+hkCZR
dCgDqXwUL/LFetUs5DUsDEV9N6nj4HvZ6ddOU0OZc+g1ilj2FaNaAl13++cIOZgQ
6Bk/GaGVmnWTalLEXW3dslw1zrpK4CKbLuGTfP+gSGoIdDrOzWbi2/47rwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGqzcAMLSjXQOiVX2yQ8j6PBoOvcMB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xL2FyTndBd3RLTmRBNkpWZmJKRHlQbzhHZzY5dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3
NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5c2Qw
DQYJKoZIhvcNAQELBQADggEBALSCny5ef9DdqFh1FcB6QjjxVxIXDFmTvXLOBAga
oM7veVzYvNJ9oR8jfV7gFgIRpyZjvPu8UtcGAqRmY+DqH8cwYZpIOlXguXD2ZWFk
2/YFUKDwYvE39pBBPAEi42+FtcBdAmbNdC1ng31AXjuNXrjpOKHMPDKfqE6PnXSG
7RTGkVgkRFd6yu+FKFD35M+M5uAzG8mtgxF/liMQdtytKXE9GmmH/uY56YPQYk1A
MsQB/eQcUS/kNeP55ovBptg7Kpv+DDHSZudVcbYNx4XuzL0S7cD0E+Ku5/Ab0hMU
lPDZvTlmGNeku9lvOAXefe6vjF6vhfh0xyKL3j3ASA1v5ag=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:44 2024 by rpki-client on console-fra.rpki-client.org