Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/TrXPRiR-UCg1zWuypjDuHs6zJik.roa
File: TrXPRiR-UCg1zWuypjDuHs6zJik.roa (raw, json)
Hash identifier: acTZFUXSbF4KO8eqAjmhCAXLpzWvr4qrIxXI1ewLrEU=
Subject key identifier: 4E:B5:CF:46:24:7E:50:28:35:CD:6B:B2:A6:30:EE:1E:CE:B3:26:29
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 0186EC97A8815F18D99320D3FCCA5A9FE07D
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/TrXPRiR-UCg1zWuypjDuHs6zJik.roa
Signing time: Thu 16 Mar 2023 22:43:27 +0000
ROA not before: Thu 16 Mar 2023 22:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 185.167.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:97:a8:81:5f:18:d9:93:20:d3:fc:ca:5a:9f:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Mar 16 22:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb5cf46247e502835cd6bb2a630ee1eceb32629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:17:90:a0:9d:cf:0a:9b:ec:62:b3:e6:b0:
b1:55:03:ed:a6:dd:98:f6:72:a1:5b:cd:16:a5:1b:
2a:24:76:4d:b4:7e:5d:52:1a:73:e4:d9:b8:bf:26:
4d:23:ad:f4:b0:48:58:29:75:e8:2b:ea:74:0e:9f:
22:83:d4:f3:fb:3d:ef:1e:55:f5:fb:30:f6:e7:16:
b7:cb:ac:0d:42:1e:f7:38:93:e0:c7:48:80:1c:34:
9a:14:15:b7:99:40:6b:99:1a:67:ab:2e:d3:e7:12:
e3:3b:f4:d6:85:21:7c:17:5d:00:83:ab:f0:c8:e2:
01:24:86:46:3c:3f:08:6b:dd:57:fb:82:ca:ea:51:
09:1e:40:6e:f6:5c:76:c8:21:e7:8e:82:58:f8:87:
a6:1d:c3:f8:12:60:fb:c3:69:d9:61:1f:26:2d:e4:
ea:20:6b:99:b8:45:65:53:f1:b7:45:4e:ab:d1:01:
89:c3:6b:28:c3:07:32:21:e4:8d:f5:fe:43:e6:3a:
bb:47:dc:10:c1:83:6f:b9:cd:e0:bf:5e:7d:18:be:
4d:f1:81:ca:f2:8e:4f:38:32:3e:fe:ae:31:c5:a0:
3e:c4:00:72:96:26:77:9f:b6:53:6d:dd:65:f7:c5:
a8:c7:16:00:42:97:58:e7:d4:3e:43:35:97:21:26:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B5:CF:46:24:7E:50:28:35:CD:6B:B2:A6:30:EE:1E:CE:B3:26:29
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/TrXPRiR-UCg1zWuypjDuHs6zJik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.232.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2d:90:bc:59:8b:de:95:9e:1b:20:df:f5:60:f3:9a:5c:f6:
8c:e2:0a:fb:bc:6b:0f:34:b3:9f:f0:87:e3:60:bb:d5:ef:26:
18:27:21:59:7f:06:fc:6c:5c:88:ee:5d:bf:41:ed:48:75:14:
cb:57:f6:b6:7e:a3:e4:da:e2:6e:37:ef:fa:78:5c:8e:90:13:
8f:15:b9:64:2a:b5:0c:3f:8e:2a:14:1c:a9:4e:2d:25:1d:b7:
20:9e:f2:a5:9a:f2:13:0b:88:e3:43:ad:2b:85:6a:b8:78:9c:
68:8e:b2:96:06:ff:1d:3d:c3:45:74:f5:6e:98:34:ed:5b:a5:
a5:35:7c:22:ff:71:d7:2f:67:7a:4d:9c:83:28:0a:a5:f8:63:
e6:0c:73:44:0c:33:1c:72:72:73:5c:56:2f:e4:71:5e:f9:fd:
9c:33:4f:b6:df:d4:3e:bb:a5:5c:3b:1d:ad:23:c0:4e:c9:ab:
9f:9e:cd:b0:66:66:00:17:45:1f:f1:e8:9c:ae:cc:50:05:16:
9e:ab:75:45:e6:25:5b:45:90:2e:69:6d:94:8b:7c:28:e1:a7:
3d:2e:76:f7:eb:3b:95:41:50:4a:6d:5f:23:8a:66:7e:23:69:
36:8c:af:b1:e1:72:5c:7c:aa:d9:51:48:7c:31:6e:6d:b4:ab:
2c:63:f6:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbsl6iBXxjZkyDT/Mpan+B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjMwMzE2MjI0MzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI1Y2Y0NjI0N2U1MDI4MzVjZDZiYjJhNjMwZWUxZWNlYjMyNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAUXkKCdzwqb7GKz5rCxVQPtpt2Y
9nKhW80WpRsqJHZNtH5dUhpz5Nm4vyZNI630sEhYKXXoK+p0Dp8ig9Tz+z3vHlX1
+zD25xa3y6wNQh73OJPgx0iAHDSaFBW3mUBrmRpnqy7T5xLjO/TWhSF8F10Ag6vw
yOIBJIZGPD8Ia91X+4LK6lEJHkBu9lx2yCHnjoJY+IemHcP4EmD7w2nZYR8mLeTq
IGuZuEVlU/G3RU6r0QGJw2sowwcyIeSN9f5D5jq7R9wQwYNvuc3gv159GL5N8YHK
8o5PODI+/q4xxaA+xAByliZ3n7ZTbd1l98WoxxYAQpdY59Q+QzWXISZNnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE61z0YkflAoNc1rsqYw7h7OsyYpMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvVHJYUFJpUi1VQ2cxeld1eXBqRHVIczZ6SmlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafoMA0G
CSqGSIb3DQEBCwUAA4IBAQBWLZC8WYvelZ4bIN/1YPOaXPaM4gr7vGsPNLOf8Ifj
YLvV7yYYJyFZfwb8bFyI7l2/Qe1IdRTLV/a2fqPk2uJuN+/6eFyOkBOPFblkKrUM
P44qFBypTi0lHbcgnvKlmvITC4jjQ60rhWq4eJxojrKWBv8dPcNFdPVumDTtW6Wl
NXwi/3HXL2d6TZyDKAql+GPmDHNEDDMccnJzXFYv5HFe+f2cM0+239Q+u6VcOx2t
I8BOyaufns2wZmYAF0Uf8eicrsxQBRaeq3VF5iVbRZAuaW2Ui3wo4ac9Lnb36zuV
QVBKbV8jimZ+I2k2jK+x4XJcfKrZUUh8MW5ttKssY/Y3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:38 2023 by rpki-client on console-ams.rpki-client.org