Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/_Admen0AZrDcC3SSirITQ5_BUKk.roa
File: _Admen0AZrDcC3SSirITQ5_BUKk.roa (raw, json)
Hash identifier: oTWY8IEBxnobCQ1vZuguCstQiczHXaOGA4t4qoKu3j0=
Subject key identifier: FC:07:66:7A:7D:00:66:B0:DC:0B:74:92:8A:B2:13:43:9F:C1:50:A9
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 01856F66FE40BEABB1229428E836D1902858
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/_Admen0AZrDcC3SSirITQ5_BUKk.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25459
IP address blocks: 185.44.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fe:40:be:ab:b1:22:94:28:e8:36:d1:90:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc07667a7d0066b0dc0b74928ab213439fc150a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:69:44:5c:40:32:14:83:7e:86:4c:df:2a:
50:31:7c:3b:fa:13:13:be:94:54:8d:57:fb:4b:06:
07:c6:03:87:ce:c0:8b:79:38:92:eb:ca:fe:bb:b4:
1d:c8:5a:b7:79:56:c8:db:22:e7:84:07:e9:1b:3b:
5a:8c:16:a4:01:92:ef:84:66:36:d9:d8:b5:80:b9:
4b:05:91:21:69:9f:b4:00:32:c5:f4:17:62:4e:e3:
b7:5b:4a:01:22:21:5f:81:61:25:67:e1:84:1f:33:
5d:a0:b6:8a:df:75:88:da:60:5d:d6:15:cc:53:a9:
b8:f9:74:46:42:f2:16:cd:f9:58:57:aa:1e:38:e3:
19:cc:20:da:c1:18:ec:0f:34:fc:10:90:d5:1d:40:
d0:c0:0b:0d:c5:24:cd:68:bb:9c:f4:2d:39:1b:ba:
b8:e2:be:8a:e5:3a:31:f6:cd:4c:83:e3:40:a4:81:
69:79:98:bc:20:d8:11:bc:05:d7:51:a4:dc:9e:90:
37:21:ab:2e:12:b3:e6:6a:84:d5:23:19:6a:d5:5e:
39:6c:f5:ed:f7:a5:30:39:d0:3b:73:fd:b4:2b:5a:
c9:ca:00:97:f2:ea:0c:b2:5d:c0:06:2f:df:57:1f:
9e:62:e3:3b:a2:55:3f:ef:d4:e9:5c:aa:30:34:62:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:66:7A:7D:00:66:B0:DC:0B:74:92:8A:B2:13:43:9F:C1:50:A9
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/_Admen0AZrDcC3SSirITQ5_BUKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.168.0/22
Signature Algorithm: sha256WithRSAEncryption
02:3e:64:91:9c:fc:c7:7a:f9:91:38:09:87:44:95:ce:3f:40:
66:23:6a:c4:72:de:5d:68:43:a5:f0:26:0f:bf:e4:80:1d:5b:
cd:fe:c4:cc:71:9d:b4:7c:23:9d:d8:b0:1b:82:6d:6b:a5:2d:
9e:87:57:34:27:60:2e:e7:c3:2d:c1:86:bf:e6:94:3e:3e:75:
3d:88:ac:56:0f:f2:20:14:56:a6:5a:01:bc:21:f9:d0:86:76:
f3:85:1a:10:90:69:03:6c:65:7d:91:08:5b:65:af:07:94:f3:
7e:08:ba:69:42:12:71:81:8e:7c:12:78:8c:c3:c6:3f:ca:75:
07:7c:2c:4d:ce:b1:c7:d6:08:ea:18:bd:3b:5e:b4:d1:6c:b6:
1e:45:0c:92:1c:d3:6e:e0:b0:a7:86:ae:85:e0:74:7e:fc:de:
56:4e:bb:41:09:66:1b:e4:04:d4:80:14:20:94:1a:79:ef:5a:
cf:7c:09:a8:df:d0:70:a1:e3:1a:3e:97:e2:8f:a1:70:12:cc:
73:e8:f3:55:41:de:40:f8:f8:94:c3:8f:0a:d4:a8:94:58:07:
fd:48:b9:ce:26:c3:46:2a:24:0d:7b:62:94:d6:16:29:18:72:
22:23:37:c1:98:0c:41:4b:8c:84:89:14:cf:33:30:55:3a:40:
a7:cd:bc:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZv5AvquxIpQo6DbRkChYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2
MmY4ODkwHhcNMjMwMTAxMjIxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzA3NjY3YTdkMDA2NmIwZGMwYjc0OTI4YWIyMTM0MzlmYzE1MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ZpRFxAMhSDfoZM3ypQMXw7+hMT
vpRUjVf7SwYHxgOHzsCLeTiS68r+u7QdyFq3eVbI2yLnhAfpGztajBakAZLvhGY2
2di1gLlLBZEhaZ+0ADLF9BdiTuO3W0oBIiFfgWElZ+GEHzNdoLaK33WI2mBd1hXM
U6m4+XRGQvIWzflYV6oeOOMZzCDawRjsDzT8EJDVHUDQwAsNxSTNaLuc9C05G7q4
4r6K5Tox9s1Mg+NApIFpeZi8INgRvAXXUaTcnpA3IasuErPmaoTVIxlq1V45bPXt
96UwOdA7c/20K1rJygCX8uoMsl3ABi/fVx+eYuM7olU/79TpXKowNGLYTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwHZnp9AGaw3At0koqyE0OfwVCpMB8GA1UdIwQY
MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt
NWJjZmNlNWNhMmM3LzEvX0FkbWVuMEFackRjQzNTU2lySVRRNV9CVUtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3
LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSyoMA0G
CSqGSIb3DQEBCwUAA4IBAQACPmSRnPzHevmROAmHRJXOP0BmI2rEct5daEOl8CYP
v+SAHVvN/sTMcZ20fCOd2LAbgm1rpS2eh1c0J2Au58MtwYa/5pQ+PnU9iKxWD/Ig
FFamWgG8IfnQhnbzhRoQkGkDbGV9kQhbZa8HlPN+CLppQhJxgY58EniMw8Y/ynUH
fCxNzrHH1gjqGL07XrTRbLYeRQySHNNu4LCnhq6F4HR+/N5WTrtBCWYb5ATUgBQg
lBp571rPfAmo39BwoeMaPpfij6FwEsxz6PNVQd5A+PiUw48K1KiUWAf9SLnOJsNG
KiQNe2KU1hYpGHIiIzfBmAxBS4yEiRTPMzBVOkCnzbzJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:02 2024 by rpki-client on console-fra.rpki-client.org