Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/elqrFJkchUHrvG9W6-KaCguvmg0.roa
File: elqrFJkchUHrvG9W6-KaCguvmg0.roa (raw, json)
Hash identifier: 1P+NIpPuFODpf2gqxuFXIwD8Kw7mj/uACztLcdJ4U1w=
Subject key identifier: 7A:5A:AB:14:99:1C:85:41:EB:BC:6F:56:EB:E2:9A:0A:0B:AF:9A:0D
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0185724C8EF9EDB9E02769870D0BA3779F89
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/elqrFJkchUHrvG9W6-KaCguvmg0.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47721
IP address blocks: 185.124.84.0/24 maxlen: 24
185.124.85.0/24 maxlen: 24
185.124.86.0/24 maxlen: 24
185.124.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:8e:f9:ed:b9:e0:27:69:87:0d:0b:a3:77:9f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a5aab14991c8541ebbc6f56ebe29a0a0baf9a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:59:6b:b8:7d:73:0d:d1:b0:48:ca:66:e1:
fa:f3:6b:b4:1b:c8:85:11:e5:bf:5e:fe:e7:e7:2f:
bc:5d:dc:92:ba:86:10:de:3a:52:82:3a:77:c0:7c:
06:95:1a:68:4f:e9:9f:7c:5d:2f:7a:8c:9f:23:fb:
33:0f:e6:3e:5a:60:4f:32:fe:eb:16:ad:56:aa:3e:
3d:18:a6:0a:9c:31:33:48:57:90:68:16:e5:8b:99:
7b:06:4f:79:f3:9d:ee:bf:8d:b3:84:80:30:5e:52:
0a:91:26:e2:72:c2:32:a5:71:37:0c:14:96:cf:f3:
38:8a:d5:0b:5c:a8:c9:61:62:9a:f2:85:4c:96:fd:
01:3a:f8:0f:66:52:31:cf:58:dd:f9:ff:e0:63:3b:
9f:a1:67:d0:03:18:47:54:5e:f9:ee:f6:6a:80:28:
a8:a1:37:55:2e:95:12:b9:6a:7b:24:d8:4a:1d:73:
f9:03:f6:3b:11:fa:2a:28:83:c5:eb:ba:a3:3c:79:
d1:96:4b:e1:8b:43:4a:e1:b6:2d:ed:f5:47:09:c4:
1d:73:f0:9e:76:3a:9d:9c:54:94:b4:85:a5:14:fa:
54:73:b3:ee:53:f3:32:44:97:02:c6:e6:36:c7:ff:
7f:dc:e1:ce:28:62:cd:79:9f:6a:2d:e2:9a:84:39:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:AB:14:99:1C:85:41:EB:BC:6F:56:EB:E2:9A:0A:0B:AF:9A:0D
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/elqrFJkchUHrvG9W6-KaCguvmg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:a1:d1:19:63:51:fa:11:fd:39:1c:35:5c:c9:70:5e:33:33:
e6:8f:f3:0f:d0:43:62:d8:f5:02:2f:34:b6:5f:b7:cb:da:3d:
89:18:11:64:0a:db:08:d2:a2:dd:38:13:b3:ee:67:01:fc:f4:
39:69:18:2a:e5:26:ea:23:64:05:04:e3:d9:1b:41:79:1d:a7:
8b:d1:75:c2:c8:eb:25:4a:8f:7d:c0:33:e7:bf:a9:47:88:cd:
0c:7e:75:cd:c9:79:02:15:18:cb:e9:6c:0d:93:c0:ed:d6:31:
53:ff:78:fc:a9:ae:9a:f0:4c:a6:42:45:04:4d:ed:b8:ac:59:
a2:33:77:db:8d:34:21:e5:e5:65:b1:88:c5:72:ee:fd:6d:0b:
05:89:7d:af:2e:70:a7:8c:f1:d8:56:11:b8:73:fe:c0:76:c8:
13:e5:b9:66:b6:69:ce:73:11:0f:9e:a2:27:40:5a:dd:1d:b9:
97:8f:04:8c:9f:61:f8:f0:44:0c:2c:a1:0e:7a:85:fe:37:f3:
12:0e:49:77:20:38:6f:70:5a:1c:e5:c0:df:20:f7:f8:01:b2:
7f:be:7f:f8:0b:a7:b9:f3:87:03:da:f0:04:ef:f9:7c:51:14:
32:af:cd:26:ce:e1:fc:6a:1d:7c:ae:cc:40:ac:16:11:d4:66:
15:6e:9c:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyTI757bngJ2mHDQujd5+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhYWQ3MzM1ZjM0ZTRjZDgyOTQyM2JlYjA4OWM0ZTBh
NGU4NzQwHhcNMjMwMTAyMTE0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTVhYWIxNDk5MWM4NTQxZWJiYzZmNTZlYmUyOWEwYTBiYWY5YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyBZa7h9cw3RsEjKZuH682u0G8iF
EeW/Xv7n5y+8XdySuoYQ3jpSgjp3wHwGlRpoT+mffF0veoyfI/szD+Y+WmBPMv7r
Fq1Wqj49GKYKnDEzSFeQaBbli5l7Bk95853uv42zhIAwXlIKkSbicsIypXE3DBSW
z/M4itULXKjJYWKa8oVMlv0BOvgPZlIxz1jd+f/gYzufoWfQAxhHVF757vZqgCio
oTdVLpUSuWp7JNhKHXP5A/Y7EfoqKIPF67qjPHnRlkvhi0NK4bYt7fVHCcQdc/Ce
djqdnFSUtIWlFPpUc7PuU/MyRJcCxuY2x/9/3OHOKGLNeZ9qLeKahDnMyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpaqxSZHIVB67xvVuvimgoLr5oNMB8GA1UdIwQY
MBaAFA42qtczXzTkzYKUI76wicTgpOh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjkt
ODIyZGU5MzA4ZTAxLzEvZWxxckZKa2NoVUhydkc5VzYtS2FDZ3V2bWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjktODIyZGU5MzA4ZTAx
LzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXxUMA0G
CSqGSIb3DQEBCwUAA4IBAQB/odEZY1H6Ef05HDVcyXBeMzPmj/MP0ENi2PUCLzS2
X7fL2j2JGBFkCtsI0qLdOBOz7mcB/PQ5aRgq5SbqI2QFBOPZG0F5HaeL0XXCyOsl
So99wDPnv6lHiM0MfnXNyXkCFRjL6WwNk8Dt1jFT/3j8qa6a8EymQkUETe24rFmi
M3fbjTQh5eVlsYjFcu79bQsFiX2vLnCnjPHYVhG4c/7AdsgT5blmtmnOcxEPnqIn
QFrdHbmXjwSMn2H48EQMLKEOeoX+N/MSDkl3IDhvcFoc5cDfIPf4AbJ/vn/4C6e5
84cD2vAE7/l8URQyr80mzuH8ah18rsxArBYR1GYVbpzu
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:18 2024 by rpki-client on console-ams.rpki-client.org