Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/ARMZkjEAti1r5SDUIzDq7Rv_IP4.roa
File: ARMZkjEAti1r5SDUIzDq7Rv_IP4.roa (raw, json)
Hash identifier: KYhszTxugRmWKkNawnpK3LUp59XQ2eCrapVqFo41Bvk=
Subject key identifier: 01:13:19:92:31:00:B6:2D:6B:E5:20:D4:23:30:EA:ED:1B:FF:20:FE
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 01856CC15E28569D35E538013D0AC545958C
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/ARMZkjEAti1r5SDUIzDq7Rv_IP4.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199837
IP address blocks: 185.249.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5e:28:56:9d:35:e5:38:01:3d:0a:c5:45:95:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011319923100b62d6be520d42330eaed1bff20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:1c:3d:09:41:24:85:48:ef:89:98:58:ed:
68:b8:c2:52:e8:32:a2:3c:8b:5a:b3:45:32:03:d7:
32:91:71:49:44:01:fe:3d:92:cc:d9:2e:a8:cd:1f:
72:fe:66:c4:30:47:75:5e:a3:08:79:b3:2f:bf:b2:
8d:38:c0:3d:53:a6:4b:7d:9c:ee:b3:da:65:1f:21:
36:61:91:ae:be:29:c2:11:1f:a1:bc:7e:71:d9:5b:
9e:81:56:0f:41:cb:58:1a:37:6f:d9:9b:56:c1:a8:
00:4f:cf:ad:67:25:af:19:33:6d:24:7a:45:34:5a:
20:25:13:17:5c:43:b8:68:b7:46:90:6b:d9:df:2e:
94:de:af:9a:00:8a:3d:83:2f:ce:2e:d8:f8:21:50:
55:31:11:32:ad:79:9d:5d:3b:23:7d:c3:c5:da:44:
34:d3:58:3d:a3:9f:8f:a4:5d:5d:2a:0e:7a:b3:91:
82:33:cf:b9:1a:4a:c8:80:35:f0:5f:36:9a:64:2e:
6c:52:8c:0b:37:1f:cf:a0:40:aa:9a:19:d5:22:2b:
07:94:ec:24:97:ba:34:dd:24:64:70:69:cc:53:9c:
94:fd:3c:07:ff:1d:bb:2d:46:ff:3f:96:37:2d:9b:
ab:6a:12:cb:21:22:fc:d4:ab:98:9c:d8:35:6b:25:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:19:92:31:00:B6:2D:6B:E5:20:D4:23:30:EA:ED:1B:FF:20:FE
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/ARMZkjEAti1r5SDUIzDq7Rv_IP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.12.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ef:10:9c:29:a1:a4:7a:45:a7:01:d0:8f:cb:af:ec:bc:7d:
d4:6e:36:31:60:24:b1:29:f1:4d:92:4e:3a:8a:0e:c7:cc:ff:
01:bb:b2:c6:00:cb:3a:de:29:d7:92:fb:75:c3:c8:b8:e5:72:
81:4c:09:9e:3d:e5:66:67:f6:c5:7b:2a:75:1e:81:c3:21:ef:
f0:05:65:89:74:07:17:7f:97:c3:69:48:c2:76:19:60:b9:93:
3d:61:85:87:84:c0:af:f2:f8:f8:65:05:d4:6c:7a:51:d3:c6:
59:72:bb:a3:91:4d:e1:42:89:52:b9:03:bb:fd:45:cc:17:18:
89:6a:0d:24:f8:09:e6:be:65:b1:48:7f:c5:4c:8a:ab:b5:d8:
50:ed:1b:17:07:fa:eb:11:43:62:bd:1a:b5:a9:f6:a2:a4:07:
e8:86:dc:24:1e:4a:30:c2:f9:55:89:bb:ab:25:41:aa:10:0e:
ab:04:e6:c0:d2:8b:1f:69:17:bf:98:ce:38:31:66:ba:b5:9b:
eb:97:bc:da:15:81:54:8e:df:e4:62:d7:fe:86:fa:48:2f:56:
37:0d:a3:b7:a8:da:11:c4:b4:77:64:49:91:40:6b:90:21:00:
14:45:d2:4e:4b:84:21:13:00:8e:e2:e8:f2:f2:e7:00:c1:c8:
14:b2:c6:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswV4oVp015TgBPQrFRZWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWNmMzRiZTJiMDRjN2NjZWYyMjIxZThkMWZjYjZjYWJi
NDE1OTEwHhcNMjMwMTAxMDk1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTEzMTk5MjMxMDBiNjJkNmJlNTIwZDQyMzMwZWFlZDFiZmYyMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57QcPQlBJIVI74mYWO1ouMJS6DKi
PItas0UyA9cykXFJRAH+PZLM2S6ozR9y/mbEMEd1XqMIebMvv7KNOMA9U6ZLfZzu
s9plHyE2YZGuvinCER+hvH5x2VuegVYPQctYGjdv2ZtWwagAT8+tZyWvGTNtJHpF
NFogJRMXXEO4aLdGkGvZ3y6U3q+aAIo9gy/OLtj4IVBVMREyrXmdXTsjfcPF2kQ0
01g9o5+PpF1dKg56s5GCM8+5GkrIgDXwXzaaZC5sUowLNx/PoECqmhnVIisHlOwk
l7o03SRkcGnMU5yU/TwH/x27LUb/P5Y3LZurahLLISL81KuYnNg1ayXxlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAETGZIxALYta+Ug1CMw6u0b/yD+MB8GA1UdIwQY
MBaAFNis80visEx8zvIiHo0fy2yrtBWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjct
NDRkNjRiOWRhNDU5LzEvQVJNWmtqRUF0aTFyNVNEVUl6RHE3UnZfSVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjctNDRkNjRiOWRhNDU5
LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufkMMA0G
CSqGSIb3DQEBCwUAA4IBAQBF7xCcKaGkekWnAdCPy6/svH3UbjYxYCSxKfFNkk46
ig7HzP8Bu7LGAMs63inXkvt1w8i45XKBTAmePeVmZ/bFeyp1HoHDIe/wBWWJdAcX
f5fDaUjCdhlguZM9YYWHhMCv8vj4ZQXUbHpR08ZZcrujkU3hQolSuQO7/UXMFxiJ
ag0k+AnmvmWxSH/FTIqrtdhQ7RsXB/rrEUNivRq1qfaipAfohtwkHkowwvlVibur
JUGqEA6rBObA0osfaRe/mM44MWa6tZvrl7zaFYFUjt/kYtf+hvpIL1Y3DaO3qNoR
xLR3ZEmRQGuQIQAURdJOS4QhEwCO4ujy8ucAwcgUssaf
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:55 2024 by rpki-client on console-ams.rpki-client.org