Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p9GSuzb-TQVMnR7NiF87232eJaM.roa
File: p9GSuzb-TQVMnR7NiF87232eJaM.roa (raw, json)
Hash identifier: Bv6eVJ1fD3HA5mUUEZ/lJNtCPvXU8MiBI8Md022Jsfs=
Subject key identifier: A7:D1:92:BB:36:FE:4D:05:4C:9D:1E:CD:88:5F:3B:DB:7D:9E:25:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EA706743A72AA9E9CB3CCB81DA958B44
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p9GSuzb-TQVMnR7NiF87232eJaM.roa
Signing time: Wed 25 Jan 2023 19:38:33 +0000
ROA not before: Wed 25 Jan 2023 19:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.115.147.0/24 maxlen: 24
45.130.201.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:70:67:43:a7:2a:a9:e9:cb:3c:cb:81:da:95:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 19:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d192bb36fe4d054c9d1ecd885f3bdb7d9e25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:14:b0:18:02:7b:13:09:eb:96:a2:96:13:
58:b4:5e:75:f8:07:db:76:98:89:db:0d:a0:27:d0:
74:f4:c0:4f:01:b5:e2:88:5f:fe:63:f2:7c:91:d9:
a3:a4:c0:4d:17:26:80:52:2a:60:59:3f:dc:62:c9:
c6:d2:c5:6d:a2:a4:37:9d:2a:ff:34:bd:c0:ef:4a:
db:a7:8b:7f:f6:af:38:bd:c7:79:6f:e9:f1:bb:3e:
1f:aa:06:02:b9:04:e5:ab:23:8a:6f:0f:a4:f5:eb:
c4:9e:4f:d6:02:fe:db:86:b0:7a:a4:5f:92:b0:37:
dd:47:93:db:49:96:e0:82:0f:2c:b2:a6:92:70:22:
18:7c:b0:6c:bc:45:9c:4d:5b:bc:53:75:f8:54:41:
11:47:76:f6:0c:03:8f:c6:f6:78:fe:4e:cb:24:3e:
08:a9:c7:91:a8:94:5f:70:4b:7e:07:81:38:83:f4:
c4:0b:be:dc:43:e4:55:bf:26:7f:9d:bc:7f:e0:60:
11:43:e5:0b:7a:9a:8d:cd:24:28:be:a9:bf:fb:54:
33:12:77:99:60:e2:9b:ef:07:3d:3d:a0:e2:24:ab:
a4:62:67:57:40:99:13:d5:ae:4a:55:48:ad:71:a3:
7e:0d:27:ee:bf:a1:c2:2d:53:0f:85:17:75:69:c0:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:92:BB:36:FE:4D:05:4C:9D:1E:CD:88:5F:3B:DB:7D:9E:25:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p9GSuzb-TQVMnR7NiF87232eJaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
185.115.147.0/24
185.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:8e:1f:81:67:f9:99:d0:e6:38:b8:e4:2e:18:bd:3e:69:
fe:83:cc:64:ad:35:ef:95:c0:81:0c:9e:42:72:1f:c0:8d:43:
93:e2:2c:68:01:2b:14:1d:75:ed:82:37:48:c7:b4:e5:a3:90:
88:22:74:fa:4a:6c:e9:c6:93:ad:97:d0:09:d1:b3:9c:17:77:
4d:f7:93:03:f3:ac:e7:22:bf:fc:fd:e4:58:60:6b:fd:cf:0a:
83:d8:ef:19:69:49:47:3d:9e:e2:26:93:c4:2c:33:cd:b3:8f:
08:8b:83:23:a0:29:b6:47:06:92:ce:a7:fe:0c:04:07:0c:62:
6b:70:30:70:52:84:14:83:33:d9:4d:56:b6:4c:db:32:9d:da:
81:37:48:82:15:20:54:a5:43:30:bb:34:a5:42:d9:55:f6:2e:
d2:16:00:c0:5b:62:aa:8d:61:45:2f:16:bc:96:1f:c5:a1:9f:
e4:b4:28:ce:86:81:1f:aa:53:6a:1e:e9:7d:f0:66:9b:54:24:
ec:51:cf:58:ad:1f:a5:74:12:4f:97:7a:ea:27:da:65:ea:be:
83:27:90:57:28:94:2c:90:6d:2f:e5:30:63:4c:c8:73:da:8a:
8f:a2:3f:dd:28:d1:ae:94:24:1b:90:8a:97:4b:17:fc:b4:bb:
18:69:79:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXqcGdDpyqp6cs8y4HalYtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTI1MTkzODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2QxOTJiYjM2ZmU0ZDA1NGM5ZDFlY2Q4ODVmM2JkYjdkOWUyNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWgUsBgCexMJ65ailhNYtF51+Afb
dpiJ2w2gJ9B09MBPAbXiiF/+Y/J8kdmjpMBNFyaAUipgWT/cYsnG0sVtoqQ3nSr/
NL3A70rbp4t/9q84vcd5b+nxuz4fqgYCuQTlqyOKbw+k9evEnk/WAv7bhrB6pF+S
sDfdR5PbSZbggg8ssqaScCIYfLBsvEWcTVu8U3X4VEERR3b2DAOPxvZ4/k7LJD4I
qceRqJRfcEt+B4E4g/TEC77cQ+RVvyZ/nbx/4GARQ+ULepqNzSQovqm/+1QzEneZ
YOKb7wc9PaDiJKukYmdXQJkT1a5KVUitcaN+DSfuv6HCLVMPhRd1acAqJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKfRkrs2/k0FTJ0ezYhfO9t9niWjMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcDlHU3V6Yi1UUVZNblI3TmlGODcyMzJlSmFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYLJAwQA
uXOTAwQAufSKMA0GCSqGSIb3DQEBCwUAA4IBAQB3p44fgWf5mdDmOLjkLhi9Pmn+
g8xkrTXvlcCBDJ5Cch/AjUOT4ixoASsUHXXtgjdIx7Tlo5CIInT6SmzpxpOtl9AJ
0bOcF3dN95MD86znIr/8/eRYYGv9zwqD2O8ZaUlHPZ7iJpPELDPNs48Ii4MjoCm2
RwaSzqf+DAQHDGJrcDBwUoQUgzPZTVa2TNsyndqBN0iCFSBUpUMwuzSlQtlV9i7S
FgDAW2KqjWFFLxa8lh/FoZ/ktCjOhoEfqlNqHul98GabVCTsUc9YrR+ldBJPl3rq
J9pl6r6DJ5BXKJQskG0v5TBjTMhz2oqPoj/dKNGulCQbkIqXSxf8tLsYaXkH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org