Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/oFyxsWbyEO1IZjjmhGdQCpNwdrU.roa
File: oFyxsWbyEO1IZjjmhGdQCpNwdrU.roa (raw, json)
Hash identifier: JU4x+jIRHMtBIFKtj3v7zC/cEWWI9gpsTbG1pNhWMZE=
Subject key identifier: A0:5C:B1:B1:66:F2:10:ED:48:66:38:E6:84:67:50:0A:93:70:76:B5
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 0186278ABE9B95C68C61AA00FB66A066DA9D
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/oFyxsWbyEO1IZjjmhGdQCpNwdrU.roa
Signing time: Mon 06 Feb 2023 16:24:09 +0000
ROA not before: Mon 06 Feb 2023 16:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204517
IP address blocks: 185.242.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:8a:be:9b:95:c6:8c:61:aa:00:fb:66:a0:66:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Feb 6 16:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a05cb1b166f210ed486638e68467500a937076b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:3a:2b:ac:61:1d:bb:0f:b1:a9:c4:7b:28:
80:b7:91:d9:db:71:b7:b0:c9:84:82:67:df:13:05:
8a:75:42:9a:d1:03:ff:ef:34:70:82:ac:0b:6d:4e:
86:e3:c1:da:3c:c4:45:ba:3d:07:99:31:df:f8:8d:
8f:a5:46:6b:a0:db:96:74:c4:fa:c6:ab:04:ac:1c:
cf:1b:18:c4:80:4a:59:b8:b3:ca:94:f6:60:83:73:
71:3b:1f:2b:b7:cf:1a:8a:58:a9:b5:df:6d:37:f5:
4c:9a:e9:4d:0d:73:ed:5c:3f:a0:cf:53:68:87:ed:
bc:3a:9a:bf:18:40:38:93:03:67:26:ee:6a:87:a7:
32:ac:31:a7:a6:7f:86:08:77:90:7c:80:59:8d:cc:
0b:f6:a5:41:9b:f5:81:ca:cd:83:32:3f:64:69:b2:
37:56:0b:98:40:f7:49:6c:5b:82:73:5d:80:c2:e0:
87:ab:84:d7:bf:1a:52:63:5d:7f:75:28:0c:35:9b:
cf:63:ac:aa:c6:d8:df:60:ba:84:0d:7e:19:32:9b:
41:c5:c1:4d:02:16:1f:eb:ba:c6:7d:77:a0:1c:96:
39:53:95:a2:d1:f0:4a:c5:18:dc:a9:17:f3:46:d1:
aa:fc:e7:27:6e:bb:e6:b6:4f:08:51:97:cf:99:fc:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:B1:B1:66:F2:10:ED:48:66:38:E6:84:67:50:0A:93:70:76:B5
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/oFyxsWbyEO1IZjjmhGdQCpNwdrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f3:6c:77:e0:be:9e:2c:31:e1:78:ff:43:4a:66:92:c2:e4:
75:1a:b0:c8:35:20:75:64:ca:19:e1:4f:2f:66:b6:c2:65:0b:
22:8b:48:57:ca:5b:8d:81:cb:99:ec:90:dd:ed:db:1e:84:80:
56:6d:b0:d1:3d:06:59:a9:8a:b3:2a:82:d6:db:f1:48:8b:74:
d5:93:89:62:64:20:21:f2:1b:ee:6f:07:ce:10:9e:f9:9f:2e:
51:38:bd:c3:85:be:95:81:29:0c:a5:92:5b:c9:b6:44:04:57:
39:22:22:1e:d6:d3:d3:cb:0f:49:c9:9b:29:e1:50:cd:a1:c7:
5b:78:50:38:f0:ab:55:87:6e:c6:ba:85:c2:1e:b4:4e:d8:f5:
cc:ff:5d:b5:56:bb:aa:4c:54:48:8c:1c:54:c3:f2:9a:82:7b:
82:a6:75:0d:b9:aa:fd:9d:f4:a1:03:af:04:60:a1:83:37:d9:
56:24:dd:6b:e3:2c:5a:1e:f4:41:7d:93:91:24:b2:09:f3:3e:
09:35:bf:e8:bd:15:58:cd:94:f9:a5:0d:e1:43:f7:bc:a2:ea:
b4:5e:15:f2:0f:ab:f1:9e:a5:d5:ba:e9:e3:10:98:ff:b9:02:
ab:ca:bd:ae:e0:01:a9:c0:79:68:13:04:10:e6:5c:86:06:cd:
5b:b4:24:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYnir6blcaMYaoA+2agZtqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk
NGJkNjQwHhcNMjMwMjA2MTYyNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDVjYjFiMTY2ZjIxMGVkNDg2NjM4ZTY4NDY3NTAwYTkzNzA3NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNA6K6xhHbsPsanEeyiAt5HZ23G3
sMmEgmffEwWKdUKa0QP/7zRwgqwLbU6G48HaPMRFuj0HmTHf+I2PpUZroNuWdMT6
xqsErBzPGxjEgEpZuLPKlPZgg3NxOx8rt88ailiptd9tN/VMmulNDXPtXD+gz1No
h+28Opq/GEA4kwNnJu5qh6cyrDGnpn+GCHeQfIBZjcwL9qVBm/WBys2DMj9kabI3
VguYQPdJbFuCc12AwuCHq4TXvxpSY11/dSgMNZvPY6yqxtjfYLqEDX4ZMptBxcFN
AhYf67rGfXegHJY5U5Wi0fBKxRjcqRfzRtGq/Ocnbrvmtk8IUZfPmfxHaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKBcsbFm8hDtSGY45oRnUAqTcHa1MB8GA1UdIwQY
MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt
OTE3NGRmNGRkYjlhLzEvb0Z5eHNXYnlFTzFJWmpqbWhHZFFDcE53ZHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh
LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKKMA0G
CSqGSIb3DQEBCwUAA4IBAQAb82x34L6eLDHheP9DSmaSwuR1GrDINSB1ZMoZ4U8v
ZrbCZQsii0hXyluNgcuZ7JDd7dsehIBWbbDRPQZZqYqzKoLW2/FIi3TVk4liZCAh
8hvubwfOEJ75ny5ROL3Dhb6VgSkMpZJbybZEBFc5IiIe1tPTyw9JyZsp4VDNocdb
eFA48KtVh27GuoXCHrRO2PXM/121VruqTFRIjBxUw/KagnuCpnUNuar9nfShA68E
YKGDN9lWJN1r4yxaHvRBfZORJLIJ8z4JNb/ovRVYzZT5pQ3hQ/e8ouq0XhXyD6vx
nqXVuunjEJj/uQKryr2u4AGpwHloEwQQ5lyGBs1btCTz
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:12 2024 by rpki-client on console-ams.rpki-client.org