Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/wnZ-zy4PLNsfeKnsXGu8dQEqvV0.roa
File: wnZ-zy4PLNsfeKnsXGu8dQEqvV0.roa (raw, json)
Hash identifier: 4yO/gJF30ds071wJClmcwQe3IPdtA8xlGe5wJx7I0bs=
Subject key identifier: C2:76:7E:CF:2E:0F:2C:DB:1F:78:A9:EC:5C:6B:BC:75:01:2A:BD:5D
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 01856D13ACC37F2E2C87377B48C5F20D5403
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/wnZ-zy4PLNsfeKnsXGu8dQEqvV0.roa
Signing time: Sun 01 Jan 2023 11:24:44 +0000
ROA not before: Sun 01 Jan 2023 11:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62749
IP address blocks: 185.32.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ac:c3:7f:2e:2c:87:37:7b:48:c5:f2:0d:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Jan 1 11:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2767ecf2e0f2cdb1f78a9ec5c6bbc75012abd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:b4:a1:98:a4:de:75:cd:58:3c:07:fe:6f:
c3:93:bc:46:f0:7d:d3:0a:4a:b6:38:b8:50:6b:05:
8b:cd:c6:71:4f:9e:49:43:0c:f5:28:8a:91:9b:f1:
50:06:8e:f7:16:ba:53:5e:4d:71:a8:2a:7a:ce:45:
c4:10:85:f9:1f:14:8e:13:ee:42:1f:3c:4c:3f:e7:
b5:83:b5:67:31:69:c0:e0:9a:62:66:42:68:ba:f0:
c4:4a:d6:55:1d:7f:21:15:80:06:e3:78:07:31:f1:
96:62:30:ef:aa:b6:31:06:c4:c4:cd:b7:ac:47:6f:
3d:c5:bc:05:a6:f5:1b:95:1e:ea:a7:66:0f:f0:4b:
55:da:07:eb:21:82:23:b6:37:64:ab:f0:eb:a5:6b:
4c:8c:30:83:d9:7c:79:28:6a:d3:28:7a:10:41:c2:
ac:50:a8:a4:54:da:d6:c1:a1:f7:e5:92:ba:b2:b0:
fd:61:ca:5b:f3:02:a6:22:36:37:8c:ac:72:c8:f7:
f3:e3:5a:57:e5:bb:50:a0:48:13:ad:27:26:95:9b:
61:70:76:2b:0b:57:f1:f6:19:08:c2:a0:0e:95:91:
51:df:ac:93:fa:80:51:a1:5f:87:9f:ec:9d:07:0a:
68:97:df:a8:25:e9:e7:ac:c8:ee:d0:cc:57:b0:73:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:7E:CF:2E:0F:2C:DB:1F:78:A9:EC:5C:6B:BC:75:01:2A:BD:5D
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/wnZ-zy4PLNsfeKnsXGu8dQEqvV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.76.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d0:55:bc:69:a3:f6:46:25:55:8a:ae:55:d1:bd:55:cf:23:
a9:2f:f9:d9:3b:5f:46:73:10:4a:02:36:5e:f8:2e:c9:c7:c4:
1d:fa:ba:e8:d2:6d:77:74:5d:e5:20:b5:00:1c:bd:66:68:9c:
27:b9:3b:3b:ad:36:07:8b:ff:7f:8f:5a:0b:c9:d7:d2:a8:12:
75:2d:62:19:12:80:ba:49:65:21:d4:83:f8:dc:4a:2e:87:1b:
cd:77:6f:77:02:c5:3f:8e:cb:79:cc:49:7c:a4:dd:4a:b5:2b:
04:a7:ce:86:bf:aa:6e:06:79:ef:7d:29:3d:16:25:88:88:bd:
2a:82:12:76:37:a8:fb:39:fe:80:b0:fd:25:71:c6:d1:94:e6:
5e:30:21:8a:c6:ff:d7:f7:6d:50:5e:31:8d:5f:86:15:64:f2:
38:ee:d6:33:17:f6:e1:60:16:85:e3:3c:b6:6d:23:56:07:03:
ca:f8:93:ee:ae:b7:27:9a:b5:3b:2b:79:e0:72:c6:6e:d6:82:
0d:22:6e:c0:3a:2e:61:7a:59:dd:7c:77:ad:eb:00:ee:ea:37:
43:6d:50:84:ed:36:64:d3:1b:ed:ce:5f:ac:5d:80:a2:59:83:
bd:0b:b4:c1:64:bb:7d:f9:d6:a7:a0:e3:a0:18:c5:94:5d:21:
2b:95:0b:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtE6zDfy4shzd7SMXyDVQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl
MjdmNzMwHhcNMjMwMTAxMTEyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjc2N2VjZjJlMGYyY2RiMWY3OGE5ZWM1YzZiYmM3NTAxMmFiZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6O0oZik3nXNWDwH/m/Dk7xG8H3T
Ckq2OLhQawWLzcZxT55JQwz1KIqRm/FQBo73FrpTXk1xqCp6zkXEEIX5HxSOE+5C
HzxMP+e1g7VnMWnA4JpiZkJouvDEStZVHX8hFYAG43gHMfGWYjDvqrYxBsTEzbes
R289xbwFpvUblR7qp2YP8EtV2gfrIYIjtjdkq/DrpWtMjDCD2Xx5KGrTKHoQQcKs
UKikVNrWwaH35ZK6srD9Ycpb8wKmIjY3jKxyyPfz41pX5btQoEgTrScmlZthcHYr
C1fx9hkIwqAOlZFR36yT+oBRoV+Hn+ydBwpol9+oJennrMju0MxXsHOuvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJ2fs8uDyzbH3ip7FxrvHUBKr1dMB8GA1UdIwQY
MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt
NDhiYTkyOGZiMWJlLzEvd25aLXp5NFBMTnNmZUtuc1hHdThkUUVxdlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl
LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBMMA0G
CSqGSIb3DQEBCwUAA4IBAQCv0FW8aaP2RiVViq5V0b1VzyOpL/nZO19GcxBKAjZe
+C7Jx8Qd+rro0m13dF3lILUAHL1maJwnuTs7rTYHi/9/j1oLydfSqBJ1LWIZEoC6
SWUh1IP43EouhxvNd293AsU/jst5zEl8pN1KtSsEp86Gv6puBnnvfSk9FiWIiL0q
ghJ2N6j7Of6AsP0lccbRlOZeMCGKxv/X921QXjGNX4YVZPI47tYzF/bhYBaF4zy2
bSNWBwPK+JPurrcnmrU7K3ngcsZu1oINIm7AOi5helndfHet6wDu6jdDbVCE7TZk
0xvtzl+sXYCiWYO9C7TBZLt9+danoOOgGMWUXSErlQsR
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:19 2024 by rpki-client on console-ams.rpki-client.org