Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rPp1XlHa_gFDXr6_lB08XCW-ogY.roa
File: rPp1XlHa_gFDXr6_lB08XCW-ogY.roa (raw, json)
Hash identifier: qCF1NiuIp7CQIBF0Vx7+iHigZV5XJ2eNBpfvECJV2d8=
Subject key identifier: AC:FA:75:5E:51:DA:FE:01:43:5E:BE:BF:94:1D:3C:5C:25:BE:A2:06
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185C56CE433ED2C9FC32BF2E0570272B3E2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rPp1XlHa_gFDXr6_lB08XCW-ogY.roa
Signing time: Wed 18 Jan 2023 15:08:45 +0000
ROA not before: Wed 18 Jan 2023 15:08:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 12:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:6c:e4:33:ed:2c:9f:c3:2b:f2:e0:57:02:72:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 18 15:08:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acfa755e51dafe01435ebebf941d3c5c25bea206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:e5:1d:b2:9d:b8:a8:6a:7c:97:bb:1b:a1:
89:96:51:e0:38:5f:d9:39:96:ed:15:9a:5d:c4:b3:
09:cb:f1:52:2b:d7:98:92:b8:66:3b:5f:0f:e9:53:
b2:48:4f:8c:a4:ca:be:10:56:c9:c6:57:c0:7c:41:
c8:92:0e:9f:76:8f:06:88:ea:1d:f4:94:37:d5:34:
8c:ef:9c:e0:71:69:18:2c:79:cd:5e:8d:ec:66:25:
ea:59:71:5f:cb:1f:b8:94:9b:89:26:c0:4f:6f:70:
b6:60:cb:8f:15:07:1f:45:e8:86:7e:b3:e2:a2:1c:
a5:ae:e4:4f:da:38:c0:be:89:66:15:0f:7b:41:cf:
b6:15:f3:d0:ab:a5:57:f8:c9:ab:3a:3f:e9:21:ef:
92:51:f6:3c:fc:8d:3f:5c:ff:f4:3f:02:71:16:b5:
7b:ab:6c:5e:d8:7f:2d:60:97:ec:5d:23:97:47:35:
7e:e8:4f:d8:f1:f6:f4:05:97:fd:77:cf:19:10:ad:
df:43:80:92:43:db:40:a4:12:11:b8:a6:cd:a6:97:
8a:2c:32:05:50:b4:df:61:d4:23:35:6b:b8:05:37:
fd:71:6d:58:8a:94:6f:a3:84:b4:52:62:a3:1e:9b:
3e:a4:ab:43:35:e1:81:99:8b:aa:35:fc:3b:50:c8:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:75:5E:51:DA:FE:01:43:5E:BE:BF:94:1D:3C:5C:25:BE:A2:06
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rPp1XlHa_gFDXr6_lB08XCW-ogY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:79:29:4e:53:a5:80:76:6d:7b:fc:7d:ca:10:04:49:28:86:
4a:d6:9a:eb:dd:57:a2:a1:84:dd:db:de:60:01:fd:4e:47:48:
45:da:1d:d4:51:60:0b:b3:33:7b:ad:73:31:b1:b7:76:b1:d5:
82:3b:7e:ab:7d:83:fb:1e:d2:1a:db:86:c2:1a:ab:e0:14:42:
ad:d3:18:b0:9e:f9:bc:eb:3b:96:ed:0d:73:b1:63:fb:0e:63:
b4:52:79:b3:1c:06:be:41:5c:d6:a3:f1:04:2e:09:4b:7e:52:
6b:fe:a5:cc:f1:01:83:80:2b:dc:54:a7:40:13:7c:11:4d:7e:
61:4e:e8:d6:81:8c:7d:c8:ae:42:24:fa:bd:dc:a8:7d:ab:66:
ee:63:f3:bf:af:a4:96:38:a7:7b:f4:21:61:12:86:98:b5:cd:
81:d2:14:6b:dc:a8:bd:6a:6f:bc:06:4c:f7:52:34:35:24:e5:
d0:ca:7b:ad:d9:5f:57:45:5e:4f:71:49:e3:e6:27:0a:32:a0:
9c:5f:f7:c2:04:4d:41:92:45:81:eb:31:c9:e1:80:ea:78:5f:
60:4a:b7:72:22:8a:57:a7:28:c6:05:67:10:39:67:e8:ca:26:
91:5a:dd:34:54:ed:52:2c:d0:e2:e4:a5:4d:01:4e:b2:64:ff:
f6:aa:15:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXFbOQz7Syfwyvy4FcCcrPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTE4MTUwODQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2ZhNzU1ZTUxZGFmZTAxNDM1ZWJlYmY5NDFkM2M1YzI1YmVhMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zflHbKduKhqfJe7G6GJllHgOF/Z
OZbtFZpdxLMJy/FSK9eYkrhmO18P6VOySE+MpMq+EFbJxlfAfEHIkg6fdo8GiOod
9JQ31TSM75zgcWkYLHnNXo3sZiXqWXFfyx+4lJuJJsBPb3C2YMuPFQcfReiGfrPi
ohylruRP2jjAvolmFQ97Qc+2FfPQq6VX+MmrOj/pIe+SUfY8/I0/XP/0PwJxFrV7
q2xe2H8tYJfsXSOXRzV+6E/Y8fb0BZf9d88ZEK3fQ4CSQ9tApBIRuKbNppeKLDIF
ULTfYdQjNWu4BTf9cW1YipRvo4S0UmKjHps+pKtDNeGBmYuqNfw7UMgqcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKz6dV5R2v4BQ16+v5QdPFwlvqIGMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvclBwMVhsSGFfZ0ZEWHI2X2xCMDhYQ1ctb2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUnPfAwQA
uWpcAwQAwiSxMA0GCSqGSIb3DQEBCwUAA4IBAQCkeSlOU6WAdm17/H3KEARJKIZK
1prr3VeioYTd295gAf1OR0hF2h3UUWALszN7rXMxsbd2sdWCO36rfYP7HtIa24bC
GqvgFEKt0xiwnvm86zuW7Q1zsWP7DmO0UnmzHAa+QVzWo/EELglLflJr/qXM8QGD
gCvcVKdAE3wRTX5hTujWgYx9yK5CJPq93Kh9q2buY/O/r6SWOKd79CFhEoaYtc2B
0hRr3Ki9am+8Bkz3UjQ1JOXQynut2V9XRV5PcUnj5icKMqCcX/fCBE1BkkWB6zHJ
4YDqeF9gSrdyIopXpyjGBWcQOWfoyiaRWt00VO1SLNDi5KVNAU6yZP/2qhU8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org