Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/_ED-eTofqNFcuaMuP9K2sLZvgLM.roa
File: _ED-eTofqNFcuaMuP9K2sLZvgLM.roa (raw, json)
Hash identifier: zM77U/S5Y8GC3VPqSxHLU6jDa+zrpK8dvhWnCLqxic4=
Subject key identifier: FC:40:FE:79:3A:1F:A8:D1:5C:B9:A3:2E:3F:D2:B6:B0:B6:6F:80:B3
Certificate issuer: /CN=2271a7d618b0e4ff2d40baaa5aca66b160d43103
Certificate serial: 0187CB151CB0F94FDDB45B4DE59925A31A74
Authority key identifier: 22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InGn1hiw5P8tQLqqWspmsWDUMQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/_ED-eTofqNFcuaMuP9K2sLZvgLM.roa
Signing time: Sat 29 Apr 2023 03:36:10 +0000
ROA not before: Sat 29 Apr 2023 03:36:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34985
IP address blocks: 185.254.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cb:15:1c:b0:f9:4f:dd:b4:5b:4d:e5:99:25:a3:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2271a7d618b0e4ff2d40baaa5aca66b160d43103
Validity
Not Before: Apr 29 03:36:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc40fe793a1fa8d15cb9a32e3fd2b6b0b66f80b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:dc:1a:76:f0:86:9a:a8:72:6a:ea:b7:1a:
59:6c:fb:95:b6:ce:cf:74:71:ec:8d:67:de:46:d5:
0f:51:b6:ec:f4:d5:71:56:a5:8e:1c:3c:63:27:16:
13:53:b2:8a:64:82:ec:4e:ac:76:85:40:a6:ff:d8:
60:e2:e1:8f:bb:4e:5e:36:3c:ca:7e:5f:28:82:2e:
5f:e2:57:c2:4e:98:15:4b:f5:14:76:0e:08:92:7d:
48:05:96:85:d5:9e:a3:98:ee:f5:b0:eb:da:26:55:
bc:5b:38:ef:53:10:5c:c3:d9:97:95:c2:aa:f6:e9:
32:7a:63:8f:01:54:97:57:4c:e7:01:dc:a0:88:23:
04:3a:6f:5e:be:17:1a:46:e6:d9:3b:7a:05:b3:b1:
8a:98:7c:b8:f0:3c:1e:3a:cf:e9:bb:2e:d1:f9:75:
76:58:ea:fa:fb:f9:a7:ab:bc:7e:27:57:fa:13:da:
65:f4:48:4e:bb:b5:94:39:1d:0b:67:75:4f:82:a9:
7b:fb:7e:e5:1b:48:1e:dd:16:3d:e2:5c:81:99:e0:
39:f1:05:1e:d9:67:92:14:73:45:f4:97:e4:9b:30:
95:b7:38:af:e2:14:a5:7e:b7:16:82:68:f7:80:76:
5b:c2:53:04:47:9b:36:90:fb:25:4a:c7:13:6b:71:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:FE:79:3A:1F:A8:D1:5C:B9:A3:2E:3F:D2:B6:B0:B6:6F:80:B3
X509v3 Authority Key Identifier:
keyid:22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InGn1hiw5P8tQLqqWspmsWDUMQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/_ED-eTofqNFcuaMuP9K2sLZvgLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.240.0/24
Signature Algorithm: sha256WithRSAEncryption
74:17:e1:32:b2:ae:07:c8:dd:15:a1:ee:7c:a7:7c:04:7b:cc:
