Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Shqgs1VzeM9_HWzfK_uu-tkjZk8.roa
File: Shqgs1VzeM9_HWzfK_uu-tkjZk8.roa (raw, json)
Hash identifier: a2yIe/8Wy0CeBH0HJodHwVkPAD3NR0kbOIkka7Y+t2o=
Subject key identifier: 4A:1A:A0:B3:55:73:78:CF:7F:1D:6C:DF:2B:FB:AE:FA:D9:23:66:4F
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 01856ED4D855407DFC75DAB469789D6A328D
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Shqgs1VzeM9_HWzfK_uu-tkjZk8.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34863
IP address blocks: 185.85.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d8:55:40:7d:fc:75:da:b4:69:78:9d:6a:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a1aa0b3557378cf7f1d6cdf2bfbaefad923664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:61:28:24:94:c8:30:cc:c6:27:21:a0:e5:
af:b3:2b:57:d7:4d:40:3a:e5:f3:15:a8:a8:e4:47:
66:cb:1f:a3:ed:9f:6b:21:d1:55:9d:ec:4f:b9:8b:
d8:dc:a1:ef:e6:44:16:1b:3a:8c:1b:3e:4f:36:9d:
7e:51:73:d8:4b:96:f8:c2:c1:0f:26:8f:ae:9e:14:
b4:66:a0:49:35:e4:2d:c0:e0:eb:a9:ae:ae:76:ce:
5b:e1:43:d2:f0:12:c9:5a:3f:13:26:48:02:48:ac:
5a:1d:c1:01:a2:8c:02:fb:6b:12:d0:fc:86:59:eb:
a0:f1:b6:4b:e9:0a:d9:dc:83:7c:15:71:49:f7:5b:
c2:9a:2a:98:f8:08:c6:fe:76:7a:40:85:c9:9a:03:
e2:8a:0b:6d:ac:69:37:3c:01:e0:a0:ef:26:6f:8d:
70:42:53:fe:4c:e2:f5:8a:60:3f:8e:35:74:86:32:
5d:da:55:72:de:68:2a:2b:91:89:37:6a:fc:22:de:
92:6b:f5:6a:95:9a:42:85:94:e7:c0:19:75:45:e3:
41:ca:b9:d0:ca:64:0f:48:a2:23:83:79:89:20:a2:
96:49:91:48:cc:44:c5:a6:50:5e:4f:22:fc:e4:fd:
f8:2b:42:45:e6:17:e7:6c:a5:90:97:29:66:d1:e5:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1A:A0:B3:55:73:78:CF:7F:1D:6C:DF:2B:FB:AE:FA:D9:23:66:4F
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Shqgs1VzeM9_HWzfK_uu-tkjZk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:1c:80:84:a9:b6:f1:f5:36:ba:08:e9:3d:33:c6:d9:d9:a6:
a0:47:82:4a:30:63:36:d4:16:c8:61:0b:17:e9:eb:84:2d:d7:
ca:ed:a9:92:ba:11:b1:41:f9:1d:71:84:c8:dd:86:e5:ec:da:
f4:2c:c2:95:ba:cc:e5:9b:a8:5f:09:47:9e:2f:90:9f:f7:40:
bb:28:35:cc:09:f9:5c:7d:58:7f:1b:11:a4:61:23:27:0c:9b:
09:f5:d1:de:c3:ba:9b:18:e0:71:89:48:e5:42:67:dc:7e:04:
df:7f:51:af:58:68:18:31:1b:9f:e1:8d:28:7a:b0:67:f8:be:
19:d2:77:33:e0:53:9d:fc:23:e8:87:7e:5a:fd:b3:b4:a1:8c:
85:ce:be:14:6c:96:60:18:14:85:74:53:c3:a2:52:37:06:0b:
02:14:98:94:31:1c:2d:cd:5f:8d:fe:76:92:1a:4f:3f:04:a7:
7a:18:5d:fd:cb:4e:32:77:f2:7b:ab:d7:8b:2a:5a:3f:34:17:
a4:3a:6e:26:4d:bf:9a:af:77:00:1a:3f:37:6d:fc:94:92:34:
0c:ea:0a:a0:66:ed:28:86:00:19:dc:72:38:9b:97:85:5f:fc:
3d:17:5f:7f:60:3a:e7:fa:e3:b3:45:37:1e:39:15:d5:e8:9e:
22:dc:2b:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NhVQH38ddq0aXidajKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4
OTZkYmYwHhcNMjMwMTAxMTkzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTFhYTBiMzU1NzM3OGNmN2YxZDZjZGYyYmZiYWVmYWQ5MjM2NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtlhKCSUyDDMxichoOWvsytX101A
OuXzFaio5Edmyx+j7Z9rIdFVnexPuYvY3KHv5kQWGzqMGz5PNp1+UXPYS5b4wsEP
Jo+unhS0ZqBJNeQtwODrqa6uds5b4UPS8BLJWj8TJkgCSKxaHcEBoowC+2sS0PyG
Weug8bZL6QrZ3IN8FXFJ91vCmiqY+AjG/nZ6QIXJmgPiigttrGk3PAHgoO8mb41w
QlP+TOL1imA/jjV0hjJd2lVy3mgqK5GJN2r8It6Sa/VqlZpChZTnwBl1ReNByrnQ
ymQPSKIjg3mJIKKWSZFIzETFplBeTyL85P34K0JF5hfnbKWQlylm0eWy6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEoaoLNVc3jPfx1s3yv7rvrZI2ZPMB8GA1UdIwQY
MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt
NzUzZDk2OWEwNzAyLzEvU2hxZ3MxVnplTTlfSFd6ZktfdXUtdGtqWms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy
LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVXoMA0G
CSqGSIb3DQEBCwUAA4IBAQBtHICEqbbx9Ta6COk9M8bZ2aagR4JKMGM21BbIYQsX
6euELdfK7amSuhGxQfkdcYTI3Ybl7Nr0LMKVuszlm6hfCUeeL5Cf90C7KDXMCflc
fVh/GxGkYSMnDJsJ9dHew7qbGOBxiUjlQmfcfgTff1GvWGgYMRuf4Y0oerBn+L4Z
0ncz4FOd/CPoh35a/bO0oYyFzr4UbJZgGBSFdFPDolI3BgsCFJiUMRwtzV+N/naS
Gk8/BKd6GF39y04yd/J7q9eLKlo/NBekOm4mTb+ar3cAGj83bfyUkjQM6gqgZu0o
hgAZ3HI4m5eFX/w9F19/YDrn+uOzRTceORXV6J4i3Cvl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org