Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/T8s0psD0KBnUh-viqlpwTjIcb3c.roa
File: T8s0psD0KBnUh-viqlpwTjIcb3c.roa (raw, json)
Hash identifier: NraNY7JdYV322o5qIW7Njcpu6VRAS47HUIQYMEXPlRI=
Subject key identifier: 4F:CB:34:A6:C0:F4:28:19:D4:87:EB:E2:AA:5A:70:4E:32:1C:6F:77
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 01856FD4E0741ED4FC10F1EE26B1D002EEC4
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/T8s0psD0KBnUh-viqlpwTjIcb3c.roa
Signing time: Mon 02 Jan 2023 00:15:00 +0000
ROA not before: Mon 02 Jan 2023 00:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52054
IP address blocks: 185.156.192.0/23 maxlen: 23
185.156.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:e0:74:1e:d4:fc:10:f1:ee:26:b1:d0:02:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jan 2 00:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fcb34a6c0f42819d487ebe2aa5a704e321c6f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:9c:fc:3c:03:e7:28:3a:e9:a9:39:7f:aa:
4e:1d:69:36:fb:7a:ce:f9:b7:26:f0:24:7f:7e:a6:
70:04:6b:87:4e:e2:d4:6b:85:b0:59:b1:a9:9f:ff:
54:1a:4c:df:c4:d6:f7:a7:84:ad:45:0b:7b:cd:d6:
2f:0d:49:58:b7:7c:a7:0c:fb:1b:55:69:2d:a9:7a:
fc:02:d8:ec:b6:ae:4a:57:18:80:7f:79:60:8e:ae:
94:0b:99:1b:18:77:54:e9:74:87:a1:12:ba:28:94:
b6:ed:ae:18:03:1a:27:a9:63:1e:a6:25:56:cb:1a:
62:9b:c5:89:2c:dd:55:3b:8a:91:2b:6c:0d:b6:68:
d7:83:07:66:3b:a2:ae:85:9e:d7:2c:06:f4:ac:2f:
9b:54:96:f8:b5:89:d1:da:dc:9e:05:12:aa:36:39:
19:dc:52:60:9e:35:20:f1:95:33:6e:74:bf:68:1a:
c5:10:70:c5:33:63:6b:9b:83:85:7f:ed:c6:7a:ed:
07:44:44:32:cd:dc:8a:da:32:13:32:46:79:92:15:
46:a3:47:b5:c6:96:6a:7c:63:14:59:49:02:03:58:
26:fb:a6:25:5d:44:02:1b:ce:ab:95:e2:7a:eb:63:
9d:49:7a:07:48:3d:8b:12:6a:1b:f5:f1:60:c5:ee:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:34:A6:C0:F4:28:19:D4:87:EB:E2:AA:5A:70:4E:32:1C:6F:77
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/T8s0psD0KBnUh-viqlpwTjIcb3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.192.0-185.156.194.255
Signature Algorithm: sha256WithRSAEncryption
3b:18:6d:d7:e5:ce:aa:0e:8c:13:6e:17:a0:2e:c1:80:a2:0a:
33:6f:2c:29:46:9c:30:2a:b3:06:3e:1f:18:ac:83:28:b8:a9:
7f:94:d9:4f:fe:a4:6a:5a:d3:ff:84:20:26:0c:5f:35:f5:4d:
6c:2c:c0:9e:16:92:e3:2f:8a:e4:8a:86:12:38:19:51:dc:d3:
ff:73:ab:df:f0:ea:9c:99:06:84:02:2d:a7:43:a8:59:32:30:
6f:95:d6:9f:c2:55:d8:a1:a9:c6:a5:e5:c5:28:7b:8e:98:fe:
55:0b:b6:ff:4c:22:21:8b:a3:22:1a:9e:7d:ee:11:99:7e:4f:
83:f6:43:f7:7b:f8:b9:40:e6:84:50:26:62:e6:40:dd:d7:70:
12:56:eb:e2:a5:bb:9e:17:d6:93:df:2f:96:26:d8:eb:c5:45:
86:fd:8e:a9:73:f6:3d:07:26:d2:b3:2a:df:bf:b8:ca:f3:30:
2c:f5:e2:c5:15:2b:3b:95:8a:6d:76:7c:18:60:92:2b:98:a3:
88:7a:44:41:08:38:a3:a2:f1:d8:b3:dd:b1:2a:86:87:46:b5:
b7:d9:80:e7:ff:1c:40:d2:d3:0a:45:8c:8d:38:2a:2c:2f:4c:
9d:5a:87:80:c3:96:c7:d0:c9:8b:9f:52:f3:cd:b2:3b:9d:6f:
d0:67:88:14
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1OB0HtT8EPHuJrHQAu7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGI0ZmFhYzc5YmIxOTY5MGMzYWY1YTA3OGM2Y2IxNGE5
MWFkNDIwHhcNMjMwMTAyMDAxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmNiMzRhNmMwZjQyODE5ZDQ4N2ViZTJhYTVhNzA0ZTMyMWM2Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pGc/DwD5yg66ak5f6pOHWk2+3rO
+bcm8CR/fqZwBGuHTuLUa4WwWbGpn/9UGkzfxNb3p4StRQt7zdYvDUlYt3ynDPsb
VWktqXr8Atjstq5KVxiAf3lgjq6UC5kbGHdU6XSHoRK6KJS27a4YAxonqWMepiVW
yxpim8WJLN1VO4qRK2wNtmjXgwdmO6KuhZ7XLAb0rC+bVJb4tYnR2tyeBRKqNjkZ
3FJgnjUg8ZUzbnS/aBrFEHDFM2Nrm4OFf+3Geu0HREQyzdyK2jITMkZ5khVGo0e1
xpZqfGMUWUkCA1gm+6YlXUQCG86rleJ662OdSXoHSD2LEmob9fFgxe5sKQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE/LNKbA9CgZ1Ifr4qpacE4yHG93MB8GA1UdIwQY
MBaAFAALT6rHm7GWkMOvWgeMbLFKka1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYt
YTA5NmVlY2RhNzkzLzEvVDhzMHBzRDBLQm5VaC12aXFscHdUakljYjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYtYTA5NmVlY2RhNzkz
LzEvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa5nMAD
BAC5nMIwDQYJKoZIhvcNAQELBQADggEBADsYbdflzqoOjBNuF6AuwYCiCjNvLClG
nDAqswY+Hxisgyi4qX+U2U/+pGpa0/+EICYMXzX1TWwswJ4WkuMviuSKhhI4GVHc
0/9zq9/w6pyZBoQCLadDqFkyMG+V1p/CVdihqcal5cUoe46Y/lULtv9MIiGLoyIa
nn3uEZl+T4P2Q/d7+LlA5oRQJmLmQN3XcBJW6+Klu54X1pPfL5Ym2OvFRYb9jqlz
9j0HJtKzKt+/uMrzMCz14sUVKzuVim12fBhgkiuYo4h6REEIOKOi8diz3bEqhodG
tbfZgOf/HEDS0wpFjI04KiwvTJ1ah4DDlsfQyYufUvPNsjudb9BniBQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:39 2024 by rpki-client on console-ams.rpki-client.org