Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0nfoikfBUm1--aq-I2FWsV_U_Zc.roa
File: 0nfoikfBUm1--aq-I2FWsV_U_Zc.roa (raw, json)
Hash identifier: LvYOawmhq2XuAcB+8TyfJ6hxms2aPmlfXM1nbbHrmN0=
Subject key identifier: D2:77:E8:8A:47:C1:52:6D:7E:F9:AA:BE:23:61:56:B1:5F:D4:FD:97
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3DC4517CBDC19A0A5698831BE99A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0nfoikfBUm1--aq-I2FWsV_U_Zc.roa
Signing time: Mon 02 Jan 2023 12:34:51 +0000
ROA not before: Mon 02 Jan 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142578
IP address blocks: 188.209.156.0/22 maxlen: 24
185.207.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3d:c4:51:7c:bd:c1:9a:0a:56:98:83:1b:e9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d277e88a47c1526d7ef9aabe236156b15fd4fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:fc:db:14:c7:e6:17:b4:2b:fb:bb:df:de:
0d:ae:5a:66:60:d7:fa:4f:b9:56:1d:11:3c:34:87:
e5:30:ef:e7:e1:2f:5b:54:a2:0e:08:fb:39:6f:78:
ae:5c:dc:af:10:9c:e6:19:01:bf:13:aa:f3:b4:a0:
c2:a8:71:1c:4f:f4:1e:87:69:00:ef:0d:c6:b3:18:
6d:7e:38:cb:b6:55:35:a2:5d:84:df:2a:d5:66:7d:
33:ee:14:d7:ca:61:9b:e2:8f:c7:a8:ac:16:63:67:
ee:df:f5:59:45:40:47:57:82:e5:94:5c:ea:f7:0c:
e3:e5:e5:ea:2b:b3:ae:4f:56:b0:d4:39:e0:ab:d9:
a9:d2:84:58:36:1c:1f:7a:8d:b5:e0:73:3b:15:a3:
c8:88:a2:9a:95:02:08:42:77:be:de:ad:a2:b2:59:
ff:89:cc:47:73:68:6e:e7:9f:65:59:a2:4d:d0:51:
e0:af:19:da:e0:f1:c9:42:30:25:58:a3:b6:17:3b:
49:1d:d3:1e:18:d3:79:7b:59:05:7d:9d:c3:85:d9:
62:46:9d:41:19:f5:c5:b6:41:98:e7:d0:e4:a3:67:
f2:fc:2d:f9:91:67:07:d9:09:4f:18:d0:f1:63:64:
cf:5e:c9:36:ed:99:ac:da:e9:c6:28:e0:8c:a5:18:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:E8:8A:47:C1:52:6D:7E:F9:AA:BE:23:61:56:B1:5F:D4:FD:97
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0nfoikfBUm1--aq-I2FWsV_U_Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.196.0/22
188.209.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:25:25:9f:a6:2e:9e:e4:29:72:b9:f0:9c:da:c4:5d:3c:b3:
dc:9d:2a:61:f1:d6:99:76:e2:f3:d7:6b:21:c1:02:37:95:fd:
07:c7:a7:00:bc:a6:b0:1b:4c:4e:56:dd:a8:e3:d7:9f:d2:9d:
dd:6e:1d:84:de:b5:61:4f:db:06:c3:e4:0d:0e:a8:22:0f:c0:
9c:73:1d:0f:b0:34:b1:3f:77:06:33:c4:71:5a:a2:70:0c:85:
4e:0c:b1:d6:55:9b:6c:c5:7b:03:ef:23:0c:ea:b6:ab:ea:55:
f8:1b:2e:46:a7:f1:fe:aa:76:b2:81:9c:df:2a:78:06:c9:8c:
79:cf:1b:55:2b:4a:2f:17:82:83:42:e1:12:1c:e3:52:cd:b0:
45:15:1a:af:c1:65:f4:d7:76:5f:56:4b:af:c6:e6:a7:6d:b4:
89:76:f3:db:e4:45:35:79:5a:dc:eb:6e:ea:09:a4:d0:6e:d0:
4d:6f:85:e7:cf:da:87:e3:4d:d7:ce:05:db:59:4d:cb:6d:ab:
07:d3:68:3b:c8:ef:cd:30:2e:13:5f:39:69:b9:50:41:89:bf:
3f:0f:0c:7e:0a:ed:b2:2e:47:0e:c6:34:dc:34:e4:b9:c5:9d:
84:4d:f6:55:7e:6d:9d:77:92:87:74:0a:7b:d0:6c:c0:c8:b5:
1d:3d:f1:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyej3EUXy9wZoKVpiDG+maMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMTAyMTIzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjc3ZTg4YTQ3YzE1MjZkN2VmOWFhYmUyMzYxNTZiMTVmZDRmZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZr82xTH5he0K/u7394NrlpmYNf6
T7lWHRE8NIflMO/n4S9bVKIOCPs5b3iuXNyvEJzmGQG/E6rztKDCqHEcT/Qeh2kA
7w3GsxhtfjjLtlU1ol2E3yrVZn0z7hTXymGb4o/HqKwWY2fu3/VZRUBHV4LllFzq
9wzj5eXqK7OuT1aw1Dngq9mp0oRYNhwfeo214HM7FaPIiKKalQIIQne+3q2isln/
icxHc2hu559lWaJN0FHgrxna4PHJQjAlWKO2FztJHdMeGNN5e1kFfZ3DhdliRp1B
GfXFtkGY59Dko2fy/C35kWcH2QlPGNDxY2TPXsk27Zms2unGKOCMpRhXNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNJ36IpHwVJtfvmqviNhVrFf1P2XMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvMG5mb2lrZkJVbTEtLWFxLUkyRldzVl9VX1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuc/EAwQC
vNGcMA0GCSqGSIb3DQEBCwUAA4IBAQBLJSWfpi6e5ClyufCc2sRdPLPcnSph8daZ
duLz12shwQI3lf0Hx6cAvKawG0xOVt2o49ef0p3dbh2E3rVhT9sGw+QNDqgiD8Cc
cx0PsDSxP3cGM8RxWqJwDIVODLHWVZtsxXsD7yMM6rar6lX4Gy5Gp/H+qnaygZzf
KngGyYx5zxtVK0ovF4KDQuESHONSzbBFFRqvwWX013ZfVkuvxuanbbSJdvPb5EU1
eVrc627qCaTQbtBNb4Xnz9qH403XzgXbWU3LbasH02g7yO/NMC4TXzlpuVBBib8/
Dwx+Cu2yLkcOxjTcNOS5xZ2ETfZVfm2dd5KHdAp70GzAyLUdPfGq
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:47 2024 by rpki-client on console-fra.rpki-client.org