Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ii1ZyhQOn1usqnwoo38TONAJRps.roa
File: ii1ZyhQOn1usqnwoo38TONAJRps.roa (raw, json)
Hash identifier: /Jty6MgcZi1Zgs4iTKW11cwOiMpP8H5PXTRjXBc1l/E=
Subject key identifier: 8A:2D:59:CA:14:0E:9F:5B:AC:AA:7C:28:A3:7F:13:38:D0:09:46:9B
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01895D6A8DA0472E1CF64016277619453774
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ii1ZyhQOn1usqnwoo38TONAJRps.roa
Signing time: Sun 16 Jul 2023 06:36:51 +0000
ROA not before: Sun 16 Jul 2023 06:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51020
IP address blocks: 185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:6a:8d:a0:47:2e:1c:f6:40:16:27:76:19:45:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jul 16 06:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a2d59ca140e9f5bacaa7c28a37f1338d009469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:37:95:3f:3c:25:d7:94:cd:56:08:37:96:
cc:23:b0:28:1e:22:73:1e:e6:fd:a0:ee:0d:be:2c:
0d:b5:50:35:e7:c6:cb:b6:38:71:4d:49:6f:d3:fb:
2c:fd:49:f2:86:34:03:8a:65:8a:51:d1:92:c1:bc:
50:6b:0d:6f:98:2d:fd:ea:04:cf:5b:39:8a:8c:2b:
fa:72:e3:d0:eb:33:ce:7a:2b:b5:3e:2b:63:eb:35:
79:53:3d:75:05:27:84:83:42:a0:87:f7:5a:07:a3:
e7:fa:cb:4a:f7:b7:bb:08:55:dd:95:7b:da:12:8a:
c6:dc:91:36:93:37:46:b7:41:a4:40:42:84:21:cd:
b6:0d:5e:56:d1:34:2e:05:a6:63:76:77:2e:5b:26:
1e:6c:08:7a:2e:94:93:10:50:8b:68:95:67:6a:ca:
fa:ba:d0:ef:6f:80:76:59:a3:40:69:67:a4:88:38:
83:fd:7e:bd:1e:16:2a:46:04:88:ba:71:18:ac:88:
b9:07:57:23:2a:eb:e5:a4:fb:d9:d5:c3:af:d2:05:
a7:8e:18:77:c1:36:8a:ae:83:9c:62:0d:19:3c:5d:
9b:4a:8f:bf:0a:4e:0a:94:3a:cb:b4:34:38:b2:c0:
bb:56:e4:e9:a9:a3:81:0f:68:82:ee:93:4e:54:87:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:59:CA:14:0E:9F:5B:AC:AA:7C:28:A3:7F:13:38:D0:09:46:9B
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ii1ZyhQOn1usqnwoo38TONAJRps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.4.0-185.69.6.255
Signature Algorithm: sha256WithRSAEncryption
c1:b5:f7:38:6c:9c:c6:ac:5a:3c:08:b3:24:6a:79:7f:8a:57:
9c:b3:87:a6:0a:db:68:42:11:7c:f7:66:37:f3:74:0c:7c:fb:
58:0e:7c:bc:91:06:5b:2a:53:49:b6:6a:0c:51:e5:f4:87:67:
e7:2e:8f:f7:77:15:96:a7:eb:57:87:f2:31:4b:4d:64:eb:9f:
c2:f3:81:ef:a5:1f:e1:ec:47:f8:bb:85:7a:78:13:df:b4:ad:
0a:bd:dd:bc:93:b6:0d:b2:65:37:d1:66:ec:6e:96:cd:7f:4d:
dd:7b:f5:32:e8:92:4d:8a:4a:ee:24:70:8a:fa:cf:41:97:b0:
5f:ec:d7:14:65:1d:8b:cb:03:73:4e:e3:c7:1f:9f:29:c2:20:
7b:37:cd:0d:4a:50:31:28:df:2e:ba:7c:82:81:05:14:58:ad:
f5:a2:77:6f:2b:d4:ee:07:8c:fd:f3:6c:d0:5e:87:1a:fc:cd:
e4:24:42:07:94:09:62:ec:55:7d:3e:5c:f9:a9:2c:e5:75:ab:
f8:de:d2:14:c3:06:1b:6f:85:2f:e6:5a:29:e8:7f:c4:9e:6b:
84:87:f1:da:68:56:f3:4f:b0:11:0f:d0:62:8a:d9:e3:ff:88:
f1:07:ca:66:a9:d8:18:d1:4e:5f:ba:a6:0e:d7:88:cd:a7:34:
61:d7:a1:24
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYldao2gRy4c9kAWJ3YZRTd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz
ODgyYzcwHhcNMjMwNzE2MDYzNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTJkNTljYTE0MGU5ZjViYWNhYTdjMjhhMzdmMTMzOGQwMDk0NjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOk3lT88JdeUzVYIN5bMI7AoHiJz
Hub9oO4NviwNtVA158bLtjhxTUlv0/ss/UnyhjQDimWKUdGSwbxQaw1vmC396gTP
WzmKjCv6cuPQ6zPOeiu1Pitj6zV5Uz11BSeEg0Kgh/daB6Pn+stK97e7CFXdlXva
EorG3JE2kzdGt0GkQEKEIc22DV5W0TQuBaZjdncuWyYebAh6LpSTEFCLaJVnasr6
utDvb4B2WaNAaWekiDiD/X69HhYqRgSIunEYrIi5B1cjKuvlpPvZ1cOv0gWnjhh3
wTaKroOcYg0ZPF2bSo+/Ck4KlDrLtDQ4ssC7VuTpqaOBD2iC7pNOVIeZDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIotWcoUDp9brKp8KKN/EzjQCUabMB8GA1UdIwQY
MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt
MGE5ODA0OGNkZjcyLzEvaWkxWnloUU9uMXVzcW53b28zOFRPTkFKUnBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy
LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5RQQD
BAC5RQYwDQYJKoZIhvcNAQELBQADggEBAMG19zhsnMasWjwIsyRqeX+KV5yzh6YK
22hCEXz3ZjfzdAx8+1gOfLyRBlsqU0m2agxR5fSHZ+cuj/d3FZan61eH8jFLTWTr
n8Lzge+lH+HsR/i7hXp4E9+0rQq93byTtg2yZTfRZuxuls1/Td179TLokk2KSu4k
cIr6z0GXsF/s1xRlHYvLA3NO48cfnynCIHs3zQ1KUDEo3y66fIKBBRRYrfWid28r
1O4HjP3zbNBehxr8zeQkQgeUCWLsVX0+XPmpLOV1q/je0hTDBhtvhS/mWinof8Se
a4SH8dpoVvNPsBEP0GKK2eP/iPEHymap2BjRTl+6pg7XiM2nNGHXoSQ=
-----END CERTIFICATE-----
Generated at Thu Sep 28 16:34:10 2023 by rpki-client on console-fra.rpki-client.org