Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IrlWMQ-l_VRw56_77p4T5NpxJHo.roa
File: IrlWMQ-l_VRw56_77p4T5NpxJHo.roa (raw, json)
Hash identifier: 6ocpR0oQFi06ZGgMjNTEwfeekTJEwBXmDmClwckFmC8=
Subject key identifier: 22:B9:56:31:0F:A5:FD:54:70:E7:AF:FB:EE:9E:13:E4:DA:71:24:7A
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01856DDD61B950A71D7391E64E59E2FD3FE9
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IrlWMQ-l_VRw56_77p4T5NpxJHo.roa
Signing time: Sun 01 Jan 2023 15:05:03 +0000
ROA not before: Sun 01 Jan 2023 15:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.132.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 06:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:61:b9:50:a7:1d:73:91:e6:4e:59:e2:fd:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 15:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22b956310fa5fd5470e7affbee9e13e4da71247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:c5:58:3a:75:d8:06:4a:5f:36:f2:c1:19:
1d:af:87:5d:d9:e0:90:05:35:48:a3:a7:46:80:89:
e8:29:0a:5d:3f:92:d6:f4:64:eb:63:85:a5:e0:e5:
4f:35:93:70:d0:30:91:4c:48:e9:5f:38:fc:43:10:
ad:92:15:dd:7c:1b:f1:e6:3c:8f:3c:90:97:27:ee:
46:0c:dc:f9:7b:6d:78:85:4f:3a:6e:0f:c4:5f:6d:
67:36:98:71:65:d2:25:bb:41:d9:59:2d:6b:9b:f0:
c8:10:5b:35:5f:be:8b:1b:49:36:68:cf:51:8b:68:
45:24:50:0c:7b:7f:9a:ce:6b:5c:84:ce:60:5b:01:
67:1c:c8:9a:bc:48:ae:a7:06:4e:ad:3b:7a:d0:ee:
cb:24:ae:ad:76:58:f6:e4:6c:1a:3a:1c:f9:0d:7e:
44:b0:6a:27:b3:b5:f6:91:d2:21:81:a8:01:76:90:
3a:06:43:60:b8:09:c6:47:3d:02:af:1f:e1:f2:ee:
81:38:6c:d4:2a:a0:f7:cb:bf:69:ff:0a:78:83:37:
9f:be:af:9f:db:50:fa:72:dc:11:ac:94:60:63:df:
b6:c6:10:77:e4:e9:ed:0d:ed:90:57:23:d4:72:87:
21:4d:5e:9f:17:f7:7a:be:de:e6:a7:07:78:1d:04:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:56:31:0F:A5:FD:54:70:E7:AF:FB:EE:9E:13:E4:DA:71:24:7A
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IrlWMQ-l_VRw56_77p4T5NpxJHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
04:98:31:2d:a8:7f:3c:e8:4d:91:0a:84:44:a8:1d:ba:d5:b8:
ff:07:c2:75:bd:81:36:44:06:95:c6:a8:d5:c6:3c:39:76:bb:
0a:6e:e6:ba:0c:c2:2d:a2:ee:00:a3:b7:14:6c:9d:ec:58:1a:
e2:c8:46:f4:24:45:fc:1d:63:ff:c0:41:e6:b3:7b:2b:92:68:
6f:55:7a:d5:f7:f4:f9:eb:89:42:2f:50:22:e5:87:63:83:4a:
d1:4f:69:43:c7:80:01:bd:3d:66:4e:e6:67:68:1a:8a:8b:38:
53:62:4f:3a:34:fe:87:bc:16:d1:9f:a9:25:53:cb:02:bf:91:
22:da:2b:f3:75:fc:21:c6:68:2e:83:91:50:e6:ba:35:df:8d:
83:cc:86:b5:b4:ae:73:a0:01:6e:b1:09:85:c5:4d:89:ac:f0:
64:5b:6b:53:96:0a:7d:70:36:a6:d4:fa:73:b2:31:da:7d:12:
20:81:45:68:e3:4f:fd:e3:60:31:14:c0:30:c3:df:08:53:f8:
3f:19:9d:21:94:8e:c7:d9:8e:08:da:98:36:ff:e2:35:7b:83:
4e:af:52:02:32:d8:b7:22:b9:b2:e1:19:7e:eb:c7:c3:c8:1f:
70:73:78:1b:b8:c1:df:63:bf:97:d8:c1:7e:1c:b5:92:61:49:
a9:90:15:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt3WG5UKcdc5HmTlni/T/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjMwMTAxMTUwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI5NTYzMTBmYTVmZDU0NzBlN2FmZmJlZTllMTNlNGRhNzEyNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTFWDp12AZKXzbywRkdr4dd2eCQ
BTVIo6dGgInoKQpdP5LW9GTrY4Wl4OVPNZNw0DCRTEjpXzj8QxCtkhXdfBvx5jyP
PJCXJ+5GDNz5e214hU86bg/EX21nNphxZdIlu0HZWS1rm/DIEFs1X76LG0k2aM9R
i2hFJFAMe3+azmtchM5gWwFnHMiavEiupwZOrTt60O7LJK6tdlj25GwaOhz5DX5E
sGons7X2kdIhgagBdpA6BkNguAnGRz0Crx/h8u6BOGzUKqD3y79p/wp4gzefvq+f
21D6ctwRrJRgY9+2xhB35OntDe2QVyPUcochTV6fF/d6vt7mpwd4HQQMawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCK5VjEPpf1UcOev++6eE+TacSR6MB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvSXJsV01RLWxfVlJ3NTZfNzdwNFQ1TnB4SkhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYS6MA0G
CSqGSIb3DQEBCwUAA4IBAQAEmDEtqH886E2RCoREqB261bj/B8J1vYE2RAaVxqjV
xjw5drsKbua6DMItou4Ao7cUbJ3sWBriyEb0JEX8HWP/wEHms3srkmhvVXrV9/T5
64lCL1Ai5Ydjg0rRT2lDx4ABvT1mTuZnaBqKizhTYk86NP6HvBbRn6klU8sCv5Ei
2ivzdfwhxmgug5FQ5ro1342DzIa1tK5zoAFusQmFxU2JrPBkW2tTlgp9cDam1Ppz
sjHafRIggUVo40/942AxFMAww98IU/g/GZ0hlI7H2Y4I2pg2/+I1e4NOr1ICMti3
Irmy4Rl+68fDyB9wc3gbuMHfY7+X2MF+HLWSYUmpkBVj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:02 2024 by rpki-client on console-ams.rpki-client.org