Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/kZflfscFa7eIzayWjDkwHrHY4ZU.roa
File: kZflfscFa7eIzayWjDkwHrHY4ZU.roa (raw, json)
Hash identifier: kHwaNdoXB2AidO0K9+DTTlrNS9DsYRwYwaqXvPSWPok=
Subject key identifier: 91:97:E5:7E:C7:05:6B:B7:88:CD:AC:96:8C:39:30:1E:B1:D8:E1:95
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018A4B6EEC017471B95110ADE43C8CC6F75E
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/kZflfscFa7eIzayWjDkwHrHY4ZU.roa
Signing time: Thu 31 Aug 2023 11:51:15 +0000
ROA not before: Thu 31 Aug 2023 11:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:6e:ec:01:74:71:b9:51:10:ad:e4:3c:8c:c6:f7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Aug 31 11:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9197e57ec7056bb788cdac968c39301eb1d8e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:97:97:1a:18:03:9e:c2:d1:e9:a0:51:cd:
48:21:fe:0b:e2:cd:30:3f:0f:74:be:08:94:79:bb:
a7:7b:fa:ae:27:c2:f4:06:2e:ea:33:85:57:27:57:
cc:4e:89:55:d5:6f:06:d1:20:87:ca:88:ae:13:13:
df:87:6e:e5:84:f5:c5:3f:7c:32:80:5a:1d:b3:d6:
9a:fd:87:f2:2a:2b:64:a1:bb:6d:b8:1c:2f:3c:61:
c5:96:2d:42:32:ec:18:22:3d:1d:52:1f:c7:88:49:
13:3e:16:dd:32:af:d4:52:ed:3b:c2:f6:bd:66:e1:
69:07:b1:6d:0c:aa:6a:37:c3:82:51:b8:a8:3f:62:
e5:8f:4e:7b:db:9d:6c:cd:b3:b7:6e:0b:55:36:fb:
66:0b:55:f0:dd:e1:15:a2:53:8f:5c:6e:bb:a6:75:
ad:fc:7d:24:59:49:65:6e:56:d0:af:be:4d:60:f5:
84:06:51:ba:8b:6e:49:c9:e1:c4:29:a7:05:be:75:
a7:4a:52:7b:e3:95:df:8c:f3:af:d4:26:52:2b:68:
98:b4:bb:81:cb:43:43:02:6b:4c:b2:10:77:63:38:
a0:22:fd:0e:0c:28:c2:8c:46:bc:f9:6d:a3:91:42:
1e:53:41:d5:00:58:90:03:9d:bb:60:7a:98:2d:af:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:E5:7E:C7:05:6B:B7:88:CD:AC:96:8C:39:30:1E:B1:D8:E1:95
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/kZflfscFa7eIzayWjDkwHrHY4ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
25:59:cc:05:77:d5:a9:d2:0b:ee:23:75:8b:9b:1f:36:30:9a:
19:29:98:33:71:02:52:d2:72:13:c6:38:c4:5f:6a:d0:bd:e7:
ec:bb:c9:95:cd:34:a5:67:d3:4d:52:5a:51:97:08:f9:11:61:
f6:b6:d3:28:f8:96:25:c9:fb:22:ac:c0:5b:c1:67:00:8b:db:
36:51:f0:9b:f2:f1:fd:6c:d0:da:53:f1:e4:5e:7f:9a:3a:45:
43:e1:c3:ac:4d:d7:24:16:a9:0a:9e:09:84:5f:e9:93:ee:55:
a4:f9:cb:99:7d:4a:c2:95:b4:c2:7a:ac:11:a9:37:c3:89:c3:
60:3d:f8:f4:54:d2:80:76:fd:52:4e:5d:c2:9a:38:e8:b2:26:
d9:b2:11:d4:a7:96:10:fd:8b:6b:36:de:cf:8e:48:92:46:33:
59:d1:aa:c4:b4:64:4c:79:00:87:29:17:bf:50:a2:12:51:31:
9c:c1:77:3b:b3:7a:82:28:61:3d:ee:4f:7b:a1:2e:51:ed:37:
64:32:15:03:42:bf:96:b7:c4:24:e1:27:36:9a:03:57:bc:59:
04:60:bd:02:a4:a1:c2:7c:7b:2b:39:1d:f7:1d:81:0a:30:59:
5f:e5:57:2a:d5:84:17:00:e6:19:73:45:a3:03:6f:e6:d6:e4:
bf:74:5a:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpLbuwBdHG5URCt5DyMxvdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjMwODMxMTE1MTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTk3ZTU3ZWM3MDU2YmI3ODhjZGFjOTY4YzM5MzAxZWIxZDhlMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6CXlxoYA57C0emgUc1IIf4L4s0w
Pw90vgiUebune/quJ8L0Bi7qM4VXJ1fMTolV1W8G0SCHyoiuExPfh27lhPXFP3wy
gFods9aa/YfyKitkobttuBwvPGHFli1CMuwYIj0dUh/HiEkTPhbdMq/UUu07wva9
ZuFpB7FtDKpqN8OCUbioP2Llj057251szbO3bgtVNvtmC1Xw3eEVolOPXG67pnWt
/H0kWUllblbQr75NYPWEBlG6i25JyeHEKacFvnWnSlJ745XfjPOv1CZSK2iYtLuB
y0NDAmtMshB3YzigIv0ODCjCjEa8+W2jkUIeU0HVAFiQA527YHqYLa8AqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGX5X7HBWu3iM2slow5MB6x2OGVMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEva1pmbGZzY0ZhN2VJemF5V2pEa3dIckhZNFpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaAeMA0G
CSqGSIb3DQEBCwUAA4IBAQAlWcwFd9Wp0gvuI3WLmx82MJoZKZgzcQJS0nITxjjE
X2rQvefsu8mVzTSlZ9NNUlpRlwj5EWH2ttMo+JYlyfsirMBbwWcAi9s2UfCb8vH9
bNDaU/HkXn+aOkVD4cOsTdckFqkKngmEX+mT7lWk+cuZfUrClbTCeqwRqTfDicNg
Pfj0VNKAdv1STl3CmjjosibZshHUp5YQ/YtrNt7PjkiSRjNZ0arEtGRMeQCHKRe/
UKISUTGcwXc7s3qCKGE97k97oS5R7TdkMhUDQr+Wt8Qk4Sc2mgNXvFkEYL0CpKHC
fHsrOR33HYEKMFlf5Vcq1YQXAOYZc0WjA2/m1uS/dFqj
-----END CERTIFICATE-----
Generated at Fri Dec 29 11:54:48 2023 by rpki-client on console-ams.rpki-client.org