Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e8N2w_hx1ritAc8u9YwhdLYt6mg.roa
File: e8N2w_hx1ritAc8u9YwhdLYt6mg.roa (raw, json)
Hash identifier: eGVGnEckPsKhsWU9xNtB+7EzQtRvBYIXFt7VUewFAf0=
Subject key identifier: 7B:C3:76:C3:F8:71:D6:B8:AD:01:CF:2E:F5:8C:21:74:B6:2D:EA:68
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4C92FA07C950170863243F7F26D94
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e8N2w_hx1ritAc8u9YwhdLYt6mg.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.226.204.0/22 maxlen: 24
168.199.128.0/17 maxlen: 24
185.101.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c9:2f:a0:7c:95:01:70:86:32:43:f7:f2:6d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc376c3f871d6b8ad01cf2ef58c2174b62dea68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:f7:8d:e4:3c:48:92:39:00:fa:2e:16:4b:
92:60:ee:5b:d4:c9:f4:50:6a:15:2d:24:40:22:c3:
f4:ff:a9:cf:ed:75:ac:f1:36:fe:63:3c:c3:93:67:
d5:fb:a7:78:d6:43:6d:8e:72:43:f5:91:b0:88:26:
5b:62:35:6f:16:28:5b:a5:cd:8e:0a:f9:54:d0:1f:
a9:16:0c:64:cf:02:6a:43:76:aa:fb:c3:ed:8a:87:
d8:33:24:6a:6c:5b:64:6a:70:0b:d5:4f:bd:fc:45:
d0:59:61:73:70:c3:cd:78:4c:4a:04:17:e6:9f:46:
58:d6:ec:d7:7e:eb:29:96:39:46:11:f2:53:b9:21:
b6:c6:c3:59:0e:94:b5:10:a3:79:a7:cd:fc:c7:f2:
ce:90:70:06:42:f6:8a:f1:2b:6c:00:d1:4e:86:4b:
84:42:df:a0:19:56:11:8b:01:b4:c5:a3:68:34:7f:
ae:8e:38:0c:4e:da:22:5d:3c:a4:86:5b:83:43:05:
77:82:ab:ed:26:f0:45:dc:20:1e:a6:41:81:fc:7d:
54:4b:8b:9c:9b:e8:42:f2:bb:40:4b:2b:3f:b7:a8:
42:9d:1b:b2:1d:80:f2:41:b8:79:34:8a:93:13:18:
da:6f:d8:42:ab:56:b7:1f:43:99:89:09:12:e8:89:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C3:76:C3:F8:71:D6:B8:AD:01:CF:2E:F5:8C:21:74:B6:2D:EA:68
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e8N2w_hx1ritAc8u9YwhdLYt6mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.128.0/17
185.101.252.0/22
185.226.204.0/22
Signature Algorithm: sha256WithRSAEncryption
31:6c:f8:95:31:98:18:c4:aa:ad:7b:86:dd:b5:e7:b1:8e:a8:
1b:a9:85:87:c0:fe:d1:5f:4f:66:1d:1c:c1:b0:29:f1:00:6e:
c4:68:a6:de:d7:d2:03:28:e3:8d:17:ce:f3:8f:e6:70:27:d0:
6b:42:10:68:ff:b9:40:89:3e:0c:ea:4d:26:95:f8:64:fa:dc:
ef:88:46:8c:5c:ed:a0:c0:a8:0d:22:11:3e:46:3b:05:3c:23:
b0:1b:05:ac:64:09:f7:8d:a5:d9:f1:b9:f7:cd:17:88:eb:38:
c4:b8:44:58:a7:06:aa:f4:27:5d:d0:1b:72:0b:18:4a:73:53:
69:f4:16:30:4e:97:5d:06:5a:ba:20:5d:50:12:d4:50:2c:27:
9b:54:85:b8:6e:ec:e5:a8:b5:88:9f:e6:6c:4e:c5:0f:83:a1:
73:92:02:90:68:58:18:43:b7:58:da:27:ab:47:cb:43:c9:f6:
8c:d1:e3:67:5f:d0:47:21:04:b0:13:d0:df:08:27:8a:3a:ba:
0a:b8:be:e9:49:a3:46:2a:d9:40:c8:67:7f:56:fa:de:d7:01:
5c:2f:ab:56:48:96:47:40:57:ab:7e:43:c4:87:89:e3:8a:d6:
0a:6e:c3:b9:8f:63:56:12:17:2a:c4:32:36:ae:c1:4a:d3:7c:
3e:67:23:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVu1MkvoHyVAXCGMkP38m2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwMTAxMTkzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMzNzZjM2Y4NzFkNmI4YWQwMWNmMmVmNThjMjE3NGI2MmRlYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0b3jeQ8SJI5APouFkuSYO5b1Mn0
UGoVLSRAIsP0/6nP7XWs8Tb+YzzDk2fV+6d41kNtjnJD9ZGwiCZbYjVvFihbpc2O
CvlU0B+pFgxkzwJqQ3aq+8PtiofYMyRqbFtkanAL1U+9/EXQWWFzcMPNeExKBBfm
n0ZY1uzXfuspljlGEfJTuSG2xsNZDpS1EKN5p838x/LOkHAGQvaK8StsANFOhkuE
Qt+gGVYRiwG0xaNoNH+ujjgMTtoiXTykhluDQwV3gqvtJvBF3CAepkGB/H1US4uc
m+hC8rtASys/t6hCnRuyHYDyQbh5NIqTExjab9hCq1a3H0OZiQkS6Ik7RQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHvDdsP4cda4rQHPLvWMIXS2LepoMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvZThOMndfaHgxcml0QWM4dTlZd2hkTFl0Nm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHqMeAAwQC
uWX8AwQCueLMMA0GCSqGSIb3DQEBCwUAA4IBAQAxbPiVMZgYxKqte4bdteexjqgb
qYWHwP7RX09mHRzBsCnxAG7EaKbe19IDKOONF87zj+ZwJ9BrQhBo/7lAiT4M6k0m
lfhk+tzviEaMXO2gwKgNIhE+RjsFPCOwGwWsZAn3jaXZ8bn3zReI6zjEuERYpwaq
9Cdd0BtyCxhKc1Np9BYwTpddBlq6IF1QEtRQLCebVIW4buzlqLWIn+ZsTsUPg6Fz
kgKQaFgYQ7dY2ierR8tDyfaM0eNnX9BHIQSwE9DfCCeKOroKuL7pSaNGKtlAyGd/
Vvre1wFcL6tWSJZHQFerfkPEh4njitYKbsO5j2NWEhcqxDI2rsFK03w+ZyPb
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org