Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/xIn0fHsjp3wWRHRN7NQM-hR052k.roa
File: xIn0fHsjp3wWRHRN7NQM-hR052k.roa (raw, json)
Hash identifier: 953ZJog7ItpJPk5gYUXcGieQ2OLDPHwOFOjOTImJZYg=
Subject key identifier: C4:89:F4:7C:7B:23:A7:7C:16:44:74:4D:EC:D4:0C:FA:14:74:E7:69
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 0185704BBBEF0E1A9CA569B3E22AFD218D18
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/xIn0fHsjp3wWRHRN7NQM-hR052k.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.255.32.0/23 maxlen: 24
185.255.34.0/23 maxlen: 24
185.68.58.0/24 maxlen: 24
185.68.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bb:ef:0e:1a:9c:a5:69:b3:e2:2a:fd:21:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c489f47c7b23a77c1644744decd40cfa1474e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:1e:24:dc:ef:9f:3d:0e:3e:66:8d:4b:b1:
60:24:74:7c:72:8d:84:85:44:cc:17:76:a2:1b:01:
c5:bc:d0:00:41:1c:9b:5c:72:44:ab:d7:f0:8b:04:
55:b0:57:32:11:78:dd:7e:37:2b:7d:20:10:a1:0b:
80:36:b8:a3:49:61:bd:61:a2:ad:ee:ab:2e:36:c3:
f2:17:7f:b7:c9:72:b9:f4:22:56:85:3e:ea:73:fc:
7d:72:c6:38:34:e5:ed:07:4e:46:63:10:6f:cc:c2:
dd:50:60:e8:82:4d:7e:9d:69:78:48:a4:0d:53:08:
e1:ad:e8:a1:ff:42:9a:63:05:ea:03:77:5f:4e:c6:
a8:cd:cb:1f:bb:b7:29:14:4f:18:d5:c6:18:8e:47:
bf:ca:bb:d0:8d:2c:86:70:f9:78:11:72:9f:73:3a:
a7:9f:01:17:76:4e:8b:a6:71:b2:ed:48:f0:13:24:
1e:5c:7c:6a:1c:f0:e4:03:0b:83:8f:8f:ed:b9:fa:
09:9e:ed:86:9d:7b:75:4f:56:eb:48:a1:87:3d:c1:
14:e4:f8:94:50:bd:ec:f7:fa:57:50:d3:22:f5:95:
47:24:4e:84:ae:a1:90:8c:05:bf:7b:f3:3a:9c:c1:
95:47:a0:6d:b8:d8:43:87:3d:72:96:6c:31:bc:26:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:F4:7C:7B:23:A7:7C:16:44:74:4D:EC:D4:0C:FA:14:74:E7:69
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/xIn0fHsjp3wWRHRN7NQM-hR052k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.58.0/23
185.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:d3:a7:46:19:d3:fe:92:12:6d:d4:e7:82:ee:aa:8d:6d:52:
e1:3e:ce:2c:be:c4:a4:df:32:9c:58:59:1c:23:63:93:bd:36:
b3:68:3f:42:ca:44:c5:89:71:44:96:8f:b8:dc:51:8a:e0:95:
39:08:8f:a1:c3:e2:70:6f:95:1a:d6:8b:ac:0e:0d:58:88:31:
0c:63:22:c7:ef:64:92:33:19:05:05:15:ca:eb:cf:53:d1:94:
1f:37:39:76:3a:ba:dc:cf:0e:2a:fe:a4:d8:96:09:34:02:60:
ce:6a:5b:74:47:a0:ce:cc:e4:c2:84:71:aa:cb:06:91:77:d5:
f5:0b:28:2b:95:8b:7b:7e:e0:6a:dd:e6:ea:63:a6:a3:20:93:
ce:c1:ed:61:3f:18:ea:01:d5:d5:56:74:14:7f:23:94:60:4c:
b5:e7:dd:7a:8e:26:65:10:18:7f:86:1b:a6:e9:b5:c4:fc:28:
37:a4:2b:e3:cc:2f:f4:27:3e:97:4d:85:93:13:f4:1a:47:2e:
2d:47:1b:52:f8:1f:c7:76:b9:d7:75:1b:a7:b5:31:6f:7c:67:
25:cb:47:70:a5:16:7b:cc:b5:66:14:4b:32:e2:4a:18:09:f3:
71:f5:a3:2f:4e:6b:a7:de:07:03:0e:0a:85:4b:f1:9c:5b:50:
64:b9:7b:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwS7vvDhqcpWmz4ir9IY0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjIxNThhMGYyYTQyNjE3YTgyMWEwYjRmY2M5YzlhOTNm
NDI0NmQwHhcNMjMwMTAyMDIyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDg5ZjQ3YzdiMjNhNzdjMTY0NDc0NGRlY2Q0MGNmYTE0NzRlNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2QeJNzvnz0OPmaNS7FgJHR8co2E
hUTMF3aiGwHFvNAAQRybXHJEq9fwiwRVsFcyEXjdfjcrfSAQoQuANrijSWG9YaKt
7qsuNsPyF3+3yXK59CJWhT7qc/x9csY4NOXtB05GYxBvzMLdUGDogk1+nWl4SKQN
Uwjhreih/0KaYwXqA3dfTsaozcsfu7cpFE8Y1cYYjke/yrvQjSyGcPl4EXKfczqn
nwEXdk6LpnGy7UjwEyQeXHxqHPDkAwuDj4/tufoJnu2GnXt1T1brSKGHPcEU5PiU
UL3s9/pXUNMi9ZVHJE6ErqGQjAW/e/M6nMGVR6BtuNhDhz1ylmwxvCbvAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMSJ9Hx7I6d8FkR0TezUDPoUdOdpMB8GA1UdIwQY
MBaAFL7yFYoPKkJheoIaC0/MnJqT9CRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZJVmlnOHFRbUY2Z2hvTFQ4eWNtcFAwSkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80MmQ4MjEtNzRhZi00Y2VkLTk0ZWEt
MDI3YjU4ZTZmZGM1LzEveEluMGZIc2pwM3dXUkhSTjdOUU0taFIwNTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80MmQ4MjEtNzRhZi00Y2VkLTk0ZWEtMDI3YjU4ZTZmZGM1
LzEvdnZJVmlnOHFRbUY2Z2hvTFQ4eWNtcFAwSkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuUQ6AwQC
uf8gMA0GCSqGSIb3DQEBCwUAA4IBAQAP06dGGdP+khJt1OeC7qqNbVLhPs4svsSk
3zKcWFkcI2OTvTazaD9CykTFiXFElo+43FGK4JU5CI+hw+Jwb5Ua1ousDg1YiDEM
YyLH72SSMxkFBRXK689T0ZQfNzl2Orrczw4q/qTYlgk0AmDOalt0R6DOzOTChHGq
ywaRd9X1CygrlYt7fuBq3ebqY6ajIJPOwe1hPxjqAdXVVnQUfyOUYEy15916jiZl
EBh/hhum6bXE/Cg3pCvjzC/0Jz6XTYWTE/QaRy4tRxtS+B/HdrnXdRuntTFvfGcl
y0dwpRZ7zLVmFEsy4koYCfNx9aMvTmun3gcDDgqFS/GcW1BkuXve
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:57 2024 by rpki-client on console-ams.rpki-client.org