Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/_kAD6K3xlQYsgzeSErqCj5dBQA0.roa
File: _kAD6K3xlQYsgzeSErqCj5dBQA0.roa (raw, json)
Hash identifier: 4vErxXUfDIR7VMfsLWEbUIuVXDeoixIvNnJNQ0HUohc=
Subject key identifier: FE:40:03:E8:AD:F1:95:06:2C:83:37:92:12:BA:82:8F:97:41:40:0D
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01891FDDB3D61BF734D59AA00AFBC1736AA3
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/_kAD6K3xlQYsgzeSErqCj5dBQA0.roa
Signing time: Tue 04 Jul 2023 07:46:10 +0000
ROA not before: Tue 04 Jul 2023 07:46:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.11.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 03:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:dd:b3:d6:1b:f7:34:d5:9a:a0:0a:fb:c1:73:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jul 4 07:46:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe4003e8adf195062c83379212ba828f9741400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:06:57:6b:82:3f:10:7a:50:6b:9a:b7:cb:
d0:e8:f2:e2:34:6e:cd:8e:ce:47:e4:d4:03:c5:fd:
97:19:13:6d:a9:15:9b:61:69:d9:79:41:17:97:71:
b7:8b:85:32:0f:db:98:0a:ee:fd:53:40:77:28:58:
ae:8e:1e:55:5d:f9:93:44:8b:5c:80:f1:ed:62:9f:
a0:6e:5a:f3:bc:1d:17:e0:ed:f6:eb:b8:22:c5:a5:
2e:2d:14:7a:e0:d8:61:2c:c8:13:e9:a1:6f:b7:3c:
08:d9:ce:8e:7e:b1:b8:ef:8b:e1:fa:78:66:e5:13:
9c:aa:46:78:b2:f0:10:2b:af:6e:64:34:54:de:77:
f6:56:a0:3a:82:54:5e:37:bd:ce:e0:9a:2a:f2:ff:
12:e6:96:23:35:32:a4:f8:33:45:14:c8:3b:69:aa:
af:47:f9:93:0e:5f:00:ee:ec:de:7c:94:aa:d5:d6:
a9:b0:2f:b3:db:61:0c:33:1e:ea:38:d2:00:b5:dc:
a2:8c:71:f6:1a:c7:37:b7:70:4d:c1:02:d4:a1:7a:
5f:4a:fa:b1:c9:26:ed:c1:e2:f5:6c:d1:98:5f:2f:
28:c6:00:db:28:c7:87:f2:3c:e4:26:05:81:e1:40:
0a:a9:31:ec:76:6b:a3:94:bd:2c:e5:63:34:60:36:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:40:03:E8:AD:F1:95:06:2C:83:37:92:12:BA:82:8F:97:41:40:0D
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/_kAD6K3xlQYsgzeSErqCj5dBQA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
92:3a:49:a5:ea:9a:83:26:04:d9:09:1e:59:01:d3:29:e2:46:
8d:b6:26:07:a5:06:cf:60:38:ef:d0:f4:25:2e:a8:80:47:ef:
90:00:5d:34:5f:17:6b:35:39:a8:c4:68:48:1c:fc:bc:8d:0a:
db:8d:6b:af:0d:dd:a7:44:cc:d3:84:6e:e6:fc:90:07:51:f9:
94:fb:ef:6d:2a:a8:44:72:6c:0d:f4:7f:58:1d:59:7b:ca:39:
a9:af:24:de:1e:57:a2:3d:e1:45:ce:d7:80:77:33:76:5c:34:
1a:54:07:7b:e6:b2:63:a1:30:54:b2:f2:2e:94:05:68:d2:b3:
d4:06:74:26:37:97:23:7c:dd:6d:98:f4:ea:1e:f8:25:c5:d2:
7d:19:f5:06:63:75:e3:a0:1b:57:83:9c:e8:d5:f3:24:0a:95:
eb:a5:d3:bc:3c:ca:da:48:30:24:39:63:d3:09:d0:0b:5c:ad:
18:7b:3a:b4:94:78:66:e1:17:ee:c0:82:30:45:1b:1a:bf:2b:
4d:2b:02:b6:c8:1a:3b:68:55:3e:49:c6:d9:8d:73:57:ae:5d:
d2:23:2f:d0:13:5f:69:01:f4:33:44:97:9b:85:be:d5:8c:84:
7b:eb:00:8b:08:e6:1b:36:f8:9f:4d:55:68:4a:3d:d8:e8:ad:
34:19:98:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkf3bPWG/c01ZqgCvvBc2qjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjMwNzA0MDc0NjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTQwMDNlOGFkZjE5NTA2MmM4MzM3OTIxMmJhODI4Zjk3NDE0MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMEGV2uCPxB6UGuat8vQ6PLiNG7N
js5H5NQDxf2XGRNtqRWbYWnZeUEXl3G3i4UyD9uYCu79U0B3KFiujh5VXfmTRItc
gPHtYp+gblrzvB0X4O3267gixaUuLRR64NhhLMgT6aFvtzwI2c6OfrG474vh+nhm
5ROcqkZ4svAQK69uZDRU3nf2VqA6glReN73O4Joq8v8S5pYjNTKk+DNFFMg7aaqv
R/mTDl8A7uzefJSq1dapsC+z22EMMx7qONIAtdyijHH2Gsc3t3BNwQLUoXpfSvqx
ySbtweL1bNGYXy8oxgDbKMeH8jzkJgWB4UAKqTHsdmujlL0s5WM0YDZmKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5AA+it8ZUGLIM3khK6go+XQUANMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvX2tBRDZLM3hsUVlzZ3plU0VycUNqNWRCUUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQuOMA0G
CSqGSIb3DQEBCwUAA4IBAQCSOkml6pqDJgTZCR5ZAdMp4kaNtiYHpQbPYDjv0PQl
LqiAR++QAF00XxdrNTmoxGhIHPy8jQrbjWuvDd2nRMzThG7m/JAHUfmU++9tKqhE
cmwN9H9YHVl7yjmpryTeHleiPeFFzteAdzN2XDQaVAd75rJjoTBUsvIulAVo0rPU
BnQmN5cjfN1tmPTqHvglxdJ9GfUGY3XjoBtXg5zo1fMkCpXrpdO8PMraSDAkOWPT
CdALXK0Yezq0lHhm4RfuwIIwRRsavytNKwK2yBo7aFU+ScbZjXNXrl3SIy/QE19p
AfQzRJebhb7VjIR76wCLCOYbNvifTVVoSj3Y6K00GZgf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org