Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/Tt2oAJ4QA0fykcNwHQPV5Sgi8p4.roa
File: Tt2oAJ4QA0fykcNwHQPV5Sgi8p4.roa (raw, json)
Hash identifier: a2f+BgOxDgsFV8WJowuPyMH/sP+S1qxkHsDbap+A+wU=
Subject key identifier: 4E:DD:A8:00:9E:10:03:47:F2:91:C3:70:1D:03:D5:E5:28:22:F2:9E
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01856FC26287D772B201C332186EBAEC73F4
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/Tt2oAJ4QA0fykcNwHQPV5Sgi8p4.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210567
IP address blocks: 185.163.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:62:87:d7:72:b2:01:c3:32:18:6e:ba:ec:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4edda8009e100347f291c3701d03d5e52822f29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:07:cc:e6:5e:95:44:4a:21:85:9b:b9:4b:
6c:3b:ac:36:bf:0f:19:c8:70:0b:73:2a:2b:b9:31:
87:fc:1e:69:d8:f7:ab:b8:ba:71:5d:04:12:93:79:
e4:88:15:98:78:12:a2:2b:1d:f0:55:b4:50:eb:3d:
01:08:7f:6a:e4:0b:06:d1:d1:8c:88:4e:c4:92:b3:
1b:d2:e4:9e:19:e6:65:1f:13:da:ed:8c:3e:8e:29:
7f:09:b2:c8:51:60:85:a7:78:50:a0:54:5a:7a:28:
a8:b1:e3:d5:1a:dc:e5:c2:24:63:ff:f0:0e:d3:7c:
16:e1:c1:43:8f:b1:a6:31:23:bc:97:6e:14:60:3f:
71:43:60:3d:4c:a9:d8:fe:94:ad:45:22:25:6b:a2:
c2:33:73:ed:80:38:aa:b3:28:21:39:17:6f:ae:25:
43:9e:08:26:2a:aa:c2:e3:b3:fc:b1:7b:06:38:5e:
c7:66:d4:8b:0b:f8:33:b2:fe:e6:ab:28:0b:5d:f4:
cd:56:ac:5b:8c:c2:8e:ba:d3:af:61:89:94:86:a3:
10:e9:af:9d:b7:a2:71:bc:63:d2:e2:2a:70:73:4a:
58:40:10:1f:5c:c1:2f:f8:84:a6:e7:d9:22:60:63:
11:64:dc:6a:a8:87:e8:43:1d:b8:af:2f:e4:76:5f:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:A8:00:9E:10:03:47:F2:91:C3:70:1D:03:D5:E5:28:22:F2:9E
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/Tt2oAJ4QA0fykcNwHQPV5Sgi8p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b8:0c:e6:13:3a:87:39:38:0f:56:92:76:d0:9a:22:4c:23:
66:7f:4b:03:75:76:c4:ff:43:60:55:48:26:12:ae:17:ea:5c:
11:89:37:b7:dc:50:c4:40:0c:12:0e:74:1f:e2:9d:de:fe:f1:
13:aa:45:01:36:1d:a2:5d:7c:5a:5b:a6:4a:31:cb:3e:c6:fc:
53:fb:30:57:1b:64:5f:af:51:4b:b3:0f:24:b2:e5:b5:0d:61:
67:9a:de:66:e6:fa:b9:47:37:af:f3:f7:46:4c:59:f4:9c:c8:
4b:90:75:da:48:05:e9:72:2c:d9:25:fe:dd:96:e8:47:65:00:
39:73:6c:08:1c:6a:43:02:d0:1f:3d:d5:3f:19:79:2f:79:c8:
76:28:ab:3f:80:c5:fa:60:8a:db:d7:63:1a:c6:26:e0:9a:82:
29:a6:5e:0b:b6:a1:d2:7e:01:36:88:8f:af:4b:df:a9:ee:52:
e6:81:74:8b:b6:8d:13:89:bf:17:2b:5d:3e:53:d3:c8:09:d2:
0a:f5:60:0f:74:ca:e8:8d:6a:39:05:4e:04:6e:4a:0c:14:00:
8f:8d:96:cd:ae:08:9d:e8:53:c3:da:a4:90:e7:b5:a3:cf:26:
f3:2f:09:ad:d1:41:3a:3a:66:32:39:64:d3:fd:77:23:0f:6d:
f2:3a:b9:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwmKH13KyAcMyGG667HP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjMwMTAxMjM1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWRkYTgwMDllMTAwMzQ3ZjI5MWMzNzAxZDAzZDVlNTI4MjJmMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLMHzOZelURKIYWbuUtsO6w2vw8Z
yHALcyoruTGH/B5p2PeruLpxXQQSk3nkiBWYeBKiKx3wVbRQ6z0BCH9q5AsG0dGM
iE7EkrMb0uSeGeZlHxPa7Yw+jil/CbLIUWCFp3hQoFRaeiiosePVGtzlwiRj//AO
03wW4cFDj7GmMSO8l24UYD9xQ2A9TKnY/pStRSIla6LCM3PtgDiqsyghORdvriVD
nggmKqrC47P8sXsGOF7HZtSLC/gzsv7mqygLXfTNVqxbjMKOutOvYYmUhqMQ6a+d
t6JxvGPS4ipwc0pYQBAfXMEv+ISm59kiYGMRZNxqqIfoQx24ry/kdl/WYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7dqACeEANH8pHDcB0D1eUoIvKeMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVHQyb0FKNFFBMGZ5a2NOd0hRUFY1U2dpOHA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaP3MA0G
CSqGSIb3DQEBCwUAA4IBAQB9uAzmEzqHOTgPVpJ20JoiTCNmf0sDdXbE/0NgVUgm
Eq4X6lwRiTe33FDEQAwSDnQf4p3e/vETqkUBNh2iXXxaW6ZKMcs+xvxT+zBXG2Rf
r1FLsw8ksuW1DWFnmt5m5vq5Rzev8/dGTFn0nMhLkHXaSAXpcizZJf7dluhHZQA5
c2wIHGpDAtAfPdU/GXkvech2KKs/gMX6YIrb12MaxibgmoIppl4LtqHSfgE2iI+v
S9+p7lLmgXSLto0Tib8XK10+U9PICdIK9WAPdMrojWo5BU4EbkoMFACPjZbNrgid
6FPD2qSQ57WjzybzLwmt0UE6OmYyOWTT/XcjD23yOrnu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:27 2024 by rpki-client on console-ams.rpki-client.org