Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Rh_qXuEEH46P4bEZKxkGPDvAOpk.roa
File: Rh_qXuEEH46P4bEZKxkGPDvAOpk.roa (raw, json)
Hash identifier: xysk9tkuUBe5n31zFORWKRGhzu1cFteeuRdjeKKPQEc=
Subject key identifier: 46:1F:EA:5E:E1:04:1F:8E:8F:E1:B1:19:2B:19:06:3C:3B:C0:3A:99
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 018570307A1D3F0FC8604E6CF80D16F166CA
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Rh_qXuEEH46P4bEZKxkGPDvAOpk.roa
Signing time: Mon 02 Jan 2023 01:55:03 +0000
ROA not before: Mon 02 Jan 2023 01:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60655
IP address blocks: 185.15.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:7a:1d:3f:0f:c8:60:4e:6c:f8:0d:16:f1:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 2 01:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=461fea5ee1041f8e8fe1b1192b19063c3bc03a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:a2:e9:7f:86:55:f4:7b:f8:a6:c7:5a:9a:
c0:51:ae:86:61:02:83:af:27:e0:e5:7d:3f:49:e9:
12:bd:3f:9c:58:ab:69:ac:32:e0:23:33:0b:67:de:
3c:15:b7:61:96:83:65:fd:9e:51:07:44:58:4c:d6:
ed:ec:09:ac:fd:61:f7:b0:2f:a3:ca:a4:38:65:56:
58:c4:70:cd:29:7e:86:b6:aa:72:87:62:0a:f9:bd:
8f:26:e8:18:64:6b:12:f1:d0:58:de:94:7c:d9:cc:
84:cb:33:6f:bd:79:5c:2c:af:b6:7b:6d:6a:79:a2:
b4:12:3e:ce:fb:b0:c7:12:0b:75:0e:ac:86:53:8c:
f3:77:98:56:38:8c:c5:7b:e6:30:9b:c9:1d:88:d5:
01:44:5a:2b:27:8f:a4:58:33:07:14:88:e5:04:82:
6b:e4:6c:f6:d9:72:c1:9a:f4:a9:f8:00:ec:cb:8a:
be:cb:5f:21:2b:b5:67:11:a0:5d:5e:bd:d0:6d:a5:
52:a0:47:10:a9:9f:6f:f8:e2:41:52:10:1c:f5:80:
72:60:ac:c2:86:6a:80:9f:7d:d4:65:44:cc:5e:9d:
89:6a:84:10:28:53:86:18:61:85:60:e9:55:65:0e:
93:fb:50:51:bd:ce:12:55:e9:f5:a0:3e:2d:51:f0:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:EA:5E:E1:04:1F:8E:8F:E1:B1:19:2B:19:06:3C:3B:C0:3A:99
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Rh_qXuEEH46P4bEZKxkGPDvAOpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.159.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4c:9f:56:c2:e7:49:f0:5a:23:75:a1:34:f6:21:4c:c8:eb:
39:72:d2:89:d9:42:1e:59:9d:ec:ed:b6:f5:32:a4:db:fe:b8:
3b:44:54:f7:1c:75:57:05:22:c0:63:ce:42:3e:ef:a1:52:b1:
16:08:1a:97:e6:5d:63:ee:03:d0:13:e6:20:41:df:81:7f:5b:
88:0a:26:f0:ff:48:7f:2f:40:e6:c2:10:4b:ef:c7:9f:ba:6f:
86:d0:b8:8d:7d:f1:99:c4:12:2c:8a:12:93:7b:2b:39:25:03:
f1:ba:1b:58:d3:1a:8b:1d:33:9f:71:94:b7:02:7d:f7:4a:6b:
62:72:7c:15:99:d2:93:02:5d:33:66:41:b3:b4:33:0f:05:e6:
94:e0:96:9d:66:e0:4b:63:e4:38:d6:1d:5f:4a:c8:c8:23:01:
5d:c7:00:bd:0a:27:f4:57:6a:97:b4:37:d5:98:89:3e:3a:8a:
b2:26:d9:c9:8d:06:bd:d3:13:33:18:dd:fb:3b:7b:1e:61:ed:
e7:90:ab:c0:e5:f3:4d:6e:79:92:cd:be:d0:f0:4a:b4:1d:a6:
b9:cf:69:05:29:3d:b3:24:49:48:c8:5e:b5:cb:36:4c:ba:09:
1c:f8:bf:b5:c7:de:0c:7d:18:fa:82:bc:23:59:d8:1b:8f:e5:
e4:80:ea:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMHodPw/IYE5s+A0W8WbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjMwMTAyMDE1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjFmZWE1ZWUxMDQxZjhlOGZlMWIxMTkyYjE5MDYzYzNiYzAzYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjami6X+GVfR7+KbHWprAUa6GYQKD
ryfg5X0/SekSvT+cWKtprDLgIzMLZ948FbdhloNl/Z5RB0RYTNbt7Ams/WH3sC+j
yqQ4ZVZYxHDNKX6Gtqpyh2IK+b2PJugYZGsS8dBY3pR82cyEyzNvvXlcLK+2e21q
eaK0Ej7O+7DHEgt1DqyGU4zzd5hWOIzFe+Ywm8kdiNUBRForJ4+kWDMHFIjlBIJr
5Gz22XLBmvSp+ADsy4q+y18hK7VnEaBdXr3QbaVSoEcQqZ9v+OJBUhAc9YByYKzC
hmqAn33UZUTMXp2JaoQQKFOGGGGFYOlVZQ6T+1BRvc4SVen1oD4tUfDB4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYf6l7hBB+Oj+GxGSsZBjw7wDqZMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvUmhfcVh1RUVINDZQNGJFWkt4a0dQRHZBT3BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ+fMA0G
CSqGSIb3DQEBCwUAA4IBAQCUTJ9WwudJ8FojdaE09iFMyOs5ctKJ2UIeWZ3s7bb1
MqTb/rg7RFT3HHVXBSLAY85CPu+hUrEWCBqX5l1j7gPQE+YgQd+Bf1uICibw/0h/
L0DmwhBL78efum+G0LiNffGZxBIsihKTeys5JQPxuhtY0xqLHTOfcZS3An33Smti
cnwVmdKTAl0zZkGztDMPBeaU4JadZuBLY+Q41h1fSsjIIwFdxwC9Cif0V2qXtDfV
mIk+OoqyJtnJjQa90xMzGN37O3seYe3nkKvA5fNNbnmSzb7Q8Eq0Haa5z2kFKT2z
JElIyF61yzZMugkc+L+1x94MfRj6grwjWdgbj+XkgOrO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org