Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/72jfcrq7Dh0TPmSd1-pYWS3bJ4E.roa
File: 72jfcrq7Dh0TPmSd1-pYWS3bJ4E.roa (raw, json)
Hash identifier: VCIK2I2UA47zujhWWQ35YDpzBoDdZNCIfEiAGjwsR3Q=
Subject key identifier: EF:68:DF:72:BA:BB:0E:1D:13:3E:64:9D:D7:EA:58:59:2D:DB:27:81
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 01856D53EE8B25DDE590D94A896D4FCB9888
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/72jfcrq7Dh0TPmSd1-pYWS3bJ4E.roa
Signing time: Sun 01 Jan 2023 12:34:54 +0000
ROA not before: Sun 01 Jan 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50596
IP address blocks: 185.235.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Dec 2023 11:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ee:8b:25:dd:e5:90:d9:4a:89:6d:4f:cb:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Jan 1 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef68df72babb0e1d133e649dd7ea58592ddb2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:cc:99:ed:1c:46:88:fc:bf:44:7e:2b:32:
59:35:a1:a6:c4:26:21:34:26:4c:25:6d:3b:9f:3e:
29:a0:7c:ca:71:e6:d4:16:77:ee:f3:3c:23:1e:4a:
9d:5f:8f:dc:c2:1c:5e:ee:af:ff:df:2d:de:15:a7:
76:2d:39:7e:6b:22:79:58:57:fa:56:1e:7f:cf:37:
23:d2:d7:f0:66:13:f5:08:83:e2:da:31:7f:0a:a1:
da:51:bf:07:fd:f8:b6:9e:46:c5:ee:42:22:12:49:
a9:b3:fc:97:59:42:b9:ae:a5:33:10:b5:fd:3c:64:
bb:5e:50:6a:cd:73:0d:82:b1:35:9a:2b:8e:c4:cc:
4f:4e:66:23:87:bb:0c:c8:75:6f:9f:52:78:a3:79:
c7:bd:19:49:4f:c6:7c:21:4d:4c:f5:c3:41:2c:e8:
41:a6:66:f9:51:1a:f9:a9:ae:b5:31:7f:9d:00:a9:
f3:70:17:ee:1f:7b:0d:29:4f:1b:dd:61:f1:81:c9:
29:16:00:fc:6e:04:28:4e:f3:68:87:53:02:30:1a:
51:df:50:5d:f8:0d:27:3e:75:ee:2c:b8:59:4e:6b:
6a:4f:3b:9d:40:02:aa:e8:1c:76:16:64:01:c1:24:
b0:e1:98:c7:57:0f:f6:6e:c6:19:f1:69:03:5a:25:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:DF:72:BA:BB:0E:1D:13:3E:64:9D:D7:EA:58:59:2D:DB:27:81
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/72jfcrq7Dh0TPmSd1-pYWS3bJ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:4d:b6:f5:d6:2d:46:a9:56:32:53:45:89:a2:e6:ed:2b:b1:
a2:4b:f2:52:ca:e7:14:37:3c:a0:00:87:59:17:36:dc:13:77:
dd:fc:87:d7:9d:40:9b:58:c8:bd:85:b0:b6:69:21:34:b4:11:
b7:6d:34:db:a0:6e:b9:32:32:67:ee:eb:36:4c:3f:26:5e:a4:
d1:b8:dc:0d:1d:1e:dd:ff:26:30:d7:20:e6:d0:5e:ba:32:62:
7b:e1:5e:69:13:0f:fd:25:36:27:99:80:4d:c2:0a:76:40:4c:
02:38:aa:30:42:d4:7f:9c:d4:2a:c6:2c:5a:77:5a:ee:22:1f:
6f:93:7a:76:d8:a6:57:40:b8:8e:d7:2e:e1:94:b0:c5:f0:2e:
f2:d8:06:56:a0:e6:7f:09:33:de:0a:32:dc:77:23:24:e8:1c:
64:0c:9a:82:0a:f4:4d:de:e3:0b:bd:01:f3:23:7d:32:ec:a2:
e8:b7:93:ac:d8:27:c6:5b:5a:54:70:60:33:c2:b2:a5:6f:d3:
68:92:a4:f4:28:50:e6:62:ae:19:9e:92:a8:66:a2:18:aa:c3:
58:b7:d8:e5:e8:9f:9b:a7:95:aa:e0:ae:2b:7d:06:6a:00:e7:
d0:92:8f:b6:0d:98:da:b2:e2:43:c2:57:7a:57:ab:11:d0:60:
a4:63:5b:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtU+6LJd3lkNlKiW1Py5iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj
OWM3YzYwHhcNMjMwMTAxMTIzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjY4ZGY3MmJhYmIwZTFkMTMzZTY0OWRkN2VhNTg1OTJkZGIyNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnMme0cRoj8v0R+KzJZNaGmxCYh
NCZMJW07nz4poHzKcebUFnfu8zwjHkqdX4/cwhxe7q//3y3eFad2LTl+ayJ5WFf6
Vh5/zzcj0tfwZhP1CIPi2jF/CqHaUb8H/fi2nkbF7kIiEkmps/yXWUK5rqUzELX9
PGS7XlBqzXMNgrE1miuOxMxPTmYjh7sMyHVvn1J4o3nHvRlJT8Z8IU1M9cNBLOhB
pmb5URr5qa61MX+dAKnzcBfuH3sNKU8b3WHxgckpFgD8bgQoTvNoh1MCMBpR31Bd
+A0nPnXuLLhZTmtqTzudQAKq6Bx2FmQBwSSw4ZjHVw/2bsYZ8WkDWiXy6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9o33K6uw4dEz5kndfqWFkt2yeBMB8GA1UdIwQY
MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt
Y2Q3YjI4OGQ2ZWEwLzEvNzJqZmNycTdEaDBUUG1TZDEtcFlXUzNiSjRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw
LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuetAMA0G
CSqGSIb3DQEBCwUAA4IBAQBfTbb11i1GqVYyU0WJoubtK7GiS/JSyucUNzygAIdZ
FzbcE3fd/IfXnUCbWMi9hbC2aSE0tBG3bTTboG65MjJn7us2TD8mXqTRuNwNHR7d
/yYw1yDm0F66MmJ74V5pEw/9JTYnmYBNwgp2QEwCOKowQtR/nNQqxixad1ruIh9v
k3p22KZXQLiO1y7hlLDF8C7y2AZWoOZ/CTPeCjLcdyMk6BxkDJqCCvRN3uMLvQHz
I30y7KLot5Os2CfGW1pUcGAzwrKlb9NokqT0KFDmYq4ZnpKoZqIYqsNYt9jl6J+b
p5Wq4K4rfQZqAOfQko+2DZjasuJDwld6V6sR0GCkY1vZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:37 2024 by rpki-client on console-ams.rpki-client.org