Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/CiC7_clFzlVfoaOa7TWtXeTyCTM.roa
File: CiC7_clFzlVfoaOa7TWtXeTyCTM.roa (raw, json)
Hash identifier: ar3/hRwcyRbLYNZZ+MuarzSSad5f0Ag28d6SIRD86/c=
Subject key identifier: 0A:20:BB:FD:C9:45:CE:55:5F:A1:A3:9A:ED:35:AD:5D:E4:F2:09:33
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 01856F8B73CF44186CF0DEC7BBCFFDEA00DF
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/CiC7_clFzlVfoaOa7TWtXeTyCTM.roa
Signing time: Sun 01 Jan 2023 22:54:48 +0000
ROA not before: Sun 01 Jan 2023 22:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 185.206.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:73:cf:44:18:6c:f0:de:c7:bb:cf:fd:ea:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 1 22:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a20bbfdc945ce555fa1a39aed35ad5de4f20933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:be:82:41:fc:4f:62:eb:30:30:1f:e3:5e:
89:d4:84:2b:e7:7c:ef:5b:6c:a9:16:58:72:ae:7f:
ad:c2:d5:d8:41:0a:3e:fe:d2:34:cf:52:05:a4:9b:
d6:dd:e6:d0:86:46:3b:09:f0:ae:dd:7e:0a:95:78:
58:d0:ce:dc:4d:7c:c9:d1:9c:80:1e:c7:a0:15:36:
77:69:a1:82:57:1f:36:62:f2:93:1f:b8:6a:ec:0d:
28:9c:da:ab:fb:ac:99:d7:e9:45:8c:93:d3:ba:39:
30:fd:5d:5e:a4:2b:f0:d9:0f:10:2b:08:25:af:39:
38:ba:4c:b1:cb:7f:95:80:cd:4e:8c:52:73:89:59:
c4:28:e2:75:a4:f3:3a:9b:b7:e4:c4:f4:84:cd:62:
f2:a6:ea:83:d4:1a:34:1a:dd:9d:1b:17:fb:32:f1:
57:6c:cf:98:40:aa:bc:47:2d:cf:00:9d:d7:a6:0b:
70:f9:89:cd:b3:92:5c:4b:ad:69:a2:de:52:45:21:
25:21:35:e5:b4:18:3d:89:da:97:e6:da:ad:4f:93:
15:b2:2d:0d:92:bc:11:4f:90:2a:59:b2:4c:89:41:
16:0e:3d:7e:f5:b4:2c:7a:bf:6a:f0:e6:b3:14:eb:
c0:55:a4:8f:11:f2:fb:4c:80:6b:0a:56:d9:8c:64:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:BB:FD:C9:45:CE:55:5F:A1:A3:9A:ED:35:AD:5D:E4:F2:09:33
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/CiC7_clFzlVfoaOa7TWtXeTyCTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c9:1e:30:f5:a9:0f:f4:ec:56:d0:cf:8c:a9:d5:26:2d:ff:
83:03:4a:5c:7d:ba:68:59:e1:0c:88:a2:1e:5a:c7:82:a7:9f:
ad:df:f5:00:e6:79:8d:89:85:8d:d5:b5:c8:41:97:5e:90:77:
dd:54:a4:98:22:a6:30:2d:cc:98:76:bf:c0:57:86:53:fd:e1:
ec:f1:d6:11:3d:29:c8:bf:53:a1:10:f0:6a:b0:28:3f:87:85:
85:32:ae:da:94:8c:21:5d:5e:f9:f1:47:f3:3f:3c:2d:01:0e:
81:e9:13:75:73:b0:e6:ef:25:09:bf:44:4d:95:8e:f4:0b:34:
3a:94:f5:dd:dc:0c:70:bf:7a:7e:d9:c2:f6:87:57:4a:32:64:
46:51:fa:c8:86:8c:11:8d:f9:ad:32:51:a0:85:12:8f:e7:a7:
d0:c0:18:77:58:50:d6:6b:39:f2:16:13:b7:ac:b1:ca:33:f8:
ef:48:0e:83:43:62:82:3c:01:4c:4c:22:a2:90:28:ff:61:65:
98:d2:cc:ed:f4:2b:37:da:94:f8:d0:b4:4d:4f:6b:33:5d:ba:
98:81:2e:fd:d5:5b:75:56:23:79:6d:70:ef:ad:16:86:ff:4f:
9a:71:a9:cd:27:c0:2d:47:0d:f7:fb:a4:5e:f7:1e:76:88:bb:
87:67:8b:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi3PPRBhs8N7Hu8/96gDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjMwMTAxMjI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIwYmJmZGM5NDVjZTU1NWZhMWEzOWFlZDM1YWQ1ZGU0ZjIwOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnky+gkH8T2LrMDAf416J1IQr53zv
W2ypFlhyrn+twtXYQQo+/tI0z1IFpJvW3ebQhkY7CfCu3X4KlXhY0M7cTXzJ0ZyA
HsegFTZ3aaGCVx82YvKTH7hq7A0onNqr+6yZ1+lFjJPTujkw/V1epCvw2Q8QKwgl
rzk4ukyxy3+VgM1OjFJziVnEKOJ1pPM6m7fkxPSEzWLypuqD1Bo0Gt2dGxf7MvFX
bM+YQKq8Ry3PAJ3Xpgtw+YnNs5JcS61pot5SRSElITXltBg9idqX5tqtT5MVsi0N
krwRT5AqWbJMiUEWDj1+9bQser9q8OazFOvAVaSPEfL7TIBrClbZjGTWRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAogu/3JRc5VX6Gjmu01rV3k8gkzMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvQ2lDN19jbEZ6bFZmb2FPYTdUV3RYZVR5Q1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc57MA0G
CSqGSIb3DQEBCwUAA4IBAQA7yR4w9akP9OxW0M+MqdUmLf+DA0pcfbpoWeEMiKIe
WseCp5+t3/UA5nmNiYWN1bXIQZdekHfdVKSYIqYwLcyYdr/AV4ZT/eHs8dYRPSnI
v1OhEPBqsCg/h4WFMq7alIwhXV758UfzPzwtAQ6B6RN1c7Dm7yUJv0RNlY70CzQ6
lPXd3Axwv3p+2cL2h1dKMmRGUfrIhowRjfmtMlGghRKP56fQwBh3WFDWaznyFhO3
rLHKM/jvSA6DQ2KCPAFMTCKikCj/YWWY0szt9Cs32pT40LRNT2szXbqYgS791Vt1
ViN5bXDvrRaG/0+acanNJ8AtRw33+6Re9x52iLuHZ4tI
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:38 2024 by rpki-client on console-fra.rpki-client.org