Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/o5eSu65JnMi5ZsYkZ1k35cg9NZk.roa
File: o5eSu65JnMi5ZsYkZ1k35cg9NZk.roa (raw, json)
Hash identifier: Y3cuSkMn9MsGi+r1WGvUEZR98O2PfN1a4NXIPxeVPVc=
Subject key identifier: A3:97:92:BB:AE:49:9C:C8:B9:66:C6:24:67:59:37:E5:C8:3D:35:99
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 01856F7990F53C89426EB919A498136871AB
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/o5eSu65JnMi5ZsYkZ1k35cg9NZk.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 185.150.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:90:f5:3c:89:42:6e:b9:19:a4:98:13:68:71:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a39792bbae499cc8b966c624675937e5c83d3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:42:be:86:28:fd:c9:df:ca:0f:9d:65:8c:
c2:59:77:62:b0:bf:e9:cf:0f:f6:02:d0:28:7c:7d:
3e:4d:1e:2b:75:eb:2e:0a:e8:80:e8:dc:a7:6a:47:
7a:40:b6:f6:d8:0f:d0:52:67:d6:d7:23:a7:5f:e5:
fb:95:34:8c:f5:a7:c3:31:3e:f6:0f:67:65:8b:86:
9c:cd:f4:4e:a0:45:00:f4:94:ab:81:eb:19:ba:0b:
1e:40:18:27:fd:a2:4a:7b:51:45:a0:ce:2c:4c:08:
67:33:26:c7:d1:9e:e7:e8:a4:80:7d:8c:95:ac:5f:
21:38:a5:e4:3a:dc:3e:3b:4b:e6:7e:51:82:12:d6:
c4:95:c3:0f:fe:ca:b6:af:03:84:28:2d:9e:ed:b7:
f2:69:9b:c6:63:d2:25:15:3f:67:2d:26:32:c1:e0:
53:f1:74:6e:a8:04:ee:a7:c1:82:c0:70:d9:a8:d6:
5c:8c:50:5b:b8:dc:d3:cb:5b:93:32:ef:d2:85:51:
88:8c:20:18:c6:27:45:da:6b:7b:fd:d1:af:a0:83:
dd:fd:fb:c7:16:21:0c:8b:0f:cf:4f:95:93:4c:f8:
2d:6f:ae:1a:31:fe:aa:1d:38:3c:e5:13:01:47:32:
2c:a9:16:4b:66:14:d0:c0:74:19:8e:b3:c8:ff:24:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:92:BB:AE:49:9C:C8:B9:66:C6:24:67:59:37:E5:C8:3D:35:99
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/o5eSu65JnMi5ZsYkZ1k35cg9NZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:d9:5d:c1:51:6d:7b:14:a1:57:a0:93:4d:e1:91:01:b8:1c:
8f:cf:26:ae:7b:4d:3b:1f:e4:ee:a3:7f:71:5f:e2:4f:e2:66:
dd:e7:74:ba:50:b6:6c:a0:f8:12:67:df:33:8f:f6:3a:c2:a7:
9b:15:31:76:ff:2c:bf:bf:5e:16:18:70:f7:35:70:98:df:36:
b9:ce:01:50:e9:57:15:7d:a7:1b:15:e9:45:b6:fb:3f:d8:07:
2d:af:ba:8b:12:c3:33:e7:bc:2b:72:27:a2:a8:08:8c:b3:f8:
0f:72:7e:5e:5c:ee:34:40:b9:29:c2:4c:af:cc:e8:1d:ba:00:
5c:85:87:e9:ff:d9:d5:a5:ff:b8:12:66:7e:43:9f:31:45:b0:
83:62:0f:28:a6:af:ff:5d:b9:09:48:4d:07:d4:4c:72:0d:02:
1b:03:c4:92:76:7e:b1:0b:64:c1:ab:1d:59:1e:42:38:e7:5f:
91:57:6e:15:4e:b2:43:57:d3:09:eb:4a:e8:56:b6:32:13:02:
af:1e:a3:06:c8:ff:ac:80:3a:b7:1f:4d:6d:1d:52:7e:c1:f9:
c1:d6:9d:97:7f:db:a5:e6:4e:05:be:be:8c:58:32:18:32:62:
7a:40:31:67:b3:d4:8b:8a:f5:71:59:8f:46:8d:b1:9e:b2:db:
ae:25:b8:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveZD1PIlCbrkZpJgTaHGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDFmZjZiZWM5ZmJjYjg5ZTk1MGEzYTAxZWYyZDY4NmYw
ZTdhMzEwHhcNMjMwMTAxMjIzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzk3OTJiYmFlNDk5Y2M4Yjk2NmM2MjQ2NzU5MzdlNWM4M2QzNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0pCvoYo/cnfyg+dZYzCWXdisL/p
zw/2AtAofH0+TR4rdesuCuiA6Nynakd6QLb22A/QUmfW1yOnX+X7lTSM9afDMT72
D2dli4aczfROoEUA9JSrgesZugseQBgn/aJKe1FFoM4sTAhnMybH0Z7n6KSAfYyV
rF8hOKXkOtw+O0vmflGCEtbElcMP/sq2rwOEKC2e7bfyaZvGY9IlFT9nLSYyweBT
8XRuqATup8GCwHDZqNZcjFBbuNzTy1uTMu/ShVGIjCAYxidF2mt7/dGvoIPd/fvH
FiEMiw/PT5WTTPgtb64aMf6qHTg85RMBRzIsqRZLZhTQwHQZjrPI/yQQxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOXkruuSZzIuWbGJGdZN+XIPTWZMB8GA1UdIwQY
MBaAFBXR/2vsn7y4npUKOgHvLWhvDnoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct
OTZiODY5MWY1MjYwLzEvbzVlU3U2NUpuTWk1WnNZa1oxazM1Y2c5TlprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw
LzEvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZbYMA0G
CSqGSIb3DQEBCwUAA4IBAQAL2V3BUW17FKFXoJNN4ZEBuByPzyaue007H+Tuo39x
X+JP4mbd53S6ULZsoPgSZ98zj/Y6wqebFTF2/yy/v14WGHD3NXCY3za5zgFQ6VcV
facbFelFtvs/2Actr7qLEsMz57wrcieiqAiMs/gPcn5eXO40QLkpwkyvzOgdugBc
hYfp/9nVpf+4EmZ+Q58xRbCDYg8opq//XbkJSE0H1ExyDQIbA8SSdn6xC2TBqx1Z
HkI451+RV24VTrJDV9MJ60roVrYyEwKvHqMGyP+sgDq3H01tHVJ+wfnB1p2Xf9ul
5k4Fvr6MWDIYMmJ6QDFns9SLivVxWY9GjbGestuuJbiI
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:42 2024 by rpki-client on console-fra.rpki-client.org