Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/ixtP8Jo6y-n17WiWP6BdLPAnYRI.roa
File: ixtP8Jo6y-n17WiWP6BdLPAnYRI.roa (raw, json)
Hash identifier: PT78BblwCwdLeumKN9qSVkhpP1q3MWxJXlnJFdoU2us=
Subject key identifier: 8B:1B:4F:F0:9A:3A:CB:E9:F5:ED:68:96:3F:A0:5D:2C:F0:27:61:12
Certificate issuer: /CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Certificate serial: 01856F26B808A391343722FF41D0849A72DE
Authority key identifier: DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/ixtP8Jo6y-n17WiWP6BdLPAnYRI.roa
Signing time: Sun 01 Jan 2023 21:04:46 +0000
ROA not before: Sun 01 Jan 2023 21:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 185.63.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b8:08:a3:91:34:37:22:ff:41:d0:84:9a:72:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Validity
Not Before: Jan 1 21:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b1b4ff09a3acbe9f5ed68963fa05d2cf0276112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:0e:c7:ed:00:5b:0a:3f:cd:e3:f2:45:f8:
b1:46:fb:fd:86:49:3c:d4:0c:1c:e5:5c:82:ea:fb:
d3:a7:17:24:44:4d:a5:68:a0:c1:4d:84:69:10:00:
3c:18:45:e0:fc:e2:e8:33:9f:7c:d6:ff:2b:48:13:
4d:38:c3:6a:16:78:57:69:18:69:e0:08:a5:8a:9a:
9e:8d:c0:f1:e0:03:24:ec:cf:37:e3:5c:1a:1b:e1:
fc:40:bd:7b:e6:71:32:ad:d4:96:67:ee:1e:96:25:
4d:38:fb:33:e6:84:01:9f:23:60:87:e6:f2:18:02:
ab:bd:40:52:05:2e:3d:08:6e:09:95:08:f8:c8:fc:
f9:2f:56:b4:62:38:3b:c8:0d:9a:5a:ed:df:bd:90:
60:7d:64:d2:b0:b4:0b:b5:ed:42:2a:27:b5:b0:f6:
1c:68:af:91:8c:a0:97:c4:a8:51:a2:16:3d:3d:4e:
c2:4c:99:ca:e1:a0:e0:7e:d1:80:34:6b:55:d0:3e:
b3:07:0a:07:2d:4e:31:00:80:c1:2d:f9:29:34:19:
9f:b2:ce:65:43:d3:2d:da:d5:4f:dd:61:a9:4f:b2:
25:d9:4c:45:98:91:89:13:eb:a3:58:89:3c:ca:8a:
9a:ec:2f:18:af:1c:b5:1f:33:e3:68:24:21:81:53:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:4F:F0:9A:3A:CB:E9:F5:ED:68:96:3F:A0:5D:2C:F0:27:61:12
X509v3 Authority Key Identifier:
keyid:DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/ixtP8Jo6y-n17WiWP6BdLPAnYRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c4:f4:da:c5:df:bb:fc:9c:c9:00:7a:ea:63:a0:5a:cc:f3:
e7:1b:09:bc:7e:15:83:2c:1b:3d:af:63:1f:33:36:9a:98:73:
a0:12:b1:f5:d6:55:8f:90:96:8b:96:1b:50:08:6e:11:6d:e9:
ae:f5:c1:20:f9:09:68:2a:d3:95:2c:6b:82:46:85:f4:7a:6f:
07:21:2c:6f:37:e7:44:02:59:4f:72:6d:0d:89:37:ce:14:a6:
c9:2b:fc:19:fb:c5:99:21:e2:25:86:1e:42:07:20:da:79:46:
62:51:e2:c9:57:b5:d8:8f:75:f6:27:3c:48:40:64:19:67:ae:
ff:31:80:42:1d:d4:49:c5:a5:ff:cd:a0:46:6c:8f:18:8c:f5:
34:6f:1e:2d:fa:05:d0:a4:a3:73:0d:a3:88:90:b5:06:45:d1:
90:91:f5:de:b7:16:22:fe:bf:e8:f6:d9:a3:7a:fe:3c:13:cf:
ee:ca:d1:2c:12:9b:81:48:cb:fa:0d:33:fc:fa:14:c0:fa:be:
71:b1:45:35:ba:a1:58:21:25:8c:b4:3d:32:f7:ae:73:9c:90:
d3:d0:fd:d6:94:7a:3a:01:34:eb:f5:a2:70:01:57:3d:22:02:
51:69:76:16:e0:66:38:c3:19:68:f2:8d:91:3c:99:78:57:f5:
1a:be:71:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJrgIo5E0NyL/QdCEmnLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTEwMmI1YTRhODZiZjQ3ZmYwNGU4ZWE2YjIwZWNkMGJl
MjM4MjYwHhcNMjMwMTAxMjEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjFiNGZmMDlhM2FjYmU5ZjVlZDY4OTYzZmEwNWQyY2YwMjc2MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XMOx+0AWwo/zePyRfixRvv9hkk8
1Awc5VyC6vvTpxckRE2laKDBTYRpEAA8GEXg/OLoM5981v8rSBNNOMNqFnhXaRhp
4AilipqejcDx4AMk7M8341waG+H8QL175nEyrdSWZ+4eliVNOPsz5oQBnyNgh+by
GAKrvUBSBS49CG4JlQj4yPz5L1a0Yjg7yA2aWu3fvZBgfWTSsLQLte1CKie1sPYc
aK+RjKCXxKhRohY9PU7CTJnK4aDgftGANGtV0D6zBwoHLU4xAIDBLfkpNBmfss5l
Q9Mt2tVP3WGpT7Il2UxFmJGJE+ujWIk8yoqa7C8Yrxy1HzPjaCQhgVM7dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsbT/CaOsvp9e1olj+gXSzwJ2ESMB8GA1UdIwQY
MBaAFNyhArWkqGv0f/BOjqayDs0L4jgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tFQ3RhU29hX1JfOEU2T3BySU96UXZpT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYmE0MTktYWNiZS00ZDcxLThjMGUt
NmExYTM2OGFhNjJmLzEvaXh0UDhKbzZ5LW4xN1dpV1A2QmRMUEFuWVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYmE0MTktYWNiZS00ZDcxLThjMGUtNmExYTM2OGFhNjJm
LzEvM0tFQ3RhU29hX1JfOEU2T3BySU96UXZpT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT9yMA0G
CSqGSIb3DQEBCwUAA4IBAQBjxPTaxd+7/JzJAHrqY6BazPPnGwm8fhWDLBs9r2Mf
MzaamHOgErH11lWPkJaLlhtQCG4Rbemu9cEg+QloKtOVLGuCRoX0em8HISxvN+dE
AllPcm0NiTfOFKbJK/wZ+8WZIeIlhh5CByDaeUZiUeLJV7XYj3X2JzxIQGQZZ67/
MYBCHdRJxaX/zaBGbI8YjPU0bx4t+gXQpKNzDaOIkLUGRdGQkfXetxYi/r/o9tmj
ev48E8/uytEsEpuBSMv6DTP8+hTA+r5xsUU1uqFYISWMtD0y965znJDT0P3WlHo6
ATTr9aJwAVc9IgJRaXYW4GY4wxlo8o2RPJl4V/UavnE3
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:45 2024 by rpki-client on console-fra.rpki-client.org