Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/p8Pqaje1uJod89x-M1SuBhtk69Q.roa
File: p8Pqaje1uJod89x-M1SuBhtk69Q.roa (raw, json)
Hash identifier: 5OcTGMw1wbJNZXxYRNIbeguVS2h91VdTI3vDs2IBMgk=
Subject key identifier: A7:C3:EA:6A:37:B5:B8:9A:1D:F3:DC:7E:33:54:AE:06:1B:64:EB:D4
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018572B43B2F9745C7F82178C0223E989FC0
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/p8Pqaje1uJod89x-M1SuBhtk69Q.roa
Signing time: Mon 02 Jan 2023 13:38:12 +0000
ROA not before: Mon 02 Jan 2023 13:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47352
IP address blocks: 185.1.236.0/24 maxlen: 24
2001:7f8:126::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3b:2f:97:45:c7:f8:21:78:c0:22:3e:98:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 2 13:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7c3ea6a37b5b89a1df3dc7e3354ae061b64ebd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:45:73:11:38:c7:6d:82:19:5d:25:ac:66:
39:b0:b2:ed:4c:0b:ef:cf:c3:31:c0:30:8e:a6:b2:
89:78:21:a4:2d:b2:2d:c8:b2:cd:8d:f9:27:38:e9:
1d:9e:90:53:14:3f:88:c1:5e:5e:55:76:40:83:54:
01:3c:1a:22:a6:89:29:fd:72:30:9b:2e:9a:d8:65:
42:8e:30:68:75:31:a1:ab:3a:eb:43:f8:96:03:9e:
a9:2a:bf:ae:b0:2b:40:a9:b6:e9:bf:5a:57:e2:f0:
c3:93:20:8d:db:10:18:4e:d8:b3:47:56:bd:32:f8:
9d:ac:2d:e2:43:06:32:d5:68:dd:7d:0b:94:87:0a:
bd:07:3f:09:16:49:8e:d3:a1:d6:9d:bf:ae:80:81:
23:d5:57:e8:ed:80:55:81:8d:48:6d:79:9e:e9:86:
9f:81:8c:35:88:a6:39:98:61:e0:2b:32:7e:fa:bb:
71:da:bf:95:33:96:4d:85:16:98:80:b5:de:4f:8e:
79:f5:dd:de:75:6e:9d:53:07:c5:db:43:4d:dd:46:
cf:60:4f:26:bb:5e:55:e3:ff:61:6e:ac:8e:a2:dd:
9b:d8:f7:1f:22:d7:54:0f:78:37:c3:ae:cc:5e:2f:
0a:97:c9:35:18:3f:e4:40:cd:ee:66:2d:6d:11:25:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:EA:6A:37:B5:B8:9A:1D:F3:DC:7E:33:54:AE:06:1B:64:EB:D4
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/p8Pqaje1uJod89x-M1SuBhtk69Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.236.0/24
IPv6:
2001:7f8:126::/48
Signature Algorithm: sha256WithRSAEncryption
ad:62:fa:8e:15:1a:a4:d3:08:a6:75:c6:a5:1b:07:cd:96:6d:
51:8b:9c:f2:e0:93:ef:25:3c:2a:3e:f4:d6:7e:a8:94:91:0f:
a9:66:70:54:f9:11:8b:22:83:d1:9d:ee:f6:98:64:85:6e:2b:
8b:76:cc:eb:86:e9:5f:f0:1d:61:35:5c:83:27:09:fb:e6:d7:
e8:65:0f:d1:93:64:eb:09:07:6e:49:3a:cb:79:df:0d:98:e7:
e8:09:a0:fb:e4:df:a1:1d:4b:2f:04:f0:be:f2:e8:cc:ee:24:
3c:af:b1:56:78:8d:98:0c:4d:af:bb:c9:bd:50:db:7b:81:1a:
6c:22:5d:a2:76:a2:b7:a8:d9:41:a9:f8:d6:4a:40:1f:18:92:
08:8d:df:7d:95:b5:90:0b:10:2a:fc:18:63:14:1a:93:90:78:
d2:b7:d2:0a:39:d9:58:90:a0:e9:6b:5a:f0:7d:cd:f8:9b:95:
56:cb:5e:f8:3b:db:ca:7d:d0:18:82:c8:48:bb:38:3f:cb:db:
1e:37:c0:da:86:43:e9:12:24:01:80:7c:6d:a6:2d:bb:4d:e3:
3a:89:13:fd:5e:60:f8:0c:98:55:12:f0:f1:0a:e7:3f:9a:13:
1f:d4:bb:d6:ee:43:1a:1c:20:cf:4a:87:81:7e:db:f8:b5:68:
d1:50:e3:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVytDsvl0XH+CF4wCI+mJ/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjMwMTAyMTMzODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2MzZWE2YTM3YjViODlhMWRmM2RjN2UzMzU0YWUwNjFiNjRlYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmFFcxE4x22CGV0lrGY5sLLtTAvv
z8MxwDCOprKJeCGkLbItyLLNjfknOOkdnpBTFD+IwV5eVXZAg1QBPBoipokp/XIw
my6a2GVCjjBodTGhqzrrQ/iWA56pKr+usCtAqbbpv1pX4vDDkyCN2xAYTtizR1a9
MvidrC3iQwYy1WjdfQuUhwq9Bz8JFkmO06HWnb+ugIEj1Vfo7YBVgY1IbXme6Yaf
gYw1iKY5mGHgKzJ++rtx2r+VM5ZNhRaYgLXeT4559d3edW6dUwfF20NN3UbPYE8m
u15V4/9hbqyOot2b2PcfItdUD3g3w67MXi8Kl8k1GD/kQM3uZi1tESUrRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKfD6mo3tbiaHfPcfjNUrgYbZOvUMB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvcDhQcWFqZTF1Sm9kODl4LU0xU3VCaHRrNjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQHsMA8E
AgACMAkDBwAgAQf4ASYwDQYJKoZIhvcNAQELBQADggEBAK1i+o4VGqTTCKZ1xqUb
B82WbVGLnPLgk+8lPCo+9NZ+qJSRD6lmcFT5EYsig9Gd7vaYZIVuK4t2zOuG6V/w
HWE1XIMnCfvm1+hlD9GTZOsJB25JOst53w2Y5+gJoPvk36EdSy8E8L7y6MzuJDyv
sVZ4jZgMTa+7yb1Q23uBGmwiXaJ2oreo2UGp+NZKQB8YkgiN332VtZALECr8GGMU
GpOQeNK30go52ViQoOlrWvB9zfiblVbLXvg728p90BiCyEi7OD/L2x43wNqGQ+kS
JAGAfG2mLbtN4zqJE/1eYPgMmFUS8PEK5z+aEx/Uu9buQxocIM9Kh4F+2/i1aNFQ
49Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:39 2024 by rpki-client on console-ams.rpki-client.org