Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa
File: F8DBJ_30HlA6HINcBRHL9IbqcBY.roa (raw, json)
Hash identifier: nWDdOrQUkSBxa8V3GI9ddhY/snwRFoqBDgEgd1cTxVk=
Subject key identifier: 17:C0:C1:27:FD:F4:1E:50:3A:1C:83:5C:05:11:CB:F4:86:EA:70:16
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 0188E72622FB3C91E3C1C3965A1E07FB842D
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa
Signing time: Fri 23 Jun 2023 07:26:56 +0000
ROA not before: Fri 23 Jun 2023 07:26:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.192.36.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Dec 2023 08:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:26:22:fb:3c:91:e3:c1:c3:96:5a:1e:07:fb:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Jun 23 07:26:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c0c127fdf41e503a1c835c0511cbf486ea7016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:9c:99:5d:ae:8a:50:ec:da:e7:36:b0:d0:
2b:e1:67:cb:7c:c3:91:bd:ca:7d:16:bd:71:d4:49:
bd:ac:b4:bd:cc:1a:7b:1e:32:ad:84:71:6f:ea:90:
9b:72:ef:0f:42:1c:95:73:6d:18:b1:da:9c:0d:58:
0d:7c:2a:e2:7c:d8:3e:09:8e:63:d0:6b:12:ca:8c:
1d:4a:a9:c9:7b:84:1e:94:d8:e3:a7:35:ae:9b:7c:
6c:90:c5:e1:b9:2f:ef:5f:03:0c:fd:12:e1:6d:a1:
7f:6a:79:52:08:1a:ec:8c:64:86:ed:b1:df:d3:fb:
d2:ed:a0:58:f2:ba:3a:62:83:dd:45:1e:ea:9c:98:
e9:14:33:a4:33:90:53:eb:df:c3:7a:28:61:da:c5:
c3:30:b3:0e:6f:c9:e1:5a:02:df:a8:cf:91:39:36:
85:2f:bc:16:41:f0:b9:7b:7d:1b:58:a8:93:5e:85:
f4:35:43:ba:54:ac:91:9b:ba:73:f9:12:57:2d:07:
db:66:5b:e7:45:89:df:73:c9:05:9e:39:47:f3:43:
77:6c:c9:c2:47:56:07:ad:9a:01:b0:9c:9e:f7:f2:
f7:b9:61:64:00:26:98:d8:e8:82:74:cf:84:83:c0:
32:75:b4:66:82:20:e9:a9:ec:01:98:4e:96:38:cb:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:C1:27:FD:F4:1E:50:3A:1C:83:5C:05:11:CB:F4:86:EA:70:16
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:cf:4a:20:32:ac:b8:eb:93:7b:b5:e9:50:21:f0:78:3c:d4:
49:da:84:86:9e:09:05:ed:d7:57:eb:ae:b7:2d:49:56:4b:25:
88:ce:9f:c0:6a:77:7d:f1:06:dc:1f:08:76:8a:7a:07:24:e3:
30:6f:f2:9d:33:34:80:62:bc:cf:b0:11:ad:27:56:1c:e3:55:
61:32:1d:15:93:59:5a:4e:2c:75:c6:67:fa:ea:72:b2:e5:8f:
7b:29:0c:fc:aa:b1:dd:e6:72:87:ad:18:1a:78:59:9b:b0:a3:
dc:3e:bf:14:75:cf:c8:b8:ca:7b:7d:7e:be:9b:95:da:0a:68:
ff:9b:39:8a:0d:82:91:51:aa:43:fa:c0:b1:b1:0b:55:6a:ab:
7e:08:ba:d8:a6:53:c2:0d:8d:83:fe:4e:fa:59:2d:0c:23:9c:
8b:34:dd:83:15:01:ff:3f:f6:04:42:a1:14:54:d2:57:ac:9f:
e8:70:e6:2c:1f:67:67:61:b3:06:11:0e:40:45:0b:bc:0a:73:
f4:1a:8b:45:94:01:59:37:14:14:c9:8a:b4:c0:8c:98:71:a8:
0b:e5:54:27:64:d0:70:7e:29:9d:dd:93:16:92:f4:0f:74:2f:
08:5e:6e:1d:9f:be:ad:61:86:54:da:df:94:d8:d9:e7:47:6b:
c5:e5:58:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjnJiL7PJHjwcOWWh4H+4QtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw
YjdmNTMwHhcNMjMwNjIzMDcyNjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2MwYzEyN2ZkZjQxZTUwM2ExYzgzNWMwNTExY2JmNDg2ZWE3MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeCcmV2uilDs2uc2sNAr4WfLfMOR
vcp9Fr1x1Em9rLS9zBp7HjKthHFv6pCbcu8PQhyVc20YsdqcDVgNfCrifNg+CY5j
0GsSyowdSqnJe4QelNjjpzWum3xskMXhuS/vXwMM/RLhbaF/anlSCBrsjGSG7bHf
0/vS7aBY8ro6YoPdRR7qnJjpFDOkM5BT69/Deihh2sXDMLMOb8nhWgLfqM+ROTaF
L7wWQfC5e30bWKiTXoX0NUO6VKyRm7pz+RJXLQfbZlvnRYnfc8kFnjlH80N3bMnC
R1YHrZoBsJye9/L3uWFkACaY2OiCdM+Eg8AydbRmgiDpqewBmE6WOMs/qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfAwSf99B5QOhyDXAURy/SG6nAWMB8GA1UdIwQY
MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt
ZTlkYzNmMWNmODI0LzEvRjhEQkpfMzBIbEE2SElOY0JSSEw5SWJxY0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0
LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucAkMA0G
CSqGSIb3DQEBCwUAA4IBAQCuz0ogMqy465N7telQIfB4PNRJ2oSGngkF7ddX6663
LUlWSyWIzp/Aand98QbcHwh2inoHJOMwb/KdMzSAYrzPsBGtJ1Yc41VhMh0Vk1la
Tix1xmf66nKy5Y97KQz8qrHd5nKHrRgaeFmbsKPcPr8Udc/IuMp7fX6+m5XaCmj/
mzmKDYKRUapD+sCxsQtVaqt+CLrYplPCDY2D/k76WS0MI5yLNN2DFQH/P/YEQqEU
VNJXrJ/ocOYsH2dnYbMGEQ5ARQu8CnP0GotFlAFZNxQUyYq0wIyYcagL5VQnZNBw
fimd3ZMWkvQPdC8IXm4dn76tYYZU2t+U2NnnR2vF5ViW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org