Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S_jqdJYLZkFRuyToq06WOpK8JuQ.roa
File: S_jqdJYLZkFRuyToq06WOpK8JuQ.roa (raw, json)
Hash identifier: /bfrDfz8h3YdX9iL/ZI8blNBJxS0+L3eT8x3ccnlVfw=
Subject key identifier: 4B:F8:EA:74:96:0B:66:41:51:BB:24:E8:AB:4E:96:3A:92:BC:26:E4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0186B6AF82D48D33B02670A2E7B7C77C0BB6
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S_jqdJYLZkFRuyToq06WOpK8JuQ.roa
Signing time: Mon 06 Mar 2023 11:30:00 +0000
ROA not before: Mon 06 Mar 2023 11:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200195
IP address blocks: 185.40.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:af:82:d4:8d:33:b0:26:70:a2:e7:b7:c7:7c:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 6 11:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf8ea74960b664151bb24e8ab4e963a92bc26e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:fc:67:4a:ce:b9:32:e9:5a:78:2b:65:bb:
fc:85:68:fc:57:bf:07:35:98:17:86:f7:7f:ba:6d:
8b:c8:2f:d9:86:0d:91:2d:5d:a8:62:a7:f5:9a:3a:
df:df:a9:5d:cc:bc:13:ca:ae:c0:43:74:d7:a0:86:
30:c5:da:de:a5:98:46:97:31:d5:f5:22:35:c4:b2:
83:cb:a1:f7:3e:c0:67:70:ca:1f:3b:e1:96:a3:e4:
2a:c4:5e:fb:56:25:47:91:7e:17:14:5f:75:bc:d4:
e6:bd:b7:22:91:6b:a4:f7:9d:5c:0c:44:ae:f0:ab:
37:dc:c5:a2:73:d4:0a:6b:c8:dc:44:02:f1:b8:06:
7a:f8:ee:84:b0:8d:51:36:3e:c7:cd:24:fb:29:5e:
84:d0:8b:9c:dc:92:05:d9:0c:2b:3e:54:04:e4:ec:
35:de:53:01:f6:fa:c9:6f:2a:ca:cc:37:2b:05:ee:
05:2b:8b:ab:cb:f2:ce:3c:66:28:53:d5:36:74:7f:
57:6a:b9:4d:ca:4f:83:6c:e3:a6:02:ab:34:04:d3:
8b:b4:f2:3a:75:02:02:08:7e:a3:30:e0:41:1f:66:
98:2f:67:b0:e4:a4:e4:3b:3f:c5:f9:75:bf:43:6f:
c4:dc:5d:e9:71:30:9a:8a:60:b3:fb:18:bb:ea:a8:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:EA:74:96:0B:66:41:51:BB:24:E8:AB:4E:96:3A:92:BC:26:E4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S_jqdJYLZkFRuyToq06WOpK8JuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.4.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ed:b6:a2:5e:29:53:e9:9f:48:b0:93:4b:ee:59:53:19:1e:
d5:a2:2e:65:c6:60:54:85:56:02:ae:56:0b:c8:a7:02:54:b5:
b2:ff:28:c3:4c:c7:00:48:20:43:c1:bb:70:91:d7:87:2a:5e:
a1:24:aa:e5:d4:4d:5e:26:ae:f5:ab:72:69:ba:48:5a:c5:d9:
a0:ca:c9:c8:07:99:75:f5:94:22:d9:db:e7:70:1b:f0:6c:cc:
ee:b7:0d:eb:e1:5b:05:fa:0f:eb:a1:39:81:d5:35:22:eb:3a:
49:29:09:a7:a6:18:32:13:85:cb:52:5c:45:96:96:79:ab:4e:
d5:6b:1c:53:ee:e5:21:e2:6b:2b:b5:4e:5b:1b:cf:21:35:f7:
47:40:58:f0:68:eb:77:df:47:09:79:64:a3:23:1d:0f:61:6b:
de:5d:66:4e:a2:09:6b:3a:d9:c4:1e:be:e2:24:4c:8e:6d:26:
f9:e1:eb:1c:4a:c9:12:bc:91:c8:de:85:d0:e7:61:e9:1e:17:
c3:3d:48:5a:a0:1b:37:70:e2:a6:35:93:79:d2:2e:0e:01:14:
eb:78:1b:3a:e7:a8:a8:1f:18:20:6d:d0:c3:08:dd:93:ce:60:
d9:2e:f7:f7:c8:db:92:fa:6e:f2:0b:f1:2f:0e:a6:0d:b4:22:
8d:bb:a2:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa2r4LUjTOwJnCi57fHfAu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMzA2MTEzMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY4ZWE3NDk2MGI2NjQxNTFiYjI0ZThhYjRlOTYzYTkyYmMyNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/8Z0rOuTLpWngrZbv8hWj8V78H
NZgXhvd/um2LyC/Zhg2RLV2oYqf1mjrf36ldzLwTyq7AQ3TXoIYwxdrepZhGlzHV
9SI1xLKDy6H3PsBncMofO+GWo+QqxF77ViVHkX4XFF91vNTmvbcikWuk951cDESu
8Ks33MWic9QKa8jcRALxuAZ6+O6EsI1RNj7HzST7KV6E0Iuc3JIF2QwrPlQE5Ow1
3lMB9vrJbyrKzDcrBe4FK4ury/LOPGYoU9U2dH9XarlNyk+DbOOmAqs0BNOLtPI6
dQICCH6jMOBBH2aYL2ew5KTkOz/F+XW/Q2/E3F3pcTCaimCz+xi76qj8oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv46nSWC2ZBUbsk6KtOljqSvCbkMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvU19qcWRKWUxaa0ZSdXlUb3EwNldPcEs4SnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSgEMA0G
CSqGSIb3DQEBCwUAA4IBAQCH7baiXilT6Z9IsJNL7llTGR7Voi5lxmBUhVYCrlYL
yKcCVLWy/yjDTMcASCBDwbtwkdeHKl6hJKrl1E1eJq71q3JpukhaxdmgysnIB5l1
9ZQi2dvncBvwbMzutw3r4VsF+g/roTmB1TUi6zpJKQmnphgyE4XLUlxFlpZ5q07V
axxT7uUh4msrtU5bG88hNfdHQFjwaOt330cJeWSjIx0PYWveXWZOoglrOtnEHr7i
JEyObSb54escSskSvJHI3oXQ52HpHhfDPUhaoBs3cOKmNZN50i4OARTreBs656io
HxggbdDDCN2TzmDZLvf3yNuS+m7yC/EvDqYNtCKNu6Ie
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org