Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/rInaDiucEZxXp-GZWV81Dj9E8wE.roa
File: rInaDiucEZxXp-GZWV81Dj9E8wE.roa (raw, json)
Hash identifier: za42mxTq3qoVttGqMoNqmqDHJ3jZCIvrtJrl2LM1I8M=
Subject key identifier: AC:89:DA:0E:2B:9C:11:9C:57:A7:E1:99:59:5F:35:0E:3F:44:F3:01
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 018595ECCB3850CB2CC24C19851541C9216C
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/rInaDiucEZxXp-GZWV81Dj9E8wE.roa
Signing time: Mon 09 Jan 2023 09:46:41 +0000
ROA not before: Mon 09 Jan 2023 09:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 185.161.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ec:cb:38:50:cb:2c:c2:4c:19:85:15:41:c9:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 9 09:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac89da0e2b9c119c57a7e199595f350e3f44f301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:73:0c:d4:d5:db:b6:21:90:63:03:55:10:
54:a3:24:bf:7d:96:0e:3c:22:69:1a:55:ad:2d:bf:
ec:57:19:aa:e2:c1:57:04:0f:36:4c:ac:67:31:79:
16:87:36:26:3a:8f:3c:dd:61:22:71:f1:18:0d:29:
0d:38:d2:a3:5d:9c:5c:13:7e:37:a0:0b:73:3e:4b:
6b:eb:10:35:28:c0:d2:c4:5a:29:d7:b1:52:32:6a:
9c:d6:fd:31:54:ef:2a:0b:f3:b4:69:a6:8f:26:eb:
52:2c:d9:dd:77:0b:2b:14:d7:d4:a6:c8:cc:31:56:
90:fe:1e:5d:88:39:1a:67:b6:f2:11:25:d4:77:db:
50:a7:96:66:9b:51:a7:75:67:d6:dd:b7:5b:80:c1:
29:16:3f:2d:53:43:11:fa:f3:8c:74:95:83:66:e0:
4b:aa:32:3e:f8:99:be:e5:93:d1:69:0e:12:d3:06:
b4:76:69:c3:5b:f1:4d:29:96:d8:6a:e4:50:fc:7a:
a6:bf:8e:3b:d8:10:3c:d5:3e:51:32:0c:bf:11:63:
8d:48:0d:b4:aa:6d:9d:f4:d8:ab:a8:94:c5:b0:d5:
7b:b6:1f:74:a6:9a:7a:b3:0b:69:7f:c0:e8:d8:fc:
29:7f:22:df:d2:4a:2e:ff:11:47:ed:0d:36:bb:e9:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:DA:0E:2B:9C:11:9C:57:A7:E1:99:59:5F:35:0E:3F:44:F3:01
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/rInaDiucEZxXp-GZWV81Dj9E8wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:17:b6:df:e3:02:11:1c:4e:f6:71:4d:5b:25:23:13:ec:
4f:f0:5d:6b:66:f0:d0:7d:ff:46:ce:09:e1:7e:3a:17:68:66:
e5:03:75:ae:f3:b0:7d:f5:11:53:95:b7:36:35:00:2b:47:5d:
77:32:10:3e:0f:63:50:47:9c:97:29:b2:7b:e9:fa:9e:74:89:
14:aa:58:cf:25:38:4c:f5:c5:f4:23:b1:0b:45:a1:64:8f:c0:
00:75:af:4d:dd:b5:71:1a:db:ef:64:61:c3:ee:3a:d9:8d:b1:
89:6f:9a:cc:54:9e:5f:1d:b2:d1:a2:6f:a5:85:0c:a1:a0:30:
05:4a:40:3f:f6:81:88:d2:73:f7:9a:45:ad:32:05:0e:76:d0:
de:f8:aa:20:d7:ba:7a:36:9b:6b:3b:a0:66:3f:fc:17:e1:5e:
d3:52:a7:cd:ad:46:36:f7:9b:01:08:0b:03:4e:7e:9a:d6:17:
07:51:4c:e8:bc:a8:71:01:44:36:ab:90:18:ba:6e:d6:eb:8e:
c5:bd:ac:69:08:b7:32:a1:c6:c6:1c:28:50:45:13:87:5e:9d:
ce:0e:29:0c:4b:c0:0f:86:6c:17:02:d9:8d:32:2c:e0:12:7c:
33:96:df:5f:9c:4c:80:2a:39:6a:18:d2:ff:1a:8e:dc:5d:d5:
4c:a8:0f:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWV7Ms4UMsswkwZhRVBySFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh
ZGUwNGYwHhcNMjMwMTA5MDk0NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzg5ZGEwZTJiOWMxMTljNTdhN2UxOTk1OTVmMzUwZTNmNDRmMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnltzDNTV27YhkGMDVRBUoyS/fZYO
PCJpGlWtLb/sVxmq4sFXBA82TKxnMXkWhzYmOo883WEicfEYDSkNONKjXZxcE343
oAtzPktr6xA1KMDSxFop17FSMmqc1v0xVO8qC/O0aaaPJutSLNnddwsrFNfUpsjM
MVaQ/h5diDkaZ7byESXUd9tQp5Zmm1GndWfW3bdbgMEpFj8tU0MR+vOMdJWDZuBL
qjI++Jm+5ZPRaQ4S0wa0dmnDW/FNKZbYauRQ/Hqmv4472BA81T5RMgy/EWONSA20
qm2d9NirqJTFsNV7th90ppp6swtpf8Do2PwpfyLf0kou/xFH7Q02u+nDLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyJ2g4rnBGcV6fhmVlfNQ4/RPMBMB8GA1UdIwQY
MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt
MTBlMjRlOWQwZmE3LzEvckluYURpdWNFWnhYcC1HWldWODFEajlFOHdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3
LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaF6MA0G
CSqGSIb3DQEBCwUAA4IBAQAWFRe23+MCERxO9nFNWyUjE+xP8F1rZvDQff9Gzgnh
fjoXaGblA3Wu87B99RFTlbc2NQArR113MhA+D2NQR5yXKbJ76fqedIkUqljPJThM
9cX0I7ELRaFkj8AAda9N3bVxGtvvZGHD7jrZjbGJb5rMVJ5fHbLRom+lhQyhoDAF
SkA/9oGI0nP3mkWtMgUOdtDe+Kog17p6NptrO6BmP/wX4V7TUqfNrUY295sBCAsD
Tn6a1hcHUUzovKhxAUQ2q5AYum7W647FvaxpCLcyocbGHChQRROHXp3ODikMS8AP
hmwXAtmNMizgEnwzlt9fnEyAKjlqGNL/Go7cXdVMqA8e
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org