Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/0DdXcuSRzV-arc2vKkZNYoywcaM.roa
File: 0DdXcuSRzV-arc2vKkZNYoywcaM.roa (raw, json)
Hash identifier: xIVI6HqNQMDU/RDs2LWO3GOR/sYyiR2Ajsj54FOxyiA=
Subject key identifier: D0:37:57:72:E4:91:CD:5F:9A:AD:CD:AF:2A:46:4D:62:8C:B0:71:A3
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DF1355D17B3CF0785F91D82385AF9
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/0DdXcuSRzV-arc2vKkZNYoywcaM.roa
Signing time: Sun 01 Jan 2023 22:05:05 +0000
ROA not before: Sun 01 Jan 2023 22:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206986
IP address blocks: 185.169.232.0/22 maxlen: 22
2a0a:7107:1af4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f1:35:5d:17:b3:cf:07:85:f9:1d:82:38:5a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0375772e491cd5f9aadcdaf2a464d628cb071a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:f6:d2:77:6d:30:2b:4f:0e:61:d7:74:68:
f8:08:47:1a:43:a6:96:23:85:95:83:56:46:82:e7:
42:26:5a:71:c8:0c:dc:cb:2f:84:66:87:5f:91:f8:
ad:99:9e:cc:ba:e8:0e:db:d2:49:cc:86:81:d3:e0:
13:00:ff:8a:37:27:91:ee:fa:ca:b7:5e:99:81:b3:
08:8c:ff:0a:e3:23:50:dd:8c:97:2c:ca:50:84:41:
8f:a7:32:72:80:04:84:65:f3:19:65:cc:bb:da:73:
f6:ed:f4:52:1b:e3:6a:1e:35:2e:06:37:85:28:24:
16:d7:8c:b5:69:30:f9:db:87:7a:f8:76:e5:b1:a1:
0c:e6:8b:63:c3:37:3c:80:5a:f2:46:70:4f:c1:f3:
56:a7:20:3b:b2:5e:24:26:ac:7d:36:f1:a0:58:d7:
79:94:cc:be:bf:69:8e:08:a9:82:6c:35:6b:9a:27:
ca:82:e4:52:59:86:b3:f6:4d:92:7b:dc:27:ea:fd:
91:ba:f0:1a:43:76:f4:7a:23:a4:a7:bf:62:01:3c:
01:52:f6:45:a6:12:c2:08:13:56:5d:0b:d0:6b:ed:
d3:7a:68:f0:c2:fb:d7:f0:57:ca:f8:e4:1e:6e:69:
d4:eb:fc:ee:ff:07:4a:f4:ad:a1:85:f2:b5:81:90:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:57:72:E4:91:CD:5F:9A:AD:CD:AF:2A:46:4D:62:8C:B0:71:A3
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/0DdXcuSRzV-arc2vKkZNYoywcaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.232.0/22
IPv6:
2a0a:7107:1af4::/48
Signature Algorithm: sha256WithRSAEncryption
1b:75:44:92:7c:e4:87:b4:31:7d:db:71:a9:eb:98:4d:37:30:
b5:93:60:2d:0d:f1:4a:c0:28:de:45:27:c7:36:d6:60:79:f7:
04:0b:5c:6b:e7:de:00:45:95:b0:7e:2c:2e:63:77:e6:13:01:
7c:94:28:09:b1:79:c9:a5:a2:56:79:18:b9:cd:30:dc:14:8c:
f1:76:e5:28:22:9a:fa:3b:f6:9f:12:2a:2b:a8:f6:e7:5c:b5:
8d:53:59:de:2f:07:98:8e:ad:c6:a0:af:e3:d5:df:9b:ca:0e:
ec:d6:32:1d:f3:5e:2a:ae:7d:2e:73:89:08:f4:4a:60:ac:3f:
8f:5f:6e:44:64:90:a6:74:ad:be:9b:f0:d1:73:68:b7:11:d0:
de:db:05:d5:91:2c:1d:14:35:88:b9:44:d7:e1:b7:3b:be:e5:
ca:32:be:0a:a1:d0:fa:4e:40:af:57:59:fa:9d:94:1b:99:8f:
c7:d1:95:37:80:5a:76:c2:95:4a:5d:a7:d9:82:2c:a4:e4:e0:
1a:15:8c:df:59:a0:01:0c:e4:a5:70:cd:ec:23:0c:51:77:4b:
b3:43:75:66:39:73:2d:6c:23:58:b2:c1:b4:84:5c:53:af:f2:
00:4e:dc:13:5e:f1:41:9b:60:92:0b:49:63:bc:71:57:e9:d4:
b1:16:3c:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvXfE1XRezzweF+R2COFr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjMwMTAxMjIwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDM3NTc3MmU0OTFjZDVmOWFhZGNkYWYyYTQ2NGQ2MjhjYjA3MWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/n20ndtMCtPDmHXdGj4CEcaQ6aW
I4WVg1ZGgudCJlpxyAzcyy+EZodfkfitmZ7MuugO29JJzIaB0+ATAP+KNyeR7vrK
t16ZgbMIjP8K4yNQ3YyXLMpQhEGPpzJygASEZfMZZcy72nP27fRSG+NqHjUuBjeF
KCQW14y1aTD524d6+HblsaEM5otjwzc8gFryRnBPwfNWpyA7sl4kJqx9NvGgWNd5
lMy+v2mOCKmCbDVrmifKguRSWYaz9k2Se9wn6v2RuvAaQ3b0eiOkp79iATwBUvZF
phLCCBNWXQvQa+3TemjwwvvX8FfK+OQebmnU6/zu/wdK9K2hhfK1gZA+xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNA3V3Lkkc1fmq3NrypGTWKMsHGjMB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvMERkWGN1U1J6Vi1hcmMydktrWk5Zb3l3Y2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuanoMA8E
AgACMAkDBwAqCnEHGvQwDQYJKoZIhvcNAQELBQADggEBABt1RJJ85Ie0MX3bcanr
mE03MLWTYC0N8UrAKN5FJ8c21mB59wQLXGvn3gBFlbB+LC5jd+YTAXyUKAmxecml
olZ5GLnNMNwUjPF25Sgimvo79p8SKiuo9udctY1TWd4vB5iOrcagr+PV35vKDuzW
Mh3zXiqufS5ziQj0SmCsP49fbkRkkKZ0rb6b8NFzaLcR0N7bBdWRLB0UNYi5RNfh
tzu+5coyvgqh0PpOQK9XWfqdlBuZj8fRlTeAWnbClUpdp9mCLKTk4BoVjN9ZoAEM
5KVwzewjDFF3S7NDdWY5cy1sI1iywbSEXFOv8gBO3BNe8UGbYJILSWO8cVfp1LEW
PN0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org