Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4gM8xmxh03Zsz3ErPikVpzV_DrE.roa
File: 4gM8xmxh03Zsz3ErPikVpzV_DrE.roa (raw, json)
Hash identifier: chWvoCPzfOIMbOc3zTDAT0vPnpmQyj4fLaarfb3unxg=
Subject key identifier: E2:03:3C:C6:6C:61:D3:76:6C:CF:71:2B:3E:29:15:A7:35:7F:0E:B1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01861C6162A3B830F503D58B493B9C5E6C7E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4gM8xmxh03Zsz3ErPikVpzV_DrE.roa
Signing time: Sat 04 Feb 2023 12:23:09 +0000
ROA not before: Sat 04 Feb 2023 12:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:61:62:a3:b8:30:f5:03:d5:8b:49:3b:9c:5e:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 4 12:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2033cc66c61d3766ccf712b3e2915a7357f0eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:77:f2:ad:63:37:a5:40:aa:b5:7c:65:59:
c1:15:b1:fb:17:89:53:64:2a:24:3f:fa:98:c9:12:
2a:6b:32:58:6c:3f:10:cb:48:b6:1e:34:78:d2:6e:
67:dc:93:ce:1e:18:54:d6:3e:94:18:8b:0c:86:96:
21:16:1d:bc:93:41:26:3a:b0:d2:fc:e2:79:cf:1f:
8b:e1:56:b7:a1:f8:0e:ad:14:e0:f5:e5:1b:56:f3:
53:be:48:b9:f0:a0:0e:4a:79:a5:13:6c:dc:b7:67:
81:23:af:86:11:17:6d:d6:5d:ce:12:aa:93:6c:1b:
47:ff:81:13:b7:f0:c3:54:f3:37:e9:0f:1e:e4:1f:
c7:76:c7:e9:00:be:80:35:16:ee:7e:2e:6b:de:9f:
d3:e4:db:88:f8:4d:9f:d1:9e:73:f8:70:35:4a:de:
d9:88:71:fd:1d:d1:83:ad:57:22:a8:7a:9d:f0:45:
33:36:60:61:a0:de:7a:1b:4b:d4:ab:66:0d:a9:f8:
16:3e:32:2b:93:8b:8f:7f:9d:2a:fc:a6:24:34:c0:
e4:f8:2e:88:34:ad:2e:b6:e9:9f:3b:40:d5:e8:bb:
6a:6c:aa:c6:6b:b2:87:16:93:43:1f:aa:af:a6:76:
84:e6:61:be:b6:4b:b8:7b:53:e8:ac:70:ab:96:be:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:3C:C6:6C:61:D3:76:6C:CF:71:2B:3E:29:15:A7:35:7F:0E:B1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4gM8xmxh03Zsz3ErPikVpzV_DrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
71:75:f2:5c:e1:65:72:d5:d9:a6:3f:96:ec:7b:32:ba:32:85:
ff:ce:a9:eb:06:4b:62:68:c9:d6:a1:ed:96:e1:06:3d:16:6d:
1d:93:5b:9e:e4:24:54:ef:ac:b1:97:fe:3d:0c:2c:06:cd:03:
f8:69:05:05:73:c8:d4:95:3f:bf:ce:27:e9:33:c4:b3:b9:f7:
43:be:07:cf:88:fd:37:59:da:ac:02:98:15:16:c4:08:d7:f1:
53:bf:f4:3f:14:f6:ce:21:c6:b5:5e:ab:9f:e4:70:28:2c:5d:
f3:cf:1f:ef:c9:e5:94:8f:0b:17:c7:a4:5a:e1:61:58:77:31:
23:7c:17:ef:bb:16:20:c7:06:ff:7c:d2:fb:b7:f4:32:0d:ad:
5d:a1:e8:19:bc:5b:de:c9:65:d6:19:51:d7:93:a3:89:7b:80:
85:8b:94:e6:45:b3:06:24:d3:78:30:48:02:47:eb:ee:54:6a:
ba:19:25:b7:1f:ff:c6:e6:a1:29:46:86:89:49:9e:32:9d:f2:
f0:43:a2:5a:cc:9b:5d:68:5e:99:8b:c2:20:92:de:bf:41:7c:
aa:d7:b6:2c:81:5e:24:c3:f9:f9:c0:0c:58:ca:7f:5f:9c:34:
79:c5:35:34:76:14:b2:4c:d9:11:91:91:1b:d3:87:6e:ab:cb:
8a:c5:b7:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYcYWKjuDD1A9WLSTucXmx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMjA0MTIyMzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjAzM2NjNjZjNjFkMzc2NmNjZjcxMmIzZTI5MTVhNzM1N2YwZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkB38q1jN6VAqrV8ZVnBFbH7F4lT
ZCokP/qYyRIqazJYbD8Qy0i2HjR40m5n3JPOHhhU1j6UGIsMhpYhFh28k0EmOrDS
/OJ5zx+L4Va3ofgOrRTg9eUbVvNTvki58KAOSnmlE2zct2eBI6+GERdt1l3OEqqT
bBtH/4ETt/DDVPM36Q8e5B/HdsfpAL6ANRbufi5r3p/T5NuI+E2f0Z5z+HA1St7Z
iHH9HdGDrVciqHqd8EUzNmBhoN56G0vUq2YNqfgWPjIrk4uPf50q/KYkNMDk+C6I
NK0utumfO0DV6LtqbKrGa7KHFpNDH6qvpnaE5mG+tku4e1PorHCrlr7U4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIDPMZsYdN2bM9xKz4pFac1fw6xMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvNGdNOHhteGgwM1pzejNFclBpa1ZwelZfRHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuf84MA0G
CSqGSIb3DQEBCwUAA4IBAQBxdfJc4WVy1dmmP5bsezK6MoX/zqnrBktiaMnWoe2W
4QY9Fm0dk1ue5CRU76yxl/49DCwGzQP4aQUFc8jUlT+/zifpM8SzufdDvgfPiP03
WdqsApgVFsQI1/FTv/Q/FPbOIca1Xquf5HAoLF3zzx/vyeWUjwsXx6Ra4WFYdzEj
fBfvuxYgxwb/fNL7t/QyDa1doegZvFveyWXWGVHXk6OJe4CFi5TmRbMGJNN4MEgC
R+vuVGq6GSW3H//G5qEpRoaJSZ4ynfLwQ6JazJtdaF6Zi8Igkt6/QXyq17YsgV4k
w/n5wAxYyn9fnDR5xTU0dhSyTNkRkZEb04duq8uKxbc5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org