Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jAcNzvsLBdZiQuxBKy-zBQkbF2M.roa
File: jAcNzvsLBdZiQuxBKy-zBQkbF2M.roa (raw, json)
Hash identifier: wYlM8wkDUYo+Sq+pPsNLdg8sP5jL7IsJpBXKGzg/nrc=
Subject key identifier: 8C:07:0D:CE:FB:0B:05:D6:62:42:EC:41:2B:2F:B3:05:09:1B:17:63
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4CB6371A5A5001B8170E0D7E2A584
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jAcNzvsLBdZiQuxBKy-zBQkbF2M.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56909
IP address blocks: 185.244.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cb:63:71:a5:a5:00:1b:81:70:e0:d7:e2:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c070dcefb0b05d66242ec412b2fb305091b1763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:ce:6d:29:11:e9:ca:2d:a5:a4:f1:b4:d0:
b0:37:ba:70:8b:d1:5e:d0:8f:a9:74:0e:bd:12:2e:
6e:fa:c1:4b:ee:32:76:82:92:52:d4:11:21:a0:b4:
de:e9:b8:e8:90:c7:1f:2b:a3:ee:66:c7:40:44:99:
53:f2:70:0e:2a:6f:52:7f:cc:29:b3:b0:40:f5:f1:
f4:c6:87:cf:48:cb:c4:d6:62:cb:83:37:16:93:ae:
b7:5d:c5:3a:c8:9b:24:da:c2:0f:ff:5e:8a:16:b5:
9e:00:cc:91:18:57:b7:94:0d:b6:3b:47:c4:ac:34:
df:40:2e:6b:5a:2c:69:5c:d8:e2:8c:30:f2:90:12:
25:6d:f8:b1:0f:01:dd:54:71:53:ad:04:1c:7a:95:
7b:a3:5c:9c:61:f1:c3:d5:78:ea:7e:37:9d:ce:ab:
b2:e0:65:ac:d5:19:9f:ed:f3:8b:9d:f4:e8:a0:0a:
b1:cd:83:fe:eb:a0:c1:8e:4b:80:46:26:c3:33:82:
fe:69:d9:07:8f:72:1c:21:ef:2f:38:fd:3b:d4:19:
80:d2:64:61:c9:17:98:52:6f:6d:a2:a6:9c:65:8a:
ba:60:e6:5d:06:d4:84:3e:eb:59:f3:f6:64:d0:54:
06:33:bc:8b:68:fa:36:2b:af:dc:8c:c3:09:30:32:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:0D:CE:FB:0B:05:D6:62:42:EC:41:2B:2F:B3:05:09:1B:17:63
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jAcNzvsLBdZiQuxBKy-zBQkbF2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.234.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fe:fb:08:b0:6b:e6:3c:fe:de:6a:3a:6c:62:76:ee:ac:fc:
e8:e9:d1:30:e3:e6:76:45:7c:19:9d:97:62:e8:85:b7:6c:be:
c9:6a:88:9b:28:51:dc:84:e4:9f:9c:78:3e:6d:17:cf:a6:56:
0f:c9:46:3a:f1:37:3d:43:e1:83:4a:1b:ef:9d:4b:e0:9a:57:
45:a3:46:da:f3:95:4b:88:cc:b7:f1:80:76:23:3d:e1:97:b7:
8c:2b:8b:7d:79:75:be:01:09:36:99:ec:bd:93:f3:88:2a:d4:
5a:f7:3c:13:12:40:12:a3:97:87:e7:4a:f6:8c:75:29:b5:8a:
8f:1b:ea:59:fc:47:bc:2e:17:b7:6c:f4:ad:ec:4a:3c:7d:76:
c0:20:bf:67:9a:73:74:66:13:72:c2:1a:97:f2:92:25:a6:2b:
8e:f3:d6:4e:8c:49:1a:8e:79:6e:1c:c3:03:bf:5e:e4:7b:12:
ac:70:71:5b:57:4b:af:aa:d7:e7:8b:d9:c7:5b:85:ef:4c:0b:
02:42:b8:e3:94:63:ad:59:c6:ff:5e:1a:b1:09:bf:82:db:df:
9b:3c:ec:36:58:4b:16:aa:8e:90:c1:38:73:b8:71:fd:21:39:
69:37:2a:f0:2e:67:28:d2:5e:58:40:cc:c3:01:e1:40:95:80:
50:aa:b2:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1MtjcaWlABuBcODX4qWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzA3MGRjZWZiMGIwNWQ2NjI0MmVjNDEyYjJmYjMwNTA5MWIxNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGXObSkR6cotpaTxtNCwN7pwi9Fe
0I+pdA69Ei5u+sFL7jJ2gpJS1BEhoLTe6bjokMcfK6PuZsdARJlT8nAOKm9Sf8wp
s7BA9fH0xofPSMvE1mLLgzcWk663XcU6yJsk2sIP/16KFrWeAMyRGFe3lA22O0fE
rDTfQC5rWixpXNjijDDykBIlbfixDwHdVHFTrQQcepV7o1ycYfHD1Xjqfjedzquy
4GWs1Rmf7fOLnfTooAqxzYP+66DBjkuARibDM4L+adkHj3IcIe8vOP071BmA0mRh
yReYUm9toqacZYq6YOZdBtSEPutZ8/Zk0FQGM7yLaPo2K6/cjMMJMDIqUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwHDc77CwXWYkLsQSsvswUJGxdjMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvakFjTnp2c0xCZFppUXV4Qkt5LXpCUWtiRjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufTqMA0G
CSqGSIb3DQEBCwUAA4IBAQAE/vsIsGvmPP7eajpsYnburPzo6dEw4+Z2RXwZnZdi
6IW3bL7JaoibKFHchOSfnHg+bRfPplYPyUY68Tc9Q+GDShvvnUvgmldFo0ba85VL
iMy38YB2Iz3hl7eMK4t9eXW+AQk2mey9k/OIKtRa9zwTEkASo5eH50r2jHUptYqP
G+pZ/Ee8Lhe3bPSt7Eo8fXbAIL9nmnN0ZhNywhqX8pIlpiuO89ZOjEkajnluHMMD
v17kexKscHFbV0uvqtfni9nHW4XvTAsCQrjjlGOtWcb/XhqxCb+C29+bPOw2WEsW
qo6QwThzuHH9ITlpNyrwLmco0l5YQMzDAeFAlYBQqrJk
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org