Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/V4xgrZK27Kra0v_6aJp2kbEN4pI.roa
File: V4xgrZK27Kra0v_6aJp2kbEN4pI.roa (raw, json)
Hash identifier: XtpNuym2oRU97QloUsvCfAaTwQvAlvyQzaazwVHMTpA=
Subject key identifier: 57:8C:60:AD:92:B6:EC:AA:DA:D2:FF:FA:68:9A:76:91:B1:0D:E2:92
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD5D4C0EC5FEF22A2284C6C39F30C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/V4xgrZK27Kra0v_6aJp2kbEN4pI.roa
Signing time: Mon 02 Jan 2023 17:15:08 +0000
ROA not before: Mon 02 Jan 2023 17:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205775
IP address blocks: 185.36.0.0/22 maxlen: 22
45.93.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d5:d4:c0:ec:5f:ef:22:a2:28:4c:6c:39:f3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578c60ad92b6ecaadad2fffa689a7691b10de292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:15:b8:1c:59:1c:cc:cd:6e:24:09:c7:e8:
80:16:8f:44:75:1f:7a:09:0f:64:d9:e3:b0:c2:ca:
c1:fd:66:e7:22:e5:30:57:ee:15:f2:3c:6e:78:1f:
70:c0:87:19:81:b8:0f:0b:f8:10:2f:ef:47:27:55:
84:78:29:c7:1b:dd:29:f0:d0:49:ed:20:b6:eb:22:
bf:a0:b3:b1:14:8e:7d:fd:62:27:c1:8a:29:84:78:
21:52:3d:af:d0:a9:8c:94:d8:1a:c9:22:1a:bb:2c:
cf:cc:2d:0c:97:81:16:64:77:80:ad:8f:ed:fe:cc:
ca:fb:45:91:d4:76:2a:af:b8:d5:f2:a1:b2:f8:e9:
79:0b:53:c4:a1:ce:80:c9:b9:6a:f9:16:7e:4b:1a:
c2:89:3b:68:9e:71:87:f4:74:9c:52:83:6c:7d:c4:
ac:d4:79:31:f7:7d:a5:84:9e:5b:bb:1f:6b:8f:4b:
a4:55:2b:27:92:e3:4f:05:ed:99:88:a0:e3:3e:3f:
36:c5:ff:82:45:05:f6:9b:b4:9c:9a:13:37:bc:30:
c9:8c:08:ae:c7:35:bf:22:75:6b:6a:06:07:47:a6:
06:5b:8b:68:6e:d4:3d:8f:29:f5:d7:81:db:3f:36:
71:ee:59:b8:bc:92:e8:d4:d9:94:7d:c9:c5:a6:3c:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:60:AD:92:B6:EC:AA:DA:D2:FF:FA:68:9A:76:91:B1:0D:E2:92
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/V4xgrZK27Kra0v_6aJp2kbEN4pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
185.36.0.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c4:48:2e:85:55:bf:3c:e3:62:0a:1f:3c:d0:80:8c:a5:b6:
3f:db:ef:b9:28:75:3e:df:a1:b5:47:19:50:0f:5a:a0:da:4b:
be:7a:14:88:31:cd:29:72:4a:96:3e:24:18:0a:df:99:d0:5a:
1f:dd:be:86:61:1d:04:99:3b:97:7f:94:15:83:65:5f:4b:34:
70:15:c2:5f:c6:a3:0d:b1:c5:31:a6:b5:37:6e:36:d1:0d:03:
02:37:61:6b:b7:77:77:33:8b:f3:5c:cf:7f:29:6b:7c:d7:39:
7a:ba:28:8b:fc:f8:71:e5:bd:10:01:6d:c9:c9:7b:23:15:8a:
b8:c3:3b:53:36:7c:46:89:63:8e:3a:b1:9a:da:01:cb:b7:7b:
a7:5a:92:be:9a:1c:3c:59:fe:d3:f8:aa:22:e0:9d:31:d5:e4:
90:f3:d0:82:3a:1b:ec:64:7d:be:4d:7e:a8:e4:0b:26:4a:81:
63:c0:c3:b7:02:d7:5d:97:85:8c:e0:94:b8:06:0b:ce:72:8a:
d7:78:21:fe:87:30:68:ad:ff:20:52:42:8d:12:3a:fd:b0:f8:
8d:a6:86:07:be:0b:a2:d0:e5:ee:0e:91:60:26:00:7f:f5:72:
2a:e0:6c:db:94:b8:ee:e5:19:12:ab:88:f1:9a:93:ab:68:6c:
7b:64:6d:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzetXUwOxf7yKiKExsOfMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTAyMTcxNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzhjNjBhZDkyYjZlY2FhZGFkMmZmZmE2ODlhNzY5MWIxMGRlMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd8VuBxZHMzNbiQJx+iAFo9EdR96
CQ9k2eOwwsrB/WbnIuUwV+4V8jxueB9wwIcZgbgPC/gQL+9HJ1WEeCnHG90p8NBJ
7SC26yK/oLOxFI59/WInwYophHghUj2v0KmMlNgaySIauyzPzC0Ml4EWZHeArY/t
/szK+0WR1HYqr7jV8qGy+Ol5C1PEoc6Ayblq+RZ+SxrCiTtonnGH9HScUoNsfcSs
1Hkx932lhJ5bux9rj0ukVSsnkuNPBe2ZiKDjPj82xf+CRQX2m7ScmhM3vDDJjAiu
xzW/InVragYHR6YGW4tobtQ9jyn114HbPzZx7lm4vJLo1NmUfcnFpjxbTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFeMYK2Stuyq2tL/+miadpGxDeKSMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvVjR4Z3JaSzI3S3JhMHZfNmFKcDJrYkVONHBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLV04AwQC
uSQAMA0GCSqGSIb3DQEBCwUAA4IBAQAWxEguhVW/PONiCh880ICMpbY/2++5KHU+
36G1RxlQD1qg2ku+ehSIMc0pckqWPiQYCt+Z0Fof3b6GYR0EmTuXf5QVg2VfSzRw
FcJfxqMNscUxprU3bjbRDQMCN2Frt3d3M4vzXM9/KWt81zl6uiiL/Phx5b0QAW3J
yXsjFYq4wztTNnxGiWOOOrGa2gHLt3unWpK+mhw8Wf7T+Koi4J0x1eSQ89CCOhvs
ZH2+TX6o5AsmSoFjwMO3Atddl4WM4JS4BgvOcorXeCH+hzBorf8gUkKNEjr9sPiN
poYHvgui0OXuDpFgJgB/9XIq4GzblLju5RkSq4jxmpOraGx7ZG1n
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org