Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/IoJnEiJv-pZ-ij0va1pzSxq7Ybo.roa
File: IoJnEiJv-pZ-ij0va1pzSxq7Ybo.roa (raw, json)
Hash identifier: sXJ+38nQ8Gumso3c7jin4JjvHVVzCWFvj0FeZ77NsDM=
Subject key identifier: 22:82:67:12:22:6F:FA:96:7E:8A:3D:2F:6B:5A:73:4B:1A:BB:61:BA
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01856F54A39D130D390A9C0B6366031F8BB5
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/IoJnEiJv-pZ-ij0va1pzSxq7Ybo.roa
Signing time: Sun 01 Jan 2023 21:54:55 +0000
ROA not before: Sun 01 Jan 2023 21:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59510
IP address blocks: 185.1.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a3:9d:13:0d:39:0a:9c:0b:63:66:03:1f:8b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jan 1 21:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22826712226ffa967e8a3d2f6b5a734b1abb61ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:3d:b3:c9:63:84:76:d4:04:aa:ce:64:43:
c2:ff:6f:c6:8a:65:dd:1c:5b:e4:62:fd:16:c0:34:
5f:49:64:73:df:1d:ac:6e:32:91:70:43:9b:07:6c:
e0:01:13:9a:55:4c:f3:4d:9a:86:b7:95:b3:83:db:
83:16:0b:92:38:78:5f:a0:fb:fa:dd:73:50:be:08:
1a:94:18:65:29:02:0b:ae:a2:3a:23:c5:09:fe:5d:
23:03:da:0a:e9:fb:7c:7d:fd:68:61:65:cd:b8:ef:
c9:0e:5d:1c:f6:e5:87:7b:6e:9a:1d:1b:2c:9b:35:
a6:f8:c7:e4:30:42:9a:59:8b:1a:35:d6:7b:c7:37:
8d:a6:1c:28:da:2d:c5:7d:1f:29:8e:0c:a8:8e:f3:
58:c0:db:fe:77:6f:13:1c:09:0f:30:4f:af:c4:76:
fb:9b:e8:72:7d:8b:c9:bb:f2:c6:0d:a5:1c:7b:44:
65:96:39:2f:cc:de:64:8b:f4:96:37:00:31:6d:74:
6f:0d:3c:4f:f4:0a:ef:b9:5d:f4:4c:53:68:9c:f5:
3f:90:9b:3d:7e:79:2c:e2:86:48:89:5e:6f:2c:eb:
e0:a3:17:bf:88:2c:d8:6d:ee:60:97:95:97:33:21:
27:e3:4a:91:83:44:44:59:72:80:d4:fc:74:74:08:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:67:12:22:6F:FA:96:7E:8A:3D:2F:6B:5A:73:4B:1A:BB:61:BA
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/IoJnEiJv-pZ-ij0va1pzSxq7Ybo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:58:7b:ab:2c:15:45:04:82:60:77:4f:97:d7:fa:28:70:e7:
4d:38:d0:e0:91:16:9f:59:ab:c4:9f:40:ee:61:4d:61:fd:73:
2d:9d:c5:8d:52:eb:c9:1b:4c:7f:26:1d:8c:8a:d0:9d:52:ea:
e1:84:b3:61:0d:ae:75:19:89:57:73:11:38:93:f3:3f:4c:4e:
02:74:2b:fd:b7:19:2b:bb:64:e7:a6:47:7c:ee:d2:b0:4c:f3:
7f:ab:e1:0b:51:dd:7d:7f:12:82:2a:fc:2c:33:d5:10:52:e2:
85:4b:6a:b0:64:c7:af:09:5b:7a:52:03:b2:83:4a:5f:06:ab:
e7:9d:98:09:ce:39:5f:f4:52:84:17:fb:ad:72:17:d2:11:5f:
1b:31:67:e4:70:14:f8:d9:10:cb:9f:ab:c4:97:35:7a:b1:14:
fd:01:84:ee:e0:6f:a0:8d:6e:a0:16:4b:a5:c7:5a:cc:2e:19:
30:d6:ed:b0:76:56:b8:58:1c:e1:14:3e:49:67:b3:62:1b:f6:
8a:47:93:18:77:68:af:92:98:d4:fc:f2:a3:8e:a6:da:1a:a2:
60:37:4b:a3:ea:8d:78:ca:8c:a1:bd:73:b4:da:2e:1b:af:26:
3b:b5:a6:7e:e7:d0:16:eb:78:f5:c2:83:ee:9a:cc:8b:86:2d:
dd:7c:57:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVKOdEw05CpwLY2YDH4u1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjMwMTAxMjE1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjgyNjcxMjIyNmZmYTk2N2U4YTNkMmY2YjVhNzM0YjFhYmI2MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS89s8ljhHbUBKrOZEPC/2/GimXd
HFvkYv0WwDRfSWRz3x2sbjKRcEObB2zgAROaVUzzTZqGt5Wzg9uDFguSOHhfoPv6
3XNQvggalBhlKQILrqI6I8UJ/l0jA9oK6ft8ff1oYWXNuO/JDl0c9uWHe26aHRss
mzWm+MfkMEKaWYsaNdZ7xzeNphwo2i3FfR8pjgyojvNYwNv+d28THAkPME+vxHb7
m+hyfYvJu/LGDaUce0RlljkvzN5ki/SWNwAxbXRvDTxP9ArvuV30TFNonPU/kJs9
fnks4oZIiV5vLOvgoxe/iCzYbe5gl5WXMyEn40qRg0REWXKA1Px0dAgYAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKCZxIib/qWfoo9L2tac0sau2G6MB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvSW9KbkVpSnYtcFotaWowdmExcHpTeHE3WWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQHdMA0G
CSqGSIb3DQEBCwUAA4IBAQAbWHurLBVFBIJgd0+X1/oocOdNONDgkRafWavEn0Du
YU1h/XMtncWNUuvJG0x/Jh2MitCdUurhhLNhDa51GYlXcxE4k/M/TE4CdCv9txkr
u2Tnpkd87tKwTPN/q+ELUd19fxKCKvwsM9UQUuKFS2qwZMevCVt6UgOyg0pfBqvn
nZgJzjlf9FKEF/utchfSEV8bMWfkcBT42RDLn6vElzV6sRT9AYTu4G+gjW6gFkul
x1rMLhkw1u2wdla4WBzhFD5JZ7NiG/aKR5MYd2ivkpjU/PKjjqbaGqJgN0uj6o14
yoyhvXO02i4bryY7taZ+59AW63j1woPumsyLhi3dfFf/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org