Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/bNOcjeuv6Z4ik1deTxcfmo5D5d0.roa
File: bNOcjeuv6Z4ik1deTxcfmo5D5d0.roa (raw, json)
Hash identifier: QlGtsOgqcSnNTQqZJKxkxssx2CvFEJt31LM8Cnrt4wk=
Subject key identifier: 6C:D3:9C:8D:EB:AF:E9:9E:22:93:57:5E:4F:17:1F:9A:8E:43:E5:DD
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 018706DA5E3DD8B85BCD23E680C5D5E1754B
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/bNOcjeuv6Z4ik1deTxcfmo5D5d0.roa
Signing time: Wed 22 Mar 2023 01:06:26 +0000
ROA not before: Wed 22 Mar 2023 01:06:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 185.55.132.0/24 maxlen: 24
185.55.135.0/24 maxlen: 24
185.55.134.0/24 maxlen: 24
185.55.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:da:5e:3d:d8:b8:5b:cd:23:e6:80:c5:d5:e1:75:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Mar 22 01:06:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cd39c8debafe99e2293575e4f171f9a8e43e5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:f6:0f:b5:f2:52:8b:2c:93:5a:76:9c:f9:
10:05:27:01:15:9b:3d:ab:46:77:a6:2b:cd:7b:bf:
6d:bf:fe:cf:33:f3:0d:48:c2:64:6a:3e:66:38:18:
15:1c:07:bb:fa:fb:c3:03:da:f6:f8:d0:df:d5:90:
1c:cd:46:46:94:ef:e2:0f:02:bb:6a:c2:5f:20:0f:
92:ae:4d:67:32:59:5c:bd:01:c2:a4:08:82:08:a6:
8d:3b:b4:24:fe:77:82:c4:71:d0:b8:a9:52:62:94:
66:c1:d2:0f:86:60:3d:68:6c:c7:5f:be:c7:92:e9:
84:cb:35:10:5e:fd:53:5f:77:a1:31:05:45:ca:dc:
68:88:1c:d1:a4:b7:6f:4b:ee:11:fe:dd:f5:dd:04:
e5:f8:e4:b4:83:64:2e:a6:0f:6f:03:ae:3d:53:67:
4e:27:7d:ca:0c:00:0c:9c:9a:3f:4e:e4:34:d6:1b:
bc:72:1b:d1:84:33:e3:47:65:c5:25:79:f7:8a:22:
e7:f3:c3:8d:42:1c:3f:b9:7f:b9:0c:74:96:49:ff:
04:8b:2b:d8:2c:13:c1:1b:52:46:04:9c:1a:0c:e6:
c9:00:66:82:59:bc:21:d7:05:6d:d4:84:25:d8:16:
8f:86:51:a6:0c:36:a4:02:d4:1c:f3:1f:72:39:62:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:9C:8D:EB:AF:E9:9E:22:93:57:5E:4F:17:1F:9A:8E:43:E5:DD
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/bNOcjeuv6Z4ik1deTxcfmo5D5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:42:bb:d1:6f:de:f1:fd:68:a4:7f:48:fa:3d:3f:de:a8:d7:
44:d1:bf:10:25:ab:96:3e:5a:33:74:ec:a4:01:42:c8:cc:cd:
e8:64:2d:3a:a1:2a:b8:cb:e5:26:ba:f2:f0:1b:8f:ba:48:1b:
8b:69:e0:e3:ab:cb:e8:51:b5:7b:18:3d:8b:1b:a5:fa:c7:60:
46:db:e2:25:d2:1d:0b:56:bf:f6:0b:71:ae:55:a0:cb:67:56:
57:48:50:24:38:6b:2c:f3:60:8f:27:06:a9:bd:d9:b9:de:5b:
a9:2c:48:29:67:e1:b6:87:37:a3:b7:d2:97:c1:98:0f:2d:32:
fd:53:7b:13:5a:ba:2b:27:e2:0d:b2:54:a8:56:a1:14:66:64:
e4:b8:4c:da:9b:c9:2d:df:b7:27:1d:34:06:a3:39:90:be:c7:
4c:ba:9b:05:d5:f0:f4:9e:a3:f3:67:ae:56:58:a5:49:b6:3e:
2e:10:8e:ae:d1:ca:c3:c2:ea:7f:5b:aa:22:92:35:84:2e:e1:
21:9c:e1:bd:43:a8:ba:50:60:52:21:6b:7f:14:48:52:7e:20:
ea:15:e1:2d:e4:d4:ea:f4:e2:02:50:43:51:77:4b:5b:ee:8c:
1c:4c:7c:11:60:73:71:f5:fd:3d:b2:ed:d8:b6:f7:04:fc:4d:
ad:fa:12:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcG2l492LhbzSPmgMXV4XVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj
MDkzOWMwHhcNMjMwMzIyMDEwNjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2QzOWM4ZGViYWZlOTllMjI5MzU3NWU0ZjE3MWY5YThlNDNlNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlv2D7XyUossk1p2nPkQBScBFZs9
q0Z3pivNe79tv/7PM/MNSMJkaj5mOBgVHAe7+vvDA9r2+NDf1ZAczUZGlO/iDwK7
asJfIA+Srk1nMllcvQHCpAiCCKaNO7Qk/neCxHHQuKlSYpRmwdIPhmA9aGzHX77H
kumEyzUQXv1TX3ehMQVFytxoiBzRpLdvS+4R/t313QTl+OS0g2Qupg9vA649U2dO
J33KDAAMnJo/TuQ01hu8chvRhDPjR2XFJXn3iiLn88ONQhw/uX+5DHSWSf8EiyvY
LBPBG1JGBJwaDObJAGaCWbwh1wVt1IQl2BaPhlGmDDakAtQc8x9yOWLGMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzTnI3rr+meIpNXXk8XH5qOQ+XdMB8GA1UdIwQY
MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt
MWM5NGNiN2RmZWIzLzEvYk5PY2pldXY2WjRpazFkZVR4Y2ZtbzVENWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz
LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTeEMA0G
CSqGSIb3DQEBCwUAA4IBAQArQrvRb97x/Wikf0j6PT/eqNdE0b8QJauWPlozdOyk
AULIzM3oZC06oSq4y+UmuvLwG4+6SBuLaeDjq8voUbV7GD2LG6X6x2BG2+Il0h0L
Vr/2C3GuVaDLZ1ZXSFAkOGss82CPJwapvdm53lupLEgpZ+G2hzejt9KXwZgPLTL9
U3sTWrorJ+INslSoVqEUZmTkuEzam8kt37cnHTQGozmQvsdMupsF1fD0nqPzZ65W
WKVJtj4uEI6u0crDwup/W6oikjWELuEhnOG9Q6i6UGBSIWt/FEhSfiDqFeEt5NTq
9OICUENRd0tb7owcTHwRYHNx9f09su3YtvcE/E2t+hJp
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:36 2024 by rpki-client on console-ams.rpki-client.org