Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-Gs6G1cKz691MutnkR_BHKeXBAc.roa
File: 1-Gs6G1cKz691MutnkR_BHKeXBAc.roa (raw, json)
Hash identifier: Q97YNsAlS1grJaUVhvIbYIj/V51KTsb2esRUwlNOKEM=
Subject key identifier: F8:6B:3A:1B:57:0A:CF:AF:75:32:EB:67:91:1F:C1:1C:A7:97:04:07
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0186C1E5E2C8050BA486E18092DAA41A5C40
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-Gs6G1cKz691MutnkR_BHKeXBAc.roa
Signing time: Wed 08 Mar 2023 15:45:13 +0000
ROA not before: Wed 08 Mar 2023 15:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 185.173.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:e5:e2:c8:05:0b:a4:86:e1:80:92:da:a4:1a:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Mar 8 15:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f86b3a1b570acfaf7532eb67911fc11ca7970407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:a0:56:69:b7:f9:d4:98:08:04:a9:b0:f0:
e3:e2:c0:c6:29:b7:7d:7e:8e:05:e1:b6:fa:98:6c:
c6:e8:26:23:8b:36:a0:b7:b8:cc:c8:ec:7d:27:54:
69:fc:45:63:85:49:d7:51:e7:13:e7:7b:6e:7f:83:
97:51:7f:89:14:1e:cd:46:3d:16:17:84:7e:b3:e8:
a9:8b:2a:23:e9:fe:81:cb:a2:46:34:b2:50:6d:ff:
5b:ac:e6:d8:4d:eb:1b:3d:1f:16:b2:b2:ce:aa:09:
d3:f4:f7:b6:cd:1a:d4:b9:b2:75:0e:8a:a4:61:01:
33:86:c2:cf:13:e5:b2:6f:e7:93:bb:ff:23:8f:4c:
ab:2c:4d:97:17:95:a0:0b:bc:46:f8:2c:4a:b1:4c:
b8:9a:c0:a9:73:90:60:42:33:81:cc:74:72:49:74:
be:0c:cb:94:8d:9e:03:e8:62:7a:87:51:17:7e:7b:
b1:fc:03:5e:39:d8:e1:04:d5:20:08:b8:7f:cd:af:
aa:36:b2:55:f8:9c:08:ca:c8:0e:14:4b:90:6f:5c:
39:45:19:98:50:13:0d:f8:72:e3:ab:8d:80:79:5c:
2f:05:cc:b7:21:9c:0a:b2:21:da:a2:15:1f:8b:7c:
3e:ff:7d:7b:e4:54:c0:b4:60:d1:a0:be:ca:9d:d1:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:3A:1B:57:0A:CF:AF:75:32:EB:67:91:1F:C1:1C:A7:97:04:07
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-Gs6G1cKz691MutnkR_BHKeXBAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.144.0/24
Signature Algorithm: sha256WithRSAEncryption
af:11:cc:c8:74:73:d2:23:e2:aa:c0:90:63:94:8b:5e:4e:a6:
b1:8c:20:0b:7e:43:84:d4:7d:f6:de:71:34:f2:e7:16:09:7c:
f9:f2:06:43:15:e2:17:7c:86:b9:cb:0a:c8:90:80:7e:67:02:
eb:29:8d:d9:4a:b6:46:30:fd:ad:f9:9f:20:06:39:50:de:e5:
ac:48:89:a0:db:36:71:8e:21:ff:0d:79:e8:96:64:a3:59:62:
50:77:05:5f:eb:1a:0c:e1:bd:88:f9:d7:76:69:14:ea:a3:f0:
e8:05:fe:56:1f:21:bc:72:39:9b:cb:c6:d6:e6:2a:de:38:7c:
87:9d:97:0e:ad:d4:d7:66:57:e5:89:c1:23:fc:eb:de:04:f8:
8c:f0:a3:69:a9:9c:ce:15:5a:48:c3:f2:f6:e7:24:aa:bd:6d:
3b:c1:d7:18:dd:e6:d4:8b:9d:c3:92:b7:a3:21:79:c9:0e:c4:
d7:e9:6d:75:90:85:5a:5b:43:27:6a:6d:47:a5:01:40:62:f1:
2f:05:15:61:83:28:8e:49:fe:6f:9f:0b:0c:9c:d5:5c:52:71:
39:25:3a:01:42:e8:df:f6:88:5d:e4:8a:26:cc:6b:fc:28:f7:
20:14:c5:0d:85:77:33:08:56:03:78:cc:94:9c:e3:8e:8b:1b:
9c:72:ec:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYbB5eLIBQukhuGAktqkGlxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMzA4MTU0NTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODZiM2ExYjU3MGFjZmFmNzUzMmViNjc5MTFmYzExY2E3OTcwNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01GgVmm3+dSYCASpsPDj4sDGKbd9
fo4F4bb6mGzG6CYjizagt7jMyOx9J1Rp/EVjhUnXUecT53tuf4OXUX+JFB7NRj0W
F4R+s+ipiyoj6f6By6JGNLJQbf9brObYTesbPR8WsrLOqgnT9Pe2zRrUubJ1Doqk
YQEzhsLPE+Wyb+eTu/8jj0yrLE2XF5WgC7xG+CxKsUy4msCpc5BgQjOBzHRySXS+
DMuUjZ4D6GJ6h1EXfnux/ANeOdjhBNUgCLh/za+qNrJV+JwIysgOFEuQb1w5RRmY
UBMN+HLjq42AeVwvBcy3IZwKsiHaohUfi3w+/3175FTAtGDRoL7KndGzpQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhrOhtXCs+vdTLrZ5EfwRynlwQHMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvMS1HczZHMWNLejY5MU11dG5rUl9CSEtlWEJBYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWYvODZmYjQ2LWQ3MTItNDYwMi05Y2NlLTNhYTdkYWE5ZDNl
Yy8xL1hJa3E3VGd6NWhBUFhnenhJbkg5Z0xkVncyRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmtkDAN
BgkqhkiG9w0BAQsFAAOCAQEArxHMyHRz0iPiqsCQY5SLXk6msYwgC35DhNR99t5x
NPLnFgl8+fIGQxXiF3yGucsKyJCAfmcC6ymN2Uq2RjD9rfmfIAY5UN7lrEiJoNs2
cY4h/w156JZko1liUHcFX+saDOG9iPnXdmkU6qPw6AX+Vh8hvHI5m8vG1uYq3jh8
h52XDq3U12ZX5YnBI/zr3gT4jPCjaamczhVaSMPy9uckqr1tO8HXGN3m1Iudw5K3
oyF5yQ7E1+ltdZCFWltDJ2ptR6UBQGLxLwUVYYMojkn+b58LDJzVXFJxOSU6AULo
3/aIXeSKJsxr/Cj3IBTFDYV3MwhWA3jMlJzjjosbnHLsgQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org