Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/I5ZVeRgimmD6wNXKtYWZd-fpzck.roa
File: I5ZVeRgimmD6wNXKtYWZd-fpzck.roa (raw, json)
Hash identifier: SjeIi84ID5xOfzCPwmQhvf+ySceTJtF9TFkw3QHQOzA=
Subject key identifier: 23:96:55:79:18:22:9A:60:FA:C0:D5:CA:B5:85:99:77:E7:E9:CD:C9
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0188CA941E12EA19EF32032511C9323EFD75
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/I5ZVeRgimmD6wNXKtYWZd-fpzck.roa
Signing time: Sat 17 Jun 2023 18:18:04 +0000
ROA not before: Sat 17 Jun 2023 18:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:94:1e:12:ea:19:ef:32:03:25:11:c9:32:3e:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jun 17 18:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2396557918229a60fac0d5cab5859977e7e9cdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:e8:2d:00:26:59:58:da:3f:13:2c:d3:87:
11:43:dc:62:69:a3:76:6a:2c:c7:eb:b2:2a:b9:81:
cf:8e:02:56:e6:60:15:80:b7:62:44:90:4f:ee:6b:
21:0b:4c:1b:79:9c:fb:d5:57:32:79:56:0a:a7:70:
c6:52:5f:16:8e:03:89:7c:60:bd:25:b2:bd:15:09:
47:07:54:a2:85:fb:15:e0:94:a9:78:b3:dc:ad:7d:
0a:d9:24:ae:e5:c7:33:72:ab:1f:82:aa:be:9b:11:
1f:39:86:d6:23:7c:89:7f:c0:bf:89:69:af:43:01:
88:3b:58:a8:7b:bc:71:0c:a0:df:8f:07:99:00:1a:
db:b1:98:e8:f7:04:58:86:3b:d7:44:3d:6a:90:fb:
f5:a8:d1:84:93:97:46:09:27:ba:52:72:ff:8e:a5:
19:9c:f8:69:a1:ac:22:26:21:98:f3:2a:fe:cc:bc:
dd:76:fd:e2:ac:ef:98:8c:70:b1:83:e6:a3:dc:ef:
25:ef:51:0c:88:0a:86:c6:a2:52:b5:1f:58:35:fc:
f0:ad:62:27:70:f5:8a:b5:93:d0:b4:39:6c:0c:cf:
c2:95:29:8d:3a:0b:ee:98:5b:0c:ce:6a:4e:c3:b0:
17:c2:94:65:01:0c:90:31:52:19:fb:22:b5:62:ac:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:55:79:18:22:9A:60:FA:C0:D5:CA:B5:85:99:77:E7:E9:CD:C9
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/I5ZVeRgimmD6wNXKtYWZd-fpzck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:41:43:59:66:ce:54:df:72:11:f7:cb:44:6c:19:7d:f3:8d:
fb:c2:37:58:ce:55:90:f0:e0:42:b8:65:ab:cf:7d:be:c7:b0:
58:e9:d3:c7:75:c9:c0:d7:2f:44:28:a0:a6:18:75:a1:49:b3:
d6:34:19:65:1a:6d:60:70:39:78:67:d8:a5:2a:34:5f:e1:9f:
eb:ff:96:14:d6:e0:18:29:76:ac:19:f7:db:91:e0:aa:42:0b:
53:d9:98:34:46:02:2f:27:1d:f8:f4:84:4a:9a:f6:05:8f:42:
ca:9d:dc:b7:20:b9:e7:65:04:ae:4a:9a:ce:dd:9d:67:9f:80:
e4:bd:ce:1a:74:61:3c:3f:77:14:c9:58:ff:bb:62:8c:11:84:
b2:8d:d6:e0:ca:20:58:a6:ae:20:6c:03:71:f9:21:6b:58:a1:
d1:f0:3d:bb:ea:1d:f2:48:50:b3:53:df:89:a0:1e:ec:aa:b2:
34:52:14:3b:4b:9c:23:55:3e:f0:3d:96:47:67:86:5e:1b:d2:
65:c3:67:2b:b1:8b:54:fc:bd:b5:4f:ba:09:66:71:1c:7f:c2:
d0:ca:3a:30:e6:a2:9c:42:73:1c:0d:56:04:52:5c:be:61:91:
84:9d:99:73:85:eb:1c:10:d1:96:6c:1f:66:42:6f:ce:5a:41:
e1:02:9d:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjKlB4S6hnvMgMlEckyPv11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjMwNjE3MTgxODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzk2NTU3OTE4MjI5YTYwZmFjMGQ1Y2FiNTg1OTk3N2U3ZTljZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUToLQAmWVjaPxMs04cRQ9xiaaN2
aizH67IquYHPjgJW5mAVgLdiRJBP7mshC0wbeZz71VcyeVYKp3DGUl8WjgOJfGC9
JbK9FQlHB1SihfsV4JSpeLPcrX0K2SSu5cczcqsfgqq+mxEfOYbWI3yJf8C/iWmv
QwGIO1ioe7xxDKDfjweZABrbsZjo9wRYhjvXRD1qkPv1qNGEk5dGCSe6UnL/jqUZ
nPhpoawiJiGY8yr+zLzddv3irO+YjHCxg+aj3O8l71EMiAqGxqJStR9YNfzwrWIn
cPWKtZPQtDlsDM/ClSmNOgvumFsMzmpOw7AXwpRlAQyQMVIZ+yK1YqxEmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOWVXkYIppg+sDVyrWFmXfn6c3JMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvSTVaVmVSZ2ltbUQ2d05YS3RZV1pkLWZwemNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSobMA0G
CSqGSIb3DQEBCwUAA4IBAQCOQUNZZs5U33IR98tEbBl98437wjdYzlWQ8OBCuGWr
z32+x7BY6dPHdcnA1y9EKKCmGHWhSbPWNBllGm1gcDl4Z9ilKjRf4Z/r/5YU1uAY
KXasGffbkeCqQgtT2Zg0RgIvJx349IRKmvYFj0LKndy3ILnnZQSuSprO3Z1nn4Dk
vc4adGE8P3cUyVj/u2KMEYSyjdbgyiBYpq4gbANx+SFrWKHR8D276h3ySFCzU9+J
oB7sqrI0UhQ7S5wjVT7wPZZHZ4ZeG9Jlw2crsYtU/L21T7oJZnEcf8LQyjow5qKc
QnMcDVYEUly+YZGEnZlzhescENGWbB9mQm/OWkHhAp3i
Generated at Sat Sep 9 08:14:45 2023 by rpki-client on console-fra.rpki-client.org