Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/XxTFHTKdvY0hOuaQ9mgFCxte410.roa
File: XxTFHTKdvY0hOuaQ9mgFCxte410.roa (raw, json)
Hash identifier: BqsE6e1t5Qn3EIT5hCUXdcTd/UtLMeosr479SwYgIuo=
Subject key identifier: 5F:14:C5:1D:32:9D:BD:8D:21:3A:E6:90:F6:68:05:0B:1B:5E:E3:5D
Certificate issuer: /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial: 018CABB39EC5EA5D5C7E7EA587EF7F717D31
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/XxTFHTKdvY0hOuaQ9mgFCxte410.roa
Signing time: Wed 27 Dec 2023 14:35:24 +0000
ROA not before: Wed 27 Dec 2023 14:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 185.67.36.0/23 maxlen: 24
2a05:bc0::/32 maxlen: 64
2a05:bc0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:b3:9e:c5:ea:5d:5c:7e:7e:a5:87:ef:7f:71:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
Validity
Not Before: Dec 27 14:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f14c51d329dbd8d213ae690f668050b1b5ee35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:4b:fe:f6:dc:a4:75:3c:86:71:53:11:83:
98:48:34:2d:e4:bb:d1:16:19:e4:25:fc:77:cb:c1:
b5:b0:4c:85:99:35:a2:df:32:ad:60:52:99:e5:fc:
8b:e4:63:e8:11:34:9a:18:a3:df:09:f5:bb:3f:99:
8e:b6:82:c8:70:a8:4b:bc:73:46:e9:6a:99:22:bd:
99:8a:36:56:f5:46:2b:dd:9a:db:80:33:ae:10:59:
c7:d6:ee:85:85:8e:05:36:aa:12:1f:22:66:36:d7:
5d:cb:8f:f4:b6:88:76:20:da:0f:d5:b1:49:f6:e6:
88:e0:bb:93:bb:23:4e:f3:7b:48:13:1a:62:8e:be:
78:07:cd:1f:b1:99:8c:92:c8:15:6f:c0:0e:c0:3d:
cb:2e:46:d2:b6:e7:6b:b8:5b:4e:e1:cd:81:5e:85:
a9:71:e8:ee:77:45:1c:7a:00:73:c3:33:69:74:f1:
1c:25:be:26:2f:3f:1e:dd:79:f9:a2:b2:76:2c:4b:
3b:07:ac:0b:8b:32:7d:05:66:b0:57:2a:e1:93:55:
eb:ed:6a:ea:f6:21:fb:3d:94:db:14:03:0b:a9:d6:
0b:a6:17:98:fc:54:de:f2:e1:a5:6e:d9:a7:33:ee:
fc:91:28:8f:2f:13:dc:7b:53:de:d9:56:26:85:a8:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:C5:1D:32:9D:BD:8D:21:3A:E6:90:F6:68:05:0B:1B:5E:E3:5D
X509v3 Authority Key Identifier:
keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/XxTFHTKdvY0hOuaQ9mgFCxte410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.36.0/23
IPv6:
2a05:bc0::/32
Signature Algorithm: sha256WithRSAEncryption
12:23:8e:db:ee:a1:fb:86:bf:b4:b0:7f:84:2e:b4:e8:1b:21:
2c:67:ca:2e:8e:c1:a3:47:de:39:94:ec:72:b9:36:54:7e:bb:
96:56:0f:3a:08:01:8b:27:27:0c:10:5c:e5:1b:6b:3e:82:b7:
53:bb:19:6a:17:18:27:e0:c6:15:20:ab:92:eb:8a:c8:99:42:
e2:df:11:b2:65:1d:17:1f:dd:e5:8e:98:0f:25:9f:69:8e:39:
6b:0a:70:a3:01:8c:e1:53:ed:52:9d:57:7f:58:ab:07:da:bc:
e0:4f:44:03:0a:f5:73:0b:0d:dd:25:04:e4:40:e5:62:3a:b9:
1d:63:31:95:e9:63:ab:8b:f0:ba:86:b6:70:8c:bf:18:0f:85:
c1:b9:2b:23:b2:7a:1c:f2:e2:ed:74:51:be:e8:31:93:e1:0c:
ba:07:fc:11:65:7a:c9:92:15:93:11:89:4a:82:d0:a0:60:fa:
6e:3b:5d:6d:15:8b:31:79:0e:a2:d6:15:5c:08:bf:0a:e3:a1:
94:ab:ab:f3:3e:2c:c6:3e:d2:33:f6:db:29:86:71:a3:b8:cc:
38:44:1d:fe:66:13:e0:a9:df:9e:3e:6c:8b:58:55:0e:97:f5:
3d:91:a6:5c:cd:9c:10:3c:cb:6a:2a:15:91:73:58:f2:04:5d:
8a:6d:8f:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYyrs57F6l1cfn6lh+9/cX0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Mzg5NzE3NGY5Njc0OTBkYmY2MTg5ZDQ3OWRmMmM5Mzcx
YmY0MDQwHhcNMjMxMjI3MTQzNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjE0YzUxZDMyOWRiZDhkMjEzYWU2OTBmNjY4MDUwYjFiNWVlMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGhL/vbcpHU8hnFTEYOYSDQt5LvR
FhnkJfx3y8G1sEyFmTWi3zKtYFKZ5fyL5GPoETSaGKPfCfW7P5mOtoLIcKhLvHNG
6WqZIr2ZijZW9UYr3ZrbgDOuEFnH1u6FhY4FNqoSHyJmNtddy4/0toh2INoP1bFJ
9uaI4LuTuyNO83tIExpijr54B80fsZmMksgVb8AOwD3LLkbStudruFtO4c2BXoWp
cejud0UcegBzwzNpdPEcJb4mLz8e3Xn5orJ2LEs7B6wLizJ9BWawVyrhk1Xr7Wrq
9iH7PZTbFAMLqdYLpheY/FTe8uGlbtmnM+78kSiPLxPce1Pe2VYmhajrfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF8UxR0ynb2NITrmkPZoBQsbXuNdMB8GA1UdIwQY
MBaAFFk4lxdPlnSQ2/YYnUed8sk3G/QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTIt
NWY4ZmM3MDc4MzZhLzEvWHhURkhUS2R2WTBoT3VhUTltZ0ZDeHRlNDEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTItNWY4ZmM3MDc4MzZh
LzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuUMkMA0E
AgACMAcDBQAqBQvAMA0GCSqGSIb3DQEBCwUAA4IBAQASI47b7qH7hr+0sH+ELrTo
GyEsZ8oujsGjR945lOxyuTZUfruWVg86CAGLJycMEFzlG2s+grdTuxlqFxgn4MYV
IKuS64rImULi3xGyZR0XH93ljpgPJZ9pjjlrCnCjAYzhU+1SnVd/WKsH2rzgT0QD
CvVzCw3dJQTkQOViOrkdYzGV6WOri/C6hrZwjL8YD4XBuSsjsnoc8uLtdFG+6DGT
4Qy6B/wRZXrJkhWTEYlKgtCgYPpuO11tFYsxeQ6i1hVcCL8K46GUq6vzPizGPtIz
9tsphnGjuMw4RB3+ZhPgqd+ePmyLWFUOl/U9kaZczZwQPMtqKhWRc1jyBF2KbY9I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:38 2024 by rpki-client on console-fra.rpki-client.org