Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/1-MuiRpd0_6FDMRaLpwHH2fi8qBA.roa
File: 1-MuiRpd0_6FDMRaLpwHH2fi8qBA.roa (raw, json)
Hash identifier: +pL1/FbfaSmqzeAWRXXqL6ND5bRzqb1rxNvyGKcRu7A=
Subject key identifier: F8:CB:A2:46:97:74:FF:A1:43:31:16:8B:A7:01:C7:D9:F8:BC:A8:10
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 018572B433F8F9A4AA1AD4DAE8777216E2CD
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/1-MuiRpd0_6FDMRaLpwHH2fi8qBA.roa
Signing time: Mon 02 Jan 2023 13:38:10 +0000
ROA not before: Mon 02 Jan 2023 13:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198380
IP address blocks: 185.154.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:33:f8:f9:a4:aa:1a:d4:da:e8:77:72:16:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jan 2 13:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cba2469774ffa14331168ba701c7d9f8bca810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:8d:44:cf:dd:a2:47:7b:fa:b2:15:d6:d0:
64:da:bd:ae:8f:21:4b:34:51:cf:7b:25:7b:23:4c:
5e:fe:2b:b4:8a:db:fe:99:06:11:16:57:6b:0b:78:
16:10:3d:5f:6e:95:b1:99:a5:bb:1c:47:a5:cd:b4:
27:b5:2b:3d:eb:fb:b8:46:4f:0a:86:2c:71:cf:ba:
4a:dd:06:77:8d:1c:30:9a:6c:52:23:d7:12:11:8e:
55:0b:dc:d2:e1:12:ab:06:bb:04:2b:a4:91:03:31:
c9:af:4c:c0:82:63:ad:b7:5c:81:77:e3:6c:b2:3d:
d2:a1:cf:da:70:f8:c2:ed:f4:bf:91:dc:ab:dd:2d:
1a:74:36:66:4f:cc:3b:4f:ed:87:9d:1f:87:c3:81:
77:48:c7:c9:e8:52:0e:9c:15:b8:c8:4d:7e:ae:78:
61:41:24:79:78:db:82:3b:52:79:79:8d:f6:1c:b9:
47:5c:f4:10:5b:5e:e1:e2:2d:45:23:45:3e:a7:22:
c0:1a:e6:5e:db:88:bf:a6:c0:26:24:57:de:3c:91:
ec:c3:ab:05:bf:4c:65:fe:07:75:a5:8f:59:da:f7:
39:e9:9b:e3:15:a7:04:a6:94:2f:74:eb:82:ac:db:
af:6f:f9:f7:7f:00:f2:a2:22:54:a3:2a:2c:bf:e0:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:A2:46:97:74:FF:A1:43:31:16:8B:A7:01:C7:D9:F8:BC:A8:10
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/1-MuiRpd0_6FDMRaLpwHH2fi8qBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:88:c5:35:f4:da:a0:79:20:89:74:fa:32:3c:5d:05:b3:bd:
df:f5:24:d2:6b:44:27:30:06:d4:55:74:20:66:b0:08:21:e0:
15:7b:fa:33:35:63:aa:48:fd:49:82:46:9b:92:c6:be:64:13:
54:7d:52:3c:be:f9:82:94:62:0b:4f:f7:dd:8c:e2:d0:86:98:
16:e9:21:a4:a1:b4:46:f3:05:c4:1f:c6:4c:59:b5:e8:eb:84:
78:89:3a:01:91:97:48:79:9d:79:84:41:59:5e:6f:65:0b:9a:
3e:a1:3a:e3:09:3e:46:af:32:9c:b8:5a:98:62:a5:5f:59:b6:
12:90:df:31:98:cc:29:15:ba:ed:1e:e1:2c:f8:ed:7d:ba:ff:
e4:2e:ad:cb:8f:51:85:88:44:9e:c6:11:f9:dd:25:c0:c5:17:
87:39:ae:91:37:57:e7:a4:c9:e9:49:f5:f1:fd:c9:65:5d:29:
12:fe:eb:2d:57:46:96:b5:27:7f:45:34:ae:f1:3a:d6:26:48:
1e:c0:11:86:28:26:60:f2:e6:a6:1d:46:c3:18:2f:47:fb:1c:
02:49:4f:06:3e:6d:9e:34:b9:eb:06:8e:8a:45:6c:64:49:72:
b6:69:29:0a:bc:ca:ce:aa:94:cf:ee:e4:d5:b1:a3:59:38:8b:
dc:c0:41:ae
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVytDP4+aSqGtTa6HdyFuLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1
MDlmZDUwHhcNMjMwMTAyMTMzODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGNiYTI0Njk3NzRmZmExNDMzMTE2OGJhNzAxYzdkOWY4YmNhODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA2NRM/dokd7+rIV1tBk2r2ujyFL
NFHPeyV7I0xe/iu0itv+mQYRFldrC3gWED1fbpWxmaW7HEelzbQntSs96/u4Rk8K
hixxz7pK3QZ3jRwwmmxSI9cSEY5VC9zS4RKrBrsEK6SRAzHJr0zAgmOtt1yBd+Ns
sj3Soc/acPjC7fS/kdyr3S0adDZmT8w7T+2HnR+Hw4F3SMfJ6FIOnBW4yE1+rnhh
QSR5eNuCO1J5eY32HLlHXPQQW17h4i1FI0U+pyLAGuZe24i/psAmJFfePJHsw6sF
v0xl/gd1pY9Z2vc56ZvjFacEppQvdOuCrNuvb/n3fwDyoiJUoyosv+C7ZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjLokaXdP+hQzEWi6cBx9n4vKgQMB8GA1UdIwQY
MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct
Njc4NWFkYTUyN2MxLzEvMS1NdWlScGQwXzZGRE1SYUxwd0hIMmZpOHFCQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTAvZDlmNDgyLTEzNWUtNDdmNi05MzE3LTY3ODVhZGE1Mjdj
MS8xL2tLQW5CUUJsTXU4em9BWlBoMW9RQ1NOUW45VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArma7DAN
BgkqhkiG9w0BAQsFAAOCAQEAfYjFNfTaoHkgiXT6MjxdBbO93/Uk0mtEJzAG1FV0
IGawCCHgFXv6MzVjqkj9SYJGm5LGvmQTVH1SPL75gpRiC0/33Yzi0IaYFukhpKG0
RvMFxB/GTFm16OuEeIk6AZGXSHmdeYRBWV5vZQuaPqE64wk+Rq8ynLhamGKlX1m2
EpDfMZjMKRW67R7hLPjtfbr/5C6ty49RhYhEnsYR+d0lwMUXhzmukTdX56TJ6Un1
8f3JZV0pEv7rLVdGlrUnf0U0rvE61iZIHsARhigmYPLmph1GwxgvR/scAklPBj5t
njS56waOikVsZElytmkpCrzKzqqUz+7k1bGjWTiL3MBBrg==
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:39 2024 by rpki-client on console-ams.rpki-client.org