Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/CbjhN0-HkJZRk4XuoZQCdiAKzkI.roa
File: CbjhN0-HkJZRk4XuoZQCdiAKzkI.roa (raw, json)
Hash identifier: 83xHGCIFaSSBloRlZBqK1uNuR+kLGlRD67kRBZ7uSyw=
Subject key identifier: 09:B8:E1:37:4F:87:90:96:51:93:85:EE:A1:94:02:76:20:0A:CE:42
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01856E143F615D75EA7BD4BB774685F0E8EA
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/CbjhN0-HkJZRk4XuoZQCdiAKzkI.roa
Signing time: Sun 01 Jan 2023 16:04:58 +0000
ROA not before: Sun 01 Jan 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.63.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:3f:61:5d:75:ea:7b:d4:bb:77:46:85:f0:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 1 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b8e1374f879096519385eea1940276200ace42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:ab:0b:4a:80:66:da:1e:16:d8:30:27:9f:
a2:0d:18:8c:b5:9a:be:64:93:99:11:5b:40:f5:59:
6b:d4:6a:d6:50:76:6a:f2:0c:f2:28:ba:b4:f0:27:
58:0f:98:5f:1a:d9:92:05:d2:40:d1:df:aa:58:08:
c6:be:c5:5e:b6:8a:4d:a2:40:68:06:5b:3f:fd:ff:
1e:99:78:e0:f2:f6:94:6b:db:83:b3:77:bd:31:aa:
a4:24:a6:8e:ed:84:8b:34:d9:f7:15:44:72:77:81:
bc:dd:f5:6b:6e:34:e2:7c:88:d6:71:6e:33:f9:a6:
fb:7d:21:96:0b:e4:d6:6d:b8:7b:44:54:a9:34:11:
f4:27:bb:53:c0:e4:99:ab:66:54:03:70:6a:f0:1e:
8c:e4:42:6d:d3:d6:f0:ad:6e:c0:9e:98:31:2b:2a:
e7:28:a2:6f:f8:6f:ae:e1:db:fa:ed:8a:10:28:35:
85:8a:25:86:9b:4e:68:1b:8b:e6:bd:77:ce:1e:59:
7d:1c:83:14:30:fe:36:ae:37:64:b4:e2:bf:a7:8b:
ac:26:dc:41:b9:f6:93:e0:66:68:03:e6:36:5d:76:
6c:b2:a1:35:ee:de:49:ce:8f:cb:be:74:ef:f9:87:
3d:59:55:aa:92:0c:56:f1:71:d5:5b:ed:e6:2f:06:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:E1:37:4F:87:90:96:51:93:85:EE:A1:94:02:76:20:0A:CE:42
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/CbjhN0-HkJZRk4XuoZQCdiAKzkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.35.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e3:ba:b2:96:56:82:80:01:be:66:b0:dd:61:e6:f3:42:a8:
a9:13:3a:2f:bf:3f:15:dc:21:4b:e7:4c:5e:d3:3b:e5:16:08:
ca:bf:00:f3:a6:a4:b2:be:da:e4:b3:ee:6f:f9:53:89:16:cb:
91:e2:eb:fc:c2:6d:24:9f:8f:35:86:a9:ea:46:26:8b:ec:58:
95:ec:29:82:55:5a:b1:31:af:1e:42:b1:d9:03:0e:45:45:ae:
31:c2:49:94:f2:b6:b7:60:5b:52:38:df:61:02:41:85:4e:37:
c7:18:6c:b0:c7:2b:88:67:27:0f:14:f5:0d:25:54:6c:44:af:
4c:5e:8d:77:36:f7:00:f4:d1:5e:97:c6:b3:b3:06:24:25:4c:
6b:60:9e:60:ea:2d:ea:18:67:23:e7:72:65:b6:7e:42:36:d1:
bb:dd:4c:c3:d8:a7:2d:cd:b1:ce:77:0c:32:5c:45:73:81:0e:
de:3f:a2:33:53:97:33:36:7c:97:9d:dc:47:a0:bb:6f:1d:6b:
54:53:87:98:57:a5:01:15:6e:8c:d8:f0:a5:4c:4d:77:fc:4f:
33:60:6f:1a:3c:9a:5c:0e:a6:71:99:c6:c7:8b:c8:74:55:a3:
38:3d:b2:94:f9:09:af:4c:63:3d:93:69:f3:51:4e:91:f4:f1:
3e:77:7d:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFD9hXXXqe9S7d0aF8OjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjMwMTAxMTYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI4ZTEzNzRmODc5MDk2NTE5Mzg1ZWVhMTk0MDI3NjIwMGFjZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOrC0qAZtoeFtgwJ5+iDRiMtZq+
ZJOZEVtA9Vlr1GrWUHZq8gzyKLq08CdYD5hfGtmSBdJA0d+qWAjGvsVetopNokBo
Bls//f8emXjg8vaUa9uDs3e9MaqkJKaO7YSLNNn3FURyd4G83fVrbjTifIjWcW4z
+ab7fSGWC+TWbbh7RFSpNBH0J7tTwOSZq2ZUA3Bq8B6M5EJt09bwrW7AnpgxKyrn
KKJv+G+u4dv67YoQKDWFiiWGm05oG4vmvXfOHll9HIMUMP42rjdktOK/p4usJtxB
ufaT4GZoA+Y2XXZssqE17t5Jzo/LvnTv+Yc9WVWqkgxW8XHVW+3mLwZwlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAm44TdPh5CWUZOF7qGUAnYgCs5CMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvQ2JqaE4wLUhrSlpSazRYdW9aUUNkaUFLemtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT8jMA0G
CSqGSIb3DQEBCwUAA4IBAQBR47qyllaCgAG+ZrDdYebzQqipEzovvz8V3CFL50xe
0zvlFgjKvwDzpqSyvtrks+5v+VOJFsuR4uv8wm0kn481hqnqRiaL7FiV7CmCVVqx
Ma8eQrHZAw5FRa4xwkmU8ra3YFtSON9hAkGFTjfHGGywxyuIZycPFPUNJVRsRK9M
Xo13NvcA9NFel8azswYkJUxrYJ5g6i3qGGcj53Jltn5CNtG73UzD2KctzbHOdwwy
XEVzgQ7eP6IzU5czNnyXndxHoLtvHWtUU4eYV6UBFW6M2PClTE13/E8zYG8aPJpc
DqZxmcbHi8h0VaM4PbKU+QmvTGM9k2nzUU6R9PE+d31V
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org