Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/f_dD2NDDa2ieqjSSewIP88BOlIo.roa
File: f_dD2NDDa2ieqjSSewIP88BOlIo.roa (raw, json)
Hash identifier: qH1CE6FK/oFSpyU5my3WHfEnG7zfFJcfMsl7SjPc8lE=
Subject key identifier: 7F:F7:43:D8:D0:C3:6B:68:9E:AA:34:92:7B:02:0F:F3:C0:4E:94:8A
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 01889528FEF2659ECA74E8C4DE26F7CDE7C5
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/f_dD2NDDa2ieqjSSewIP88BOlIo.roa
Signing time: Wed 07 Jun 2023 09:21:11 +0000
ROA not before: Wed 07 Jun 2023 09:21:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 209.127.220.0/24 maxlen: 24
185.44.177.0/24 maxlen: 24
185.44.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:28:fe:f2:65:9e:ca:74:e8:c4:de:26:f7:cd:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jun 7 09:21:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff743d8d0c36b689eaa34927b020ff3c04e948a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:29:b0:e7:20:ba:e0:3a:f5:a5:62:bd:d2:
8e:fc:7b:f0:dd:d3:90:e8:97:df:25:b2:a1:0a:01:
ae:5b:8e:7c:a2:4d:c1:4d:e5:96:f6:9c:3e:56:24:
79:b7:75:d8:54:b2:f8:36:6e:88:4f:86:78:c2:72:
aa:08:5f:57:a4:80:24:b2:a0:1b:e9:79:00:59:e8:
2d:1a:b0:75:f2:6e:c7:67:d5:7e:60:98:c5:6b:04:
c0:d8:92:0c:e7:5e:f9:1e:6b:67:5b:7d:36:fc:04:
ad:0f:17:dc:58:67:7e:8d:b3:ac:08:b6:3e:a2:55:
8f:b9:ea:5f:be:1c:6d:6d:6b:67:75:f1:b2:bb:58:
01:3b:2a:b8:6f:1f:b4:ae:a0:c4:d0:69:91:a8:38:
ae:81:ce:0f:bd:07:83:91:f5:13:de:84:8d:97:25:
1f:08:e1:2c:dc:3e:1a:8b:e2:ff:7a:21:f8:b4:9a:
25:d9:21:c0:12:57:26:f1:ab:37:57:b4:df:c0:34:
35:d8:30:fc:c6:91:af:df:5c:82:8b:22:8a:66:17:
f1:b6:34:aa:22:b3:85:b8:f1:c9:59:77:71:1b:82:
6b:7a:fd:4a:bc:18:0d:73:dc:24:a2:67:b5:7a:2e:
09:49:06:c3:7b:6d:8d:56:5e:e5:fd:69:95:e0:da:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:43:D8:D0:C3:6B:68:9E:AA:34:92:7B:02:0F:F3:C0:4E:94:8A
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/f_dD2NDDa2ieqjSSewIP88BOlIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/23
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d8:a8:61:cb:4f:1d:dd:d0:f4:35:97:68:ab:39:08:cf:fa:
d7:db:9c:39:13:09:f4:e6:ee:04:49:10:4a:0b:7d:37:8c:83:
a2:40:63:cb:d8:d9:33:8e:f4:7f:27:66:80:fc:3b:b9:c1:a1:
1b:57:54:7f:e7:bb:a9:e5:61:5a:6c:5f:06:cd:6d:ab:cc:17:
ac:ec:f4:2f:de:11:0f:d1:ac:17:b7:67:c4:8b:c9:4f:72:6c:
45:2e:f0:d3:1d:60:74:3f:3b:02:44:6e:5f:4b:6e:20:32:18:
45:f2:b1:21:02:b5:b0:44:18:94:0c:00:d0:44:12:06:6f:d0:
8c:48:fb:7b:b6:a5:21:e5:66:20:1b:cb:be:c5:88:fe:67:b9:
62:9d:dc:9a:7b:6f:c4:33:b2:99:89:7a:65:39:3b:eb:d9:a0:
af:02:8d:79:7e:32:ce:97:99:12:a6:54:c8:47:e0:51:47:05:
78:16:04:cc:b6:2a:96:5a:52:7b:0f:53:09:4e:a2:78:a2:f8:
43:11:bc:59:2d:22:a2:e1:be:07:07:a2:eb:01:23:ca:a9:db:
f7:7a:b2:09:41:46:c9:78:b5:22:97:7f:60:1e:89:ee:9c:d9:
43:5b:c4:9b:33:bf:9a:e8:73:bc:5e:ec:53:ed:5f:a7:75:50:
40:51:39:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiVKP7yZZ7KdOjE3ib3zefFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjMwNjA3MDkyMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmY3NDNkOGQwYzM2YjY4OWVhYTM0OTI3YjAyMGZmM2MwNGU5NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfwpsOcguuA69aVivdKO/Hvw3dOQ
6JffJbKhCgGuW458ok3BTeWW9pw+ViR5t3XYVLL4Nm6IT4Z4wnKqCF9XpIAksqAb
6XkAWegtGrB18m7HZ9V+YJjFawTA2JIM5175HmtnW302/AStDxfcWGd+jbOsCLY+
olWPuepfvhxtbWtndfGyu1gBOyq4bx+0rqDE0GmRqDiugc4PvQeDkfUT3oSNlyUf
COEs3D4ai+L/eiH4tJol2SHAElcm8as3V7TfwDQ12DD8xpGv31yCiyKKZhfxtjSq
IrOFuPHJWXdxG4Jrev1KvBgNc9wkome1ei4JSQbDe22NVl7l/WmV4NqwrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH/3Q9jQw2tonqo0knsCD/PATpSKMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvZl9kRDJORERhMmllcWpTU2V3SVA4OEJPbElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuSywAwQA
0X/cMA0GCSqGSIb3DQEBCwUAA4IBAQC22Khhy08d3dD0NZdoqzkIz/rX25w5Ewn0
5u4ESRBKC303jIOiQGPL2NkzjvR/J2aA/Du5waEbV1R/57up5WFabF8GzW2rzBes
7PQv3hEP0awXt2fEi8lPcmxFLvDTHWB0PzsCRG5fS24gMhhF8rEhArWwRBiUDADQ
RBIGb9CMSPt7tqUh5WYgG8u+xYj+Z7lindyae2/EM7KZiXplOTvr2aCvAo15fjLO
l5kSplTIR+BRRwV4FgTMtiqWWlJ7D1MJTqJ4ovhDEbxZLSKi4b4HB6LrASPKqdv3
erIJQUbJeLUil39gHonunNlDW8SbM7+a6HO8XuxT7V+ndVBAUTmG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org