Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iSaKyREMNJOWvRaNHSUbOc6uKVE.roa
File: iSaKyREMNJOWvRaNHSUbOc6uKVE.roa (raw, json)
Hash identifier: S7QU3dgRnteGRixZwayC0C7NvWjQKCv11MiHAgCtkXc=
Subject key identifier: 89:26:8A:C9:11:0C:34:93:96:BD:16:8D:1D:25:1B:39:CE:AE:29:51
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 0185706762162C65B3B5B135D87948627678
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iSaKyREMNJOWvRaNHSUbOc6uKVE.roa
Signing time: Mon 02 Jan 2023 02:55:01 +0000
ROA not before: Mon 02 Jan 2023 02:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6724
IP address blocks: 185.127.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:62:16:2c:65:b3:b5:b1:35:d8:79:48:62:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 02:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89268ac9110c349396bd168d1d251b39ceae2951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:37:b3:9a:9f:ca:6a:77:16:f5:43:07:35:
24:32:4d:9c:41:30:f1:44:85:bf:0c:7c:50:64:ee:
d1:35:84:ab:4e:aa:0a:3f:aa:be:08:80:bd:2c:7d:
1f:15:34:72:78:4c:85:65:da:e3:49:b6:f4:34:f1:
00:09:dd:a6:16:bf:fb:d2:7a:f0:75:fb:b5:d6:89:
7a:05:30:33:00:ee:1b:96:1e:ae:90:82:a0:a7:32:
e9:45:2b:6e:38:93:99:48:4d:26:eb:d5:f6:ab:38:
a4:3e:c4:8c:a5:cd:23:e4:e9:9a:c3:25:d6:bb:ea:
1f:06:d9:d2:fd:7e:d0:19:c1:47:3c:c6:65:b7:f1:
b9:fe:d2:ea:16:19:8b:b8:ec:ba:de:b2:73:45:43:
71:c2:7e:02:ac:97:37:53:e9:d8:e2:c1:39:1e:0b:
07:55:94:a2:2d:23:8a:81:9b:db:ef:e3:37:17:3b:
47:a4:3e:d4:44:83:cb:61:8f:dc:b0:5c:f0:5a:e1:
cf:aa:ae:fa:e1:be:c8:d6:9a:a4:a1:95:80:3f:30:
97:7a:aa:4d:a1:21:d7:da:0f:2f:a3:e1:39:63:38:
ff:c6:34:41:8c:af:51:1b:a9:c3:c5:21:32:6e:e6:
6f:54:0f:8d:5b:24:96:b5:8b:b2:cd:b0:b8:bf:26:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:8A:C9:11:0C:34:93:96:BD:16:8D:1D:25:1B:39:CE:AE:29:51
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iSaKyREMNJOWvRaNHSUbOc6uKVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.30.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d0:b9:1b:66:ef:be:81:a5:51:89:ea:ce:bb:34:83:d7:0d:
9f:03:9c:f9:f0:6c:15:3e:98:ca:8f:88:3a:b1:0c:d2:72:e8:
b6:bc:cb:c7:a2:0e:b6:48:1d:20:92:39:bd:09:10:32:9c:3e:
61:25:3b:6e:f8:ea:98:c0:5c:36:ce:42:ce:69:10:4d:a1:9f:
84:ac:3a:5b:71:0a:cc:54:84:d7:f3:41:e9:0f:4a:f4:08:25:
34:66:dd:b2:20:f1:b7:36:8c:8d:fe:ac:5c:f8:95:62:b4:69:
6d:a9:85:49:e8:0e:8c:28:d7:fd:86:c9:78:aa:e9:64:a8:39:
dc:e5:d6:a3:ab:9a:e1:55:ca:d1:e1:60:96:57:5c:2d:0d:37:
cf:45:1c:f2:31:92:b1:1c:16:e3:81:a5:b2:f6:16:14:4f:7d:
d0:23:b4:46:36:4f:aa:db:5b:aa:28:3b:c7:c9:77:0d:82:3b:
30:18:70:22:a1:01:da:c4:e7:2d:d9:d9:e7:a4:c0:df:0b:85:
18:e7:1c:d4:ef:8d:d4:b7:e8:41:d2:3a:2c:ba:18:c0:31:fa:
be:85:b0:f3:fc:8e:b3:58:d0:4a:f5:af:54:1e:92:d5:ee:e4:
5b:be:be:14:b5:7a:68:16:6d:1d:9e:22:9a:95:44:9a:39:da:
07:0f:11:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ2IWLGWztbE12HlIYnZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw
NDI3NGMwHhcNMjMwMTAyMDI1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI2OGFjOTExMGMzNDkzOTZiZDE2OGQxZDI1MWIzOWNlYWUyOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUs3s5qfymp3FvVDBzUkMk2cQTDx
RIW/DHxQZO7RNYSrTqoKP6q+CIC9LH0fFTRyeEyFZdrjSbb0NPEACd2mFr/70nrw
dfu11ol6BTAzAO4blh6ukIKgpzLpRStuOJOZSE0m69X2qzikPsSMpc0j5OmawyXW
u+ofBtnS/X7QGcFHPMZlt/G5/tLqFhmLuOy63rJzRUNxwn4CrJc3U+nY4sE5HgsH
VZSiLSOKgZvb7+M3FztHpD7URIPLYY/csFzwWuHPqq764b7I1pqkoZWAPzCXeqpN
oSHX2g8vo+E5Yzj/xjRBjK9RG6nDxSEybuZvVA+NWySWtYuyzbC4vybyLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkmiskRDDSTlr0WjR0lGznOrilRMB8GA1UdIwQY
MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt
N2ZlMzk1MWE3MzViLzEvaVNhS3lSRU1OSk9XdlJhTkhTVWJPYzZ1S1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi
LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX8eMA0G
CSqGSIb3DQEBCwUAA4IBAQBA0LkbZu++gaVRierOuzSD1w2fA5z58GwVPpjKj4g6
sQzScui2vMvHog62SB0gkjm9CRAynD5hJTtu+OqYwFw2zkLOaRBNoZ+ErDpbcQrM
VITX80HpD0r0CCU0Zt2yIPG3NoyN/qxc+JVitGltqYVJ6A6MKNf9hsl4qulkqDnc
5dajq5rhVcrR4WCWV1wtDTfPRRzyMZKxHBbjgaWy9hYUT33QI7RGNk+q21uqKDvH
yXcNgjswGHAioQHaxOct2dnnpMDfC4UY5xzU743Ut+hB0josuhjAMfq+hbDz/I6z
WNBK9a9UHpLV7uRbvr4UtXpoFm0dniKalUSaOdoHDxH8
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:46 2024 by rpki-client on console-ams.rpki-client.org