Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-RKnjo_scIK_6kopnUWARJ4Dm30.roa
File: 1-RKnjo_scIK_6kopnUWARJ4Dm30.roa (raw, json)
Hash identifier: 12sJC7CktI0DPiDhv9zu6/8kF4JRHk8xgfdGgcDdNDg=
Subject key identifier: F9:12:A7:8E:8F:EC:70:82:BF:EA:4A:29:9D:45:80:44:9E:03:9B:7D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E6263E77AEB18343466FD38FA60C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-RKnjo_scIK_6kopnUWARJ4Dm30.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64464
IP address blocks: 185.72.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e6:26:3e:77:ae:b1:83:43:46:6f:d3:8f:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f912a78e8fec7082bfea4a299d4580449e039b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:d9:41:e6:6d:fc:b2:62:5f:2f:53:3b:9c:
c7:c5:2d:11:86:65:a4:97:df:72:e6:e3:29:18:52:
5b:e7:a3:26:e0:2b:4c:c7:3b:13:9c:6c:5f:0f:94:
bb:01:19:1c:f9:e5:4d:bd:a8:2f:40:a5:1f:df:e3:
1b:a0:5b:7b:5a:a6:fc:70:9e:f2:5e:5f:4e:2e:92:
f0:de:fb:1c:5b:92:6a:78:ab:24:db:1a:a0:c6:ab:
91:d0:93:20:7b:d7:e4:5a:59:eb:8a:a8:c2:a3:36:
1c:09:99:b7:47:95:be:99:0d:81:e2:bb:7d:18:ec:
9b:43:58:9d:d3:a5:fb:84:77:d2:0a:32:55:e4:31:
88:63:c1:a0:54:e7:9d:c0:14:f4:11:e8:24:9e:c3:
53:c7:d0:27:5d:1b:6f:d7:db:11:ff:86:99:e2:ad:
c4:6e:80:ad:a9:7f:6a:5c:23:a1:83:0e:0e:ae:d8:
6e:61:f3:2e:97:94:92:bd:98:b8:06:c0:bd:ff:75:
8f:a1:95:d6:63:61:48:ad:1e:69:4c:59:bb:fc:8f:
59:4d:3c:e1:7e:f9:19:cc:9a:1b:f1:d7:37:fc:da:
46:7c:31:bb:a2:2a:a9:54:92:1c:ad:d0:ec:40:49:
82:d5:e6:cf:80:62:70:4a:4b:e2:d8:6c:bc:81:d2:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:A7:8E:8F:EC:70:82:BF:EA:4A:29:9D:45:80:44:9E:03:9B:7D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-RKnjo_scIK_6kopnUWARJ4Dm30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.59.0/24
Signature Algorithm: sha256WithRSAEncryption
70:60:87:63:ea:63:ae:ee:49:b5:d2:12:6f:97:ab:b0:56:14:
14:77:64:e3:5c:69:f8:97:04:f1:c0:56:3d:a0:f0:02:37:3c:
80:03:d3:e6:a2:31:c6:9a:fa:e3:4b:34:b1:bb:88:60:8f:bd:
6e:c8:8d:7e:8c:7d:af:0d:4e:f5:99:39:34:7b:11:88:b7:48:
84:b8:db:de:99:ab:14:c0:e3:cc:ed:7c:c6:c7:49:79:40:9b:
99:f8:a6:60:58:2b:d7:02:ca:3b:5c:79:8d:4c:be:f6:94:1e:
f1:7e:60:05:5b:0c:3e:11:ab:fa:61:0c:d6:f1:a0:61:3a:cd:
e5:f7:91:2e:1a:89:55:d1:e5:a3:ce:02:b7:27:76:a7:52:03:
75:76:fa:2c:55:99:8a:36:60:60:82:2b:a9:dc:3c:d4:ab:4d:
6f:a7:e9:6b:a6:07:d9:6e:65:9f:d6:ca:9b:65:db:31:ba:a8:
a5:b0:e0:63:8f:b9:e2:ac:ed:b4:c9:0a:6f:97:21:82:cc:86:
eb:c7:bd:50:bf:32:b4:f6:9b:cd:1f:97:6e:93:c3:45:3b:04:
fe:62:30:fb:c1:52:4a:ea:38:9b:8c:85:8a:1b:b6:e7:c3:6f:
e4:6d:41:7a:58:27:f2:93:44:5b:dc:6d:17:61:53:66:80:05:
dc:37:66:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyRuYmPneusYNDRm/Tj6YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTEyYTc4ZThmZWM3MDgyYmZlYTRhMjk5ZDQ1ODA0NDllMDM5YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFXZQeZt/LJiXy9TO5zHxS0RhmWk
l99y5uMpGFJb56Mm4CtMxzsTnGxfD5S7ARkc+eVNvagvQKUf3+MboFt7Wqb8cJ7y
Xl9OLpLw3vscW5JqeKsk2xqgxquR0JMge9fkWlnriqjCozYcCZm3R5W+mQ2B4rt9
GOybQ1id06X7hHfSCjJV5DGIY8GgVOedwBT0EegknsNTx9AnXRtv19sR/4aZ4q3E
boCtqX9qXCOhgw4OrthuYfMul5SSvZi4BsC9/3WPoZXWY2FIrR5pTFm7/I9ZTTzh
fvkZzJob8dc3/NpGfDG7oiqpVJIcrdDsQEmC1ebPgGJwSkvi2Gy8gdKtDQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkSp46P7HCCv+pKKZ1FgESeA5t9MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvMS1SS25qb19zY0lLXzZrb3BuVVdBUko0RG0zMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0
OS8xL19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlIOzAN
BgkqhkiG9w0BAQsFAAOCAQEAcGCHY+pjru5JtdISb5ersFYUFHdk41xp+JcE8cBW
PaDwAjc8gAPT5qIxxpr640s0sbuIYI+9bsiNfox9rw1O9Zk5NHsRiLdIhLjb3pmr
FMDjzO18xsdJeUCbmfimYFgr1wLKO1x5jUy+9pQe8X5gBVsMPhGr+mEM1vGgYTrN
5feRLhqJVdHlo84Ctyd2p1IDdXb6LFWZijZgYIIrqdw81KtNb6fpa6YH2W5ln9bK
m2XbMbqopbDgY4+54qzttMkKb5chgsyG68e9UL8ytPabzR+XbpPDRTsE/mIw+8FS
Suo4m4yFihu258Nv5G1Belgn8pNEW9xtF2FTZoAF3DdmxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org