Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/S-Cr12yGu2G19y-yloQAQCBdE9w.roa
File: S-Cr12yGu2G19y-yloQAQCBdE9w.roa (raw, json)
Hash identifier: /2xffO6VmOKoKYj4Ckj5DcwsSpDJ8eVtu6nDFEBID8M=
Subject key identifier: 4B:E0:AB:D7:6C:86:BB:61:B5:F7:2F:B2:96:84:00:40:20:5D:13:DC
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 01905E6384D6CB135515EB5A5AD3D11F3771
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/S-Cr12yGu2G19y-yloQAQCBdE9w.roa
Signing time: Fri 28 Jun 2024 10:28:18 +0000
ROA not before: Fri 28 Jun 2024 10:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 185.224.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 17 Sep 2024 06:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:63:84:d6:cb:13:55:15:eb:5a:5a:d3:d1:1f:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jun 28 10:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4be0abd76c86bb61b5f72fb296840040205d13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:b9:8d:2c:5f:05:2a:d8:73:57:60:e2:1d:
23:01:49:16:b2:c9:e1:9b:fe:7d:1d:d5:ab:f5:93:
e1:c1:0a:66:e7:06:21:bc:df:58:19:1a:08:48:2e:
3a:d5:6b:d4:cf:d7:c4:3b:04:0b:e2:c7:f9:8b:6f:
ab:e2:e7:a6:01:3f:5e:c7:15:a7:f0:2d:a1:bc:b1:
68:e7:5a:b5:22:40:82:9c:30:9f:92:24:86:e8:54:
8f:74:bf:39:3a:89:09:fd:c0:b3:39:e3:b0:df:b1:
af:8a:e3:2a:7e:fa:ae:98:52:45:b5:51:32:da:25:
52:f2:40:b0:1a:fe:6f:c2:8a:23:93:99:bf:ab:1c:
58:21:2e:36:b5:0d:cc:44:36:23:0b:06:64:73:3a:
6b:2f:d4:7e:1f:bb:1a:51:0c:12:1a:d5:8e:13:fc:
30:84:b5:c2:00:75:86:0f:58:3d:6c:f3:83:2e:a8:
8b:fe:cb:ed:74:b0:64:55:97:a6:2b:8c:45:25:4d:
ff:5b:b0:df:fd:14:6d:cd:1e:65:d5:cb:4c:25:3e:
d7:bf:b6:ec:f6:56:3b:49:ec:3b:ea:f9:01:b4:96:
bc:74:2e:21:07:b5:1e:83:f3:15:b3:3a:40:4d:ce:
ec:a9:7f:f9:66:95:9a:68:3f:fd:d6:f4:ef:e7:6c:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:AB:D7:6C:86:BB:61:B5:F7:2F:B2:96:84:00:40:20:5D:13:DC
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/S-Cr12yGu2G19y-yloQAQCBdE9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:ec:4d:3b:b3:8f:6e:50:9a:5a:01:95:4a:6a:3f:e0:58:66:
f6:6f:13:0a:30:48:41:a3:1a:11:25:7f:c9:d4:7c:83:86:33:
2a:9f:7c:b8:3e:1c:bd:25:5b:7e:a7:a9:2b:aa:6b:c6:e0:c3:
88:69:81:65:43:d9:f1:13:6e:af:7b:66:39:ed:92:64:9f:3c:
46:30:39:21:2f:e5:2b:94:57:aa:e4:c0:71:80:f4:bb:d8:84:
89:2e:e6:4e:5d:83:18:1e:c8:c2:9a:c9:46:e4:7a:be:ff:0b:
bd:0e:98:ae:75:6f:59:8d:ed:3f:cd:a3:7f:32:2c:6b:44:08:
c1:df:5b:ac:f0:16:18:2b:93:de:30:d1:db:8f:06:1f:df:c5:
3f:95:cb:b5:c5:64:f1:45:c6:66:40:f9:4c:d8:a9:14:1a:78:
dd:d7:99:62:ef:d0:59:a5:50:63:39:88:3f:4e:12:50:75:ed:
55:e1:19:08:12:82:94:fe:2b:ff:0f:bd:5a:40:1a:f0:7a:9c:
6c:17:c0:15:a4:49:a0:27:cb:62:ef:e3:3b:9a:f2:d4:b1:53:
20:48:2b:82:48:b3:d0:c4:7e:1c:a7:73:d1:b0:ba:e1:1c:07:
0e:d1:2c:5e:b4:61:6d:57:7a:60:95:75:e9:8b:f5:fe:5d:23:
d7:d5:48:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBeY4TWyxNVFetaWtPRHzdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx
NDYzM2UwHhcNMjQwNjI4MTAyODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmUwYWJkNzZjODZiYjYxYjVmNzJmYjI5Njg0MDA0MDIwNWQxM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvu5jSxfBSrYc1dg4h0jAUkWssnh
m/59HdWr9ZPhwQpm5wYhvN9YGRoISC461WvUz9fEOwQL4sf5i2+r4uemAT9exxWn
8C2hvLFo51q1IkCCnDCfkiSG6FSPdL85OokJ/cCzOeOw37GviuMqfvqumFJFtVEy
2iVS8kCwGv5vwoojk5m/qxxYIS42tQ3MRDYjCwZkczprL9R+H7saUQwSGtWOE/ww
hLXCAHWGD1g9bPODLqiL/svtdLBkVZemK4xFJU3/W7Df/RRtzR5l1ctMJT7Xv7bs
9lY7Sew76vkBtJa8dC4hB7Ueg/MVszpATc7sqX/5ZpWaaD/91vTv52zO8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvgq9dshrthtfcvspaEAEAgXRPcMB8GA1UdIwQY
MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt
YjIxMjlmYjRjYTVhLzEvUy1DcjEyeUd1MkcxOXkteWxvUUFRQ0JkRTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh
LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueAsMA0G
CSqGSIb3DQEBCwUAA4IBAQCe7E07s49uUJpaAZVKaj/gWGb2bxMKMEhBoxoRJX/J
1HyDhjMqn3y4Phy9JVt+p6krqmvG4MOIaYFlQ9nxE26ve2Y57ZJknzxGMDkhL+Ur
lFeq5MBxgPS72ISJLuZOXYMYHsjCmslG5Hq+/wu9DpiudW9Zje0/zaN/MixrRAjB
31us8BYYK5PeMNHbjwYf38U/lcu1xWTxRcZmQPlM2KkUGnjd15li79BZpVBjOYg/
ThJQde1V4RkIEoKU/iv/D71aQBrwepxsF8AVpEmgJ8ti7+M7mvLUsVMgSCuCSLPQ
xH4cp3PRsLrhHAcO0SxetGFtV3pglXXpi/X+XSPX1Uiz
-----END CERTIFICATE-----
Generated at Tue Sep 17 08:50:24 2024 by rpki-client on console-ams.rpki-client.org