Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa
File: iWapPsPFD9nhVushbgnvdezlUYM.roa (raw, json)
Hash identifier: eqf9qs+GCbT3muu8Gtuengz9L96DwW/BjLoCzQzFp0Y=
Subject key identifier: 89:66:A9:3E:C3:C5:0F:D9:E1:56:EB:21:6E:09:EF:75:EC:E5:51:83
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 01856C7840261547114F79FA3E771D4623F2
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa
Signing time: Sun 01 Jan 2023 08:34:58 +0000
ROA not before: Sun 01 Jan 2023 08:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.172.0/24 maxlen: 24
2001:7f8:f5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:40:26:15:47:11:4f:79:fa:3e:77:1d:46:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8966a93ec3c50fd9e156eb216e09ef75ece55183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:57:ce:7d:9b:7d:e7:fc:5c:ca:59:ee:3d:
94:5c:57:05:d4:47:b7:d6:49:71:66:dd:61:09:c0:
9d:da:5b:09:32:cc:a6:43:7b:ab:5b:24:28:59:c9:
0d:94:69:5f:e5:3e:5b:34:3b:54:49:64:88:4d:87:
9e:7f:8e:26:d5:f4:bb:87:a2:fb:a3:1b:1e:d2:3d:
69:80:ac:1b:2c:6a:c4:ff:c9:b6:e0:5e:51:af:31:
e3:a2:6c:e1:64:98:2c:bd:a7:17:9c:2c:d8:f0:e3:
e4:84:68:bc:83:12:1a:49:e5:8e:28:fe:39:cf:78:
7f:27:eb:79:4c:48:c1:fc:99:93:6f:74:53:23:d3:
97:03:91:44:0c:1a:f7:61:54:92:ed:f9:1a:6c:12:
37:01:99:9c:0a:62:af:88:6a:95:68:f5:27:74:f6:
55:e4:90:16:e2:f0:ad:af:c5:79:dc:5b:06:a0:f3:
4e:45:18:82:18:a9:ab:be:9d:86:11:93:33:e5:cd:
9e:22:ed:19:6a:45:de:0b:33:d7:8e:25:7a:17:08:
6c:88:79:34:88:ed:16:b1:f9:20:aa:fd:db:06:4d:
47:ba:dd:d8:ff:04:8d:6f:ac:4b:d4:f0:e0:a3:a2:
f4:cc:6b:66:e6:bd:00:28:52:b7:7b:fb:53:a2:e7:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:A9:3E:C3:C5:0F:D9:E1:56:EB:21:6E:09:EF:75:EC:E5:51:83
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.172.0/24
IPv6:
2001:7f8:f5::/48
Signature Algorithm: sha256WithRSAEncryption
08:d9:f1:3e:08:fc:9c:ab:58:b2:0a:db:ae:0c:40:49:c8:64:
62:9b:f5:d0:d2:b1:a8:ae:be:db:c8:e0:90:79:56:07:ac:28:
16:70:58:5f:49:c7:43:50:7e:4b:69:a9:7c:1b:04:35:b4:ac:
5b:51:20:91:79:75:bc:5b:c6:95:97:fd:ae:9c:7b:a3:a5:78:
91:04:db:30:6a:91:8e:e7:a5:ed:df:4f:12:72:68:c7:52:3a:
9a:f0:d9:12:25:6f:e4:36:9a:8f:d3:86:fe:0d:86:32:8b:cb:
88:69:23:b2:ad:60:d0:94:3a:7b:c7:84:8b:09:57:53:b0:87:
b3:de:55:00:c1:78:3a:a8:ce:d1:f1:3d:5e:28:7a:c6:d6:4a:
ea:55:5f:fc:76:0b:1a:38:01:c9:2b:85:f1:e5:45:c5:28:b8:
54:07:8d:bf:24:7f:c8:8a:70:5e:39:95:8e:1f:78:cb:cf:29:
3f:95:34:90:9c:a8:1a:70:41:11:37:02:b1:e8:2a:31:91:dd:
ca:b3:42:35:1c:d8:aa:9a:2b:f5:ed:ab:59:ba:78:cc:f6:10:
dd:ad:80:04:e4:7b:34:66:59:14:d1:61:af:c2:2e:92:d7:33:
2f:9d:47:7a:90:a2:bd:de:90:54:ab:b8:df:1f:e4:11:04:9a:
4b:5e:ab:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVseEAmFUcRT3n6PncdRiPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx
ZDNjYTUwHhcNMjMwMTAxMDgzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTY2YTkzZWMzYzUwZmQ5ZTE1NmViMjE2ZTA5ZWY3NWVjZTU1MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLBXzn2bfef8XMpZ7j2UXFcF1Ee3
1klxZt1hCcCd2lsJMsymQ3urWyQoWckNlGlf5T5bNDtUSWSITYeef44m1fS7h6L7
oxse0j1pgKwbLGrE/8m24F5RrzHjomzhZJgsvacXnCzY8OPkhGi8gxIaSeWOKP45
z3h/J+t5TEjB/JmTb3RTI9OXA5FEDBr3YVSS7fkabBI3AZmcCmKviGqVaPUndPZV
5JAW4vCtr8V53FsGoPNORRiCGKmrvp2GEZMz5c2eIu0ZakXeCzPXjiV6FwhsiHk0
iO0Wsfkgqv3bBk1Hut3Y/wSNb6xL1PDgo6L0zGtm5r0AKFK3e/tToudIAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIlmqT7DxQ/Z4VbrIW4J73Xs5VGDMB8GA1UdIwQY
MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt
MWM2ODBhZGY3YTI2LzEvaVdhcFBzUEZEOW5oVnVzaGJnbnZkZXpsVVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2
LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGsMA8E
AgACMAkDBwAgAQf4APUwDQYJKoZIhvcNAQELBQADggEBAAjZ8T4I/JyrWLIK264M
QEnIZGKb9dDSsaiuvtvI4JB5VgesKBZwWF9Jx0NQfktpqXwbBDW0rFtRIJF5dbxb
xpWX/a6ce6OleJEE2zBqkY7npe3fTxJyaMdSOprw2RIlb+Q2mo/Thv4NhjKLy4hp
I7KtYNCUOnvHhIsJV1Owh7PeVQDBeDqoztHxPV4oesbWSupVX/x2Cxo4AckrhfHl
RcUouFQHjb8kf8iKcF45lY4feMvPKT+VNJCcqBpwQRE3ArHoKjGR3cqzQjUc2Kqa
K/Xtq1m6eMz2EN2tgATkezRmWRTRYa/CLpLXMy+dR3qQor3ekFSruN8f5BEEmkte
q3w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org