Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5H8YPIIIkBNhHWIOq7k0ywQA2ug.roa
File: 5H8YPIIIkBNhHWIOq7k0ywQA2ug.roa (raw, json)
Hash identifier: /x/rHhLeeAJ300ldXf1uLD1GyAaNDW4t2M1ZrPCHBv4=
Subject key identifier: E4:7F:18:3C:82:08:90:13:61:1D:62:0E:AB:B9:34:CB:04:00:DA:E8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0187389272F0B28FF853DCF14AB4EF229C6B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5H8YPIIIkBNhHWIOq7k0ywQA2ug.roa
Signing time: Fri 31 Mar 2023 16:48:54 +0000
ROA not before: Fri 31 Mar 2023 16:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204629
IP address blocks: 185.244.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:92:72:f0:b2:8f:f8:53:dc:f1:4a:b4:ef:22:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 31 16:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e47f183c82089013611d620eabb934cb0400dae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:33:60:ad:aa:cb:47:17:cc:7f:40:0d:10:
54:d4:5d:00:17:a1:59:f3:52:eb:36:63:24:48:4a:
b0:a9:68:bc:93:bd:b9:de:04:8b:97:31:0b:b7:30:
7f:9f:00:db:46:12:0a:1e:71:3a:75:6b:70:28:88:
0e:fe:50:a6:8d:32:3d:f7:34:58:8f:f5:99:25:b6:
92:24:8a:84:f0:5f:f3:5b:6c:6c:b9:ac:58:82:58:
77:06:a1:6f:25:bb:c2:03:22:8f:87:f3:2b:da:d6:
d0:c3:f2:a9:03:27:b2:d1:5c:5c:42:2c:10:b7:66:
02:e6:3c:55:72:fc:2d:69:e1:1d:6c:75:d2:ea:0c:
aa:2b:38:41:d9:55:d4:44:8c:ee:04:3f:18:04:f6:
97:da:5c:cc:5b:1a:dc:8e:a2:39:40:df:a1:27:77:
27:73:8d:c5:c9:ae:a6:3c:bc:ea:35:68:2b:a7:c6:
dd:24:1b:cd:5a:40:0e:57:07:12:ff:da:b9:29:50:
fc:93:8d:77:2e:a0:9c:ea:4e:3e:57:7d:2b:7f:c7:
67:fd:ff:a6:dc:52:ed:dc:8c:02:c2:60:14:74:92:
62:d4:37:24:4c:73:dd:fa:8c:8e:9b:6f:90:ec:8c:
9c:49:cb:94:3b:14:c5:82:5b:de:73:ba:d2:e4:2f:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:18:3C:82:08:90:13:61:1D:62:0E:AB:B9:34:CB:04:00:DA:E8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5H8YPIIIkBNhHWIOq7k0ywQA2ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.228.0/22
Signature Algorithm: sha256WithRSAEncryption
90:9d:81:f7:03:cc:b9:dc:71:ba:ba:d9:84:b4:e5:e4:41:ef:
90:ae:3c:e0:99:d8:8e:ba:7e:3a:7d:c8:13:ba:8d:86:d5:88:
bc:39:85:08:39:4a:7d:75:2a:ba:4d:5c:19:19:5d:16:1f:25:
fb:b1:5f:ef:e7:f9:10:db:1d:f0:92:00:fc:ab:1b:9b:66:20:
68:7c:7c:c7:3f:0a:e7:4e:f9:7f:1f:87:27:b8:cf:93:04:42:
7c:78:a5:5b:4d:13:d0:dd:0d:ac:7b:8f:a3:47:e7:91:c8:96:
c9:a3:76:73:b4:60:cb:04:e5:21:eb:b7:5a:55:1c:de:86:06:
5d:13:9f:66:1a:94:52:6e:aa:8a:dc:37:2a:ac:56:37:a2:0e:
8d:74:5a:3c:05:a1:98:46:ce:43:88:c5:c2:57:fd:53:28:7b:
d0:d1:6b:ec:db:ca:f2:a1:39:d7:1f:0d:75:3b:aa:eb:e4:e8:
01:84:cc:22:c5:1f:32:54:63:38:d2:9f:68:13:0e:da:ed:bd:
1c:5e:71:76:a5:f4:4d:47:61:a4:30:05:ed:5b:28:29:c2:8e:
91:46:9d:b4:c3:fa:31:11:32:54:33:8d:46:9d:67:72:15:ef:
39:9c:1b:0f:7d:48:aa:0b:a8:16:79:48:07:7f:82:2e:25:3d:
25:a9:9d:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYc4knLwso/4U9zxSrTvIpxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMzMxMTY0ODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDdmMTgzYzgyMDg5MDEzNjExZDYyMGVhYmI5MzRjYjA0MDBkYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko8zYK2qy0cXzH9ADRBU1F0AF6FZ
81LrNmMkSEqwqWi8k7253gSLlzELtzB/nwDbRhIKHnE6dWtwKIgO/lCmjTI99zRY
j/WZJbaSJIqE8F/zW2xsuaxYglh3BqFvJbvCAyKPh/Mr2tbQw/KpAyey0VxcQiwQ
t2YC5jxVcvwtaeEdbHXS6gyqKzhB2VXURIzuBD8YBPaX2lzMWxrcjqI5QN+hJ3cn
c43Fya6mPLzqNWgrp8bdJBvNWkAOVwcS/9q5KVD8k413LqCc6k4+V30rf8dn/f+m
3FLt3IwCwmAUdJJi1DckTHPd+oyOm2+Q7IycScuUOxTFglvec7rS5C8gowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOR/GDyCCJATYR1iDqu5NMsEANroMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNUg4WVBJSUlrQk5oSFdJT3E3azB5d1FBMnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufTkMA0G
CSqGSIb3DQEBCwUAA4IBAQCQnYH3A8y53HG6utmEtOXkQe+QrjzgmdiOun46fcgT
uo2G1Yi8OYUIOUp9dSq6TVwZGV0WHyX7sV/v5/kQ2x3wkgD8qxubZiBofHzHPwrn
Tvl/H4cnuM+TBEJ8eKVbTRPQ3Q2se4+jR+eRyJbJo3ZztGDLBOUh67daVRzehgZd
E59mGpRSbqqK3DcqrFY3og6NdFo8BaGYRs5DiMXCV/1TKHvQ0Wvs28ryoTnXHw11
O6rr5OgBhMwixR8yVGM40p9oEw7a7b0cXnF2pfRNR2GkMAXtWygpwo6RRp20w/ox
ETJUM41GnWdyFe85nBsPfUiqC6gWeUgHf4IuJT0lqZ3r
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org