b8:4f:57:20:6d:ae:53:c6:dd:2d:38:5f:de:df:2a:1e:fc:91:
e8:ac:1f:87:78:c2:ff:1b:f8:6e:35:a6:02:f2:39:39:82:53:
78:ab:be:e1:76:8e:d0:f0:98:7b:ee:aa:51:71:cd:dc:61:ce:
20:ec:d4:6a:b0:ed:22:47:ac:6c:f0:49:e1:77:64:be:af:ce:
c9:ca:a1:5d:30:75:61:68:9c:7a:ca:10:bb:d2:47:5c:6a:8d:
b7:a0:5c:68:3d:c5:e0:24:53:20:46:5b:e5:af:9b:48:f9:66:
04:86:89:22:ff:b6:ed:5b:f0:e2:e5:83:dd:6d:17:5c:6a:37:
59:dc:65:b3:ab:a4:80:8a:4c:48:94:55:fb:6b:43:da:88:65:
21:ae:59:e2:e2:78:c8:de:d7:dd:7d:d8:2c:ae:b6:03:ad:dd:
e3:81:41:e4:8c:af:77:23:f5:85:6f:de:7f:5e:1c:f5:4d:c8:
0f:f0:e6:2d:54:65:45:30:5a:10:f1:7a:6e:10:9e:b0:84:46:
a1:40:1f:d5:b6:39:9a:0b:95:ca:6e:9d:0f:c9:a9:c6:51:44:
ba:b8:45:29:48:15:06:3c:6e:4c:49:d1:91:67:a5:9b:ed:ef:
b2:86:59:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfLFRyw+U/dtFtN5Zkloxp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzFhN2Q2MThiMGU0ZmYyZDQwYmFhYTVhY2E2NmIxNjBk
NDMxMDMwHhcNMjMwNDI5MDMzNjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzQwZmU3OTNhMWZhOGQxNWNiOWEzMmUzZmQyYjZiMGI2NmY4MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4zcGnbwhpqocmrqtxpZbPuVts7P
dHHsjWfeRtUPUbbs9NVxVqWOHDxjJxYTU7KKZILsTqx2hUCm/9hg4uGPu05eNjzK
fl8ogi5f4lfCTpgVS/UUdg4Ikn1IBZaF1Z6jmO71sOvaJlW8WzjvUxBcw9mXlcKq
9ukyemOPAVSXV0znAdygiCMEOm9evhcaRubZO3oFs7GKmHy48DweOs/puy7R+XV2
WOr6+/mnq7x+J1f6E9pl9EhOu7WUOR0LZ3VPgql7+37lG0ge3RY94lyBmeA58QUe
2WeSFHNF9JfkmzCVtziv4hSlfrcWgmj3gHZbwlMER5s2kPslSscTa3Gc6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxA/nk6H6jRXLmjLj/StrC2b4CzMB8GA1UdIwQY
MBaAFCJxp9YYsOT/LUC6qlrKZrFg1DEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5HbjFoaXc1UDh0UUxxcVdzcG1zV0RVTVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNzlmNWMtOTE2My00YTI4LWFkNDgt
ZDFlZjgxNGY1YjM2LzEvX0VELWVUb2ZxTkZjdWFNdVA5SzJzTFp2Z0xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yNzlmNWMtOTE2My00YTI4LWFkNDgtZDFlZjgxNGY1YjM2
LzEvSW5HbjFoaXc1UDh0UUxxcVdzcG1zV0RVTVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf7wMA0G
CSqGSIb3DQEBCwUAA4IBAQB0F+Eysq4HyN0Voe58p3wEe8y4T1cgba5Txt0tOF/e
3yoe/JHorB+HeML/G/huNaYC8jk5glN4q77hdo7Q8Jh77qpRcc3cYc4g7NRqsO0i
R6xs8Enhd2S+r87JyqFdMHVhaJx6yhC70kdcao23oFxoPcXgJFMgRlvlr5tI+WYE
hoki/7btW/Di5YPdbRdcajdZ3GWzq6SAikxIlFX7a0PaiGUhrlni4njI3tfdfdgs
rrYDrd3jgUHkjK93I/WFb95/Xhz1TcgP8OYtVGVFMFoQ8XpuEJ6whEahQB/Vtjma
C5XKbp0PyanGUUS6uEUpSBUGPG5MSdGRZ6Wb7e+yhlkA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-ams.rpki-client.org