Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1azDq4GBFX5MCqBQCEn3iotNkQw.roa
File: 1azDq4GBFX5MCqBQCEn3iotNkQw.roa (raw, json)
Hash identifier: C98yzjLSKtFYi04FpE9fzVwmgeGgnmm5ZOMhIT2fg+I=
Subject key identifier: D5:AC:C3:AB:81:81:15:7E:4C:0A:A0:50:08:49:F7:8A:8B:4D:91:0C
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01856CE40B58103130DA0DF98DEB9581D7EE
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1azDq4GBFX5MCqBQCEn3iotNkQw.roa
Signing time: Sun 01 Jan 2023 10:32:42 +0000
ROA not before: Sun 01 Jan 2023 10:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207645
IP address blocks: 37.148.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e4:0b:58:10:31:30:da:0d:f9:8d:eb:95:81:d7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 10:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5acc3ab8181157e4c0aa0500849f78a8b4d910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:32:cc:ed:05:9b:dd:00:03:db:28:12:b5:
68:13:48:c5:dd:8c:3f:9a:00:34:cb:03:ae:36:db:
fd:89:26:59:90:89:8b:47:32:30:77:61:24:cd:9b:
a4:e3:dd:a6:5f:45:77:78:56:d1:eb:5e:e4:34:d7:
7e:aa:ae:3b:43:01:1c:5d:ec:60:48:2e:fa:0b:61:
0b:75:78:c6:38:43:05:d3:e4:c0:ba:60:82:cf:f5:
f7:b0:6a:b9:5a:08:31:1e:90:bc:8b:d5:b4:4c:63:
7a:39:c1:b9:8f:e2:ab:53:07:61:6c:a7:55:1d:3c:
d2:43:23:d7:18:27:ec:91:a5:44:c2:6e:a2:34:60:
5e:87:77:15:c9:3f:e0:28:6a:8d:9c:8d:27:97:de:
54:d4:30:2d:80:58:79:b1:d0:c6:fa:d5:40:06:38:
45:08:36:29:57:03:a2:e8:f2:8c:3d:8b:ed:8d:cc:
58:da:3d:77:37:27:c3:19:83:67:e4:5a:6c:71:cc:
30:e8:c4:dd:d1:46:96:9a:73:36:95:a5:4b:57:71:
90:4c:37:3d:2f:d1:87:4f:1a:3d:e6:99:a0:25:5b:
fc:0d:ca:8e:07:14:61:61:eb:37:1c:0d:c8:84:c6:
00:55:69:e9:96:a4:8e:7a:7a:df:c1:ed:36:75:3d:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:C3:AB:81:81:15:7E:4C:0A:A0:50:08:49:F7:8A:8B:4D:91:0C
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1azDq4GBFX5MCqBQCEn3iotNkQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:56:c4:c7:7d:fa:d0:ab:ae:74:49:d7:eb:0a:a1:85:8b:53:
67:4d:52:63:e7:89:26:56:23:79:cb:7c:f6:ba:05:6c:b8:ac:
81:1f:54:f3:a3:17:a7:cc:ff:3e:36:e0:52:f4:ed:a1:64:11:
04:09:48:a3:f4:ae:3b:8f:10:51:f1:34:dc:e3:94:6f:af:98:
34:92:4d:45:97:75:c2:07:63:a5:f5:c8:97:73:1a:70:d4:d6:
1a:b6:02:67:39:03:8c:48:f5:61:9d:2c:2c:d2:38:3f:36:e5:
a5:b4:56:64:d8:8d:a8:9f:48:92:6c:6e:5c:80:2c:db:93:0d:
79:b2:7a:9f:ef:1f:cf:08:c6:f1:7c:8b:9b:ed:a8:6d:5a:c2:
9c:4d:d3:a8:94:d1:14:ac:96:da:98:88:56:b3:69:dc:4e:62:
e8:cc:4f:93:39:98:3c:4f:55:04:25:a5:0b:3a:7a:19:a5:ac:
30:d5:64:06:af:b6:74:28:79:ef:83:a9:c1:06:08:1e:ea:e8:
dd:c7:ec:ac:87:16:06:de:c0:35:f1:21:a6:03:f9:3e:de:fc:
2f:62:3b:88:91:ed:09:0d:91:22:51:cf:ad:5f:9f:53:f6:32:
70:5c:86:cb:01:4c:a4:21:83:9c:28:a0:8e:42:05:39:58:14:
07:ed:c4:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5AtYEDEw2g35jeuVgdfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjMwMTAxMTAzMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWFjYzNhYjgxODExNTdlNGMwYWEwNTAwODQ5Zjc4YThiNGQ5MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNwyzO0Fm90AA9soErVoE0jF3Yw/
mgA0ywOuNtv9iSZZkImLRzIwd2EkzZuk492mX0V3eFbR617kNNd+qq47QwEcXexg
SC76C2ELdXjGOEMF0+TAumCCz/X3sGq5WggxHpC8i9W0TGN6OcG5j+KrUwdhbKdV
HTzSQyPXGCfskaVEwm6iNGBeh3cVyT/gKGqNnI0nl95U1DAtgFh5sdDG+tVABjhF
CDYpVwOi6PKMPYvtjcxY2j13NyfDGYNn5Fpsccww6MTd0UaWmnM2laVLV3GQTDc9
L9GHTxo95pmgJVv8DcqOBxRhYes3HA3IhMYAVWnplqSOenrfwe02dT315QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWsw6uBgRV+TAqgUAhJ94qLTZEMMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvMWF6RHE0R0JGWDVNQ3FCUUNFbjNpb3ROa1F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJZTcMA0G
CSqGSIb3DQEBCwUAA4IBAQCKVsTHffrQq650SdfrCqGFi1NnTVJj54kmViN5y3z2
ugVsuKyBH1TzoxenzP8+NuBS9O2hZBEECUij9K47jxBR8TTc45Rvr5g0kk1Fl3XC
B2Ol9ciXcxpw1NYatgJnOQOMSPVhnSws0jg/NuWltFZk2I2on0iSbG5cgCzbkw15
snqf7x/PCMbxfIub7ahtWsKcTdOolNEUrJbamIhWs2ncTmLozE+TOZg8T1UEJaUL
OnoZpaww1WQGr7Z0KHnvg6nBBgge6ujdx+yshxYG3sA18SGmA/k+3vwvYjuIke0J
DZEiUc+tX59T9jJwXIbLAUykIYOcKKCOQgU5WBQH7cQj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org