Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/37R5Z3m2rlWhipmn8dNuvT9U86k.roa
File: 37R5Z3m2rlWhipmn8dNuvT9U86k.roa (raw, json)
Hash identifier: XM3O5Jx3hGuCvmB/ZB1IkM4094XkYc2FPJKO3MlNuIc=
Subject key identifier: DF:B4:79:67:79:B6:AE:55:A1:8A:99:A7:F1:D3:6E:BD:3F:54:F3:A9
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0185704BB6A857D257FCB6493F694528D720
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/37R5Z3m2rlWhipmn8dNuvT9U86k.roa
Signing time: Mon 02 Jan 2023 02:24:48 +0000
ROA not before: Mon 02 Jan 2023 02:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31202
IP address blocks: 185.23.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b6:a8:57:d2:57:fc:b6:49:3f:69:45:28:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 2 02:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfb4796779b6ae55a18a99a7f1d36ebd3f54f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:ab:ee:bd:13:7d:74:bb:ef:7e:71:56:22:
a6:d0:51:db:22:a4:a7:0c:7d:c2:7d:0b:d8:7e:55:
69:31:39:20:6f:34:f6:bd:f8:11:e6:c2:35:e9:d5:
fa:f1:6e:24:26:d3:2a:0d:42:92:0b:84:cf:37:dd:
45:28:49:fb:4a:8a:47:d8:cc:c8:5d:a1:fd:ad:67:
68:10:32:30:44:82:24:7b:a7:5c:86:72:be:33:ef:
ae:fb:62:96:91:f2:e3:42:b9:fb:0b:4e:25:24:92:
84:bb:70:e4:2d:eb:63:17:00:5a:ab:89:88:c0:e3:
07:56:02:2b:cc:95:fc:fd:8c:c7:e8:e9:0e:4c:39:
9d:26:4c:84:d6:f6:ca:71:16:92:5f:d5:be:4b:d8:
c9:89:e5:fc:c9:27:df:89:77:c7:20:70:46:96:2f:
61:8c:94:fa:15:b0:2e:91:a4:60:e8:11:3e:4f:5f:
03:46:57:a1:cf:b9:29:06:39:09:4f:56:83:99:ae:
44:c3:56:36:42:4f:bd:ff:bd:81:b7:2c:eb:e9:c0:
12:8f:69:57:3e:6c:e9:30:64:5a:88:75:7d:db:08:
bc:f6:19:c9:ee:a6:1e:0c:13:10:e6:33:39:d4:a5:
e6:52:41:d0:c4:27:49:8f:51:48:89:03:32:61:83:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:79:67:79:B6:AE:55:A1:8A:99:A7:F1:D3:6E:BD:3F:54:F3:A9
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/37R5Z3m2rlWhipmn8dNuvT9U86k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:87:e3:36:bb:3a:0c:fb:8f:92:47:51:03:b3:96:40:35:54:
08:50:15:8a:4e:5d:47:8b:6d:10:b8:68:5e:92:b9:06:71:15:
55:39:d3:c2:9f:ef:67:00:52:6d:f8:03:13:9c:43:f6:e9:22:
e5:94:4e:d6:80:16:09:8f:00:9e:dc:51:c6:8b:79:16:47:51:
a1:36:ca:f7:df:bb:eb:b1:eb:21:c8:ed:5b:f4:dd:f0:74:f0:
e8:a0:73:e2:d1:78:93:1e:8b:6c:fd:d5:1e:6f:44:36:43:b3:
1b:e7:17:cd:fc:cd:cb:bf:9f:fe:d1:85:e0:62:49:38:90:8c:
ac:f5:6f:f7:20:2e:37:96:82:c0:8d:2b:bb:33:3c:fc:7c:a4:
64:8e:3e:5d:de:11:36:90:9e:1f:0b:81:fa:46:9e:cf:92:31:
86:1b:7b:6d:ea:a6:49:cf:17:74:8f:aa:41:c6:b4:35:62:6e:
64:7d:1e:36:26:c4:6c:08:7f:23:53:1e:78:4a:68:f1:65:9a:
fd:16:36:33:c8:b8:35:9b:e6:c1:0d:8e:9c:85:fb:2b:34:63:
a2:6e:be:e3:ff:ab:cc:28:97:f2:26:72:f0:f3:1d:a7:f2:9a:
10:2f:bb:2e:4f:fc:9e:44:5a:e7:67:56:73:8c:4a:5a:16:76:
86:4d:cb:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwS7aoV9JX/LZJP2lFKNcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGUxN2ZkYWEyOTE4N2I4ZTQwZDYzMGFkZGViZDlmZDI0
YzAxNzYwHhcNMjMwMTAyMDIyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmI0Nzk2Nzc5YjZhZTU1YTE4YTk5YTdmMWQzNmViZDNmNTRmM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHar7r0TfXS7735xViKm0FHbIqSn
DH3CfQvYflVpMTkgbzT2vfgR5sI16dX68W4kJtMqDUKSC4TPN91FKEn7SopH2MzI
XaH9rWdoEDIwRIIke6dchnK+M++u+2KWkfLjQrn7C04lJJKEu3DkLetjFwBaq4mI
wOMHVgIrzJX8/YzH6OkOTDmdJkyE1vbKcRaSX9W+S9jJieX8ySffiXfHIHBGli9h
jJT6FbAukaRg6BE+T18DRlehz7kpBjkJT1aDma5Ew1Y2Qk+9/72Btyzr6cASj2lX
PmzpMGRaiHV92wi89hnJ7qYeDBMQ5jM51KXmUkHQxCdJj1FIiQMyYYMBlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+0eWd5tq5VoYqZp/HTbr0/VPOpMB8GA1UdIwQY
MBaAFEqOF/2qKRh7jkDWMK3evZ/STAF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYt
NWM3NjVjNTM3M2EzLzEvMzdSNVozbTJybFdoaXBtbjhkTnV2VDlVODZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYtNWM3NjVjNTM3M2Ez
LzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRc9MA0G
CSqGSIb3DQEBCwUAA4IBAQBKh+M2uzoM+4+SR1EDs5ZANVQIUBWKTl1Hi20QuGhe
krkGcRVVOdPCn+9nAFJt+AMTnEP26SLllE7WgBYJjwCe3FHGi3kWR1GhNsr337vr
seshyO1b9N3wdPDooHPi0XiTHots/dUeb0Q2Q7Mb5xfN/M3Lv5/+0YXgYkk4kIys
9W/3IC43loLAjSu7Mzz8fKRkjj5d3hE2kJ4fC4H6Rp7PkjGGG3tt6qZJzxd0j6pB
xrQ1Ym5kfR42JsRsCH8jUx54SmjxZZr9FjYzyLg1m+bBDY6chfsrNGOibr7j/6vM
KJfyJnLw8x2n8poQL7suT/yeRFrnZ1ZzjEpaFnaGTctB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:51 2024 by rpki-client on console-fra.rpki-client.org