Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/hXAUHac-ZcS6P8oSa6rCvFRHZao.roa
File: hXAUHac-ZcS6P8oSa6rCvFRHZao.roa (raw, json)
Hash identifier: jVX0tC8p4FxSEeODlG9IM1YLX4x+6Y64hmSYZrolEA8=
Subject key identifier: 85:70:14:1D:A7:3E:65:C4:BA:3F:CA:12:6B:AA:C2:BC:54:47:65:AA
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 01866F9E6735DE97E0937CA757A29DC9610B
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/hXAUHac-ZcS6P8oSa6rCvFRHZao.roa
Signing time: Mon 20 Feb 2023 16:18:17 +0000
ROA not before: Mon 20 Feb 2023 16:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:9e:67:35:de:97:e0:93:7c:a7:57:a2:9d:c9:61:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Feb 20 16:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8570141da73e65c4ba3fca126baac2bc544765aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:52:ef:94:de:87:16:77:9d:b7:1f:de:20:
07:e3:74:2f:18:fc:1a:9e:03:07:12:1c:8f:a7:96:
cf:b3:bd:90:74:90:50:44:b4:e4:94:cb:27:16:d2:
37:ef:1b:5a:d5:6a:85:aa:b0:8b:cd:9c:4a:b1:36:
7d:66:60:ae:27:fb:15:2f:ee:fa:e1:f2:a7:e6:bf:
ab:5b:f0:ad:99:d9:24:20:36:7b:4b:9a:45:f4:bb:
9c:0c:d3:21:51:d2:96:a1:7f:06:6a:e2:df:fe:30:
cf:4b:fd:69:70:ea:0f:05:f2:70:78:79:6d:9a:33:
8f:70:41:27:55:76:b0:aa:b0:74:1c:2d:f2:75:14:
3d:59:75:d2:76:86:c1:2c:fd:eb:8a:08:5c:83:3e:
eb:00:86:44:38:f8:ae:0e:9e:3c:be:5f:0b:58:95:
0c:55:aa:3c:45:aa:65:e1:73:91:e4:3f:53:db:e5:
e9:9a:82:f9:f0:e2:7a:24:c0:d2:42:93:8c:19:1f:
0b:c4:b8:c2:bd:61:b7:86:52:11:5a:02:a9:95:72:
1f:40:c4:8f:49:f2:8e:5b:e2:fc:6a:c2:11:72:11:
7e:2a:56:f0:66:20:5c:25:1d:b7:57:09:ef:94:88:
38:60:2f:2b:58:e0:23:96:e6:01:fa:1d:a6:0e:ab:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:14:1D:A7:3E:65:C4:BA:3F:CA:12:6B:AA:C2:BC:54:47:65:AA
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/hXAUHac-ZcS6P8oSa6rCvFRHZao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:47:8f:5a:e7:82:bb:25:9a:fb:89:15:3e:87:39:d8:fe:
82:b8:23:1c:8c:4e:bf:b4:74:44:d5:c5:8e:95:f9:63:49:90:
02:fe:66:5f:ce:62:32:0b:63:af:6a:e2:73:83:4f:0a:1f:15:
46:07:5b:4f:ab:c3:19:b2:63:16:45:c0:1f:6e:c2:08:7c:45:
97:20:3f:cf:5b:37:96:c7:e1:56:e2:99:16:94:07:95:30:0b:
1d:70:ed:d9:80:aa:eb:54:53:b2:34:37:26:e6:12:6a:30:74:
52:84:28:3c:88:42:12:6b:a7:8d:f8:a2:c9:ab:e6:c2:83:b8:
af:35:a3:04:37:f3:c8:70:53:fb:f1:7f:31:de:bf:b7:c3:aa:
fc:e2:56:e5:b2:96:46:5a:d0:a8:6d:dc:c1:73:42:57:45:01:
56:08:2f:e0:4f:5f:8e:b7:76:fa:5d:2a:b9:8c:ad:d3:35:39:
df:e9:b8:a9:39:14:cc:65:86:48:67:ee:ea:71:7b:59:90:f8:
a1:18:6b:34:88:59:a8:a4:90:e4:2d:ad:f0:e6:d5:c1:2f:1c:
23:f5:4f:d0:52:e0:a5:34:cd:a4:62:80:79:77:39:42:58:b1:
25:f9:96:06:f1:87:7e:cd:b5:80:04:71:af:a2:2f:43:e5:74:
86:b3:07:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZvnmc13pfgk3ynV6KdyWELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTgyYmUyMDBmMmVkOWJlNDBmYzk4M2Q5NGQ5YzcyNjM1
MGE5ZDkwHhcNMjMwMjIwMTYxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTcwMTQxZGE3M2U2NWM0YmEzZmNhMTI2YmFhYzJiYzU0NDc2NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35S75TehxZ3nbcf3iAH43QvGPwa
ngMHEhyPp5bPs72QdJBQRLTklMsnFtI37xta1WqFqrCLzZxKsTZ9ZmCuJ/sVL+76
4fKn5r+rW/CtmdkkIDZ7S5pF9LucDNMhUdKWoX8GauLf/jDPS/1pcOoPBfJweHlt
mjOPcEEnVXawqrB0HC3ydRQ9WXXSdobBLP3righcgz7rAIZEOPiuDp48vl8LWJUM
Vao8Rapl4XOR5D9T2+XpmoL58OJ6JMDSQpOMGR8LxLjCvWG3hlIRWgKplXIfQMSP
SfKOW+L8asIRchF+KlbwZiBcJR23VwnvlIg4YC8rWOAjluYB+h2mDqvSQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVwFB2nPmXEuj/KEmuqwrxUR2WqMB8GA1UdIwQY
MBaAFBWYK+IA8u2b5A/Jg9lNnHJjUKnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2Qt
Y2E3ZTZjM2FlOGNlLzEvaFhBVUhhYy1aY1M2UDhvU2E2ckN2RlJIWmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2QtY2E3ZTZjM2FlOGNl
LzEvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ3iMA0G
CSqGSIb3DQEBCwUAA4IBAQCMikePWueCuyWa+4kVPoc52P6CuCMcjE6/tHRE1cWO
lfljSZAC/mZfzmIyC2OvauJzg08KHxVGB1tPq8MZsmMWRcAfbsIIfEWXID/PWzeW
x+FW4pkWlAeVMAsdcO3ZgKrrVFOyNDcm5hJqMHRShCg8iEISa6eN+KLJq+bCg7iv
NaMEN/PIcFP78X8x3r+3w6r84lblspZGWtCobdzBc0JXRQFWCC/gT1+Ot3b6XSq5
jK3TNTnf6bipORTMZYZIZ+7qcXtZkPihGGs0iFmopJDkLa3w5tXBLxwj9U/QUuCl
NM2kYoB5dzlCWLEl+ZYG8Yd+zbWABHGvoi9D5XSGswdZ
-----END CERTIFICATE-----
Generated at Fri Aug 18 13:52:12 2023 by rpki-client on console-ams.rpki-client.org