Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OGB1H6Cn1_Rg1hQ1UWhGExwrL0w.roa
File: OGB1H6Cn1_Rg1hQ1UWhGExwrL0w.roa (raw, json)
Hash identifier: imzme/tTZP1joEKkp0PjYp0Lx120dxlUgPHfL7Ddwic=
Subject key identifier: 38:60:75:1F:A0:A7:D7:F4:60:D6:14:35:51:68:46:13:1C:2B:2F:4C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F17E3AC90B0AFBBB0D01FB6668DC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OGB1H6Cn1_Rg1hQ1UWhGExwrL0w.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209142
IP address blocks: 185.72.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f1:7e:3a:c9:0b:0a:fb:bb:0d:01:fb:66:68:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3860751fa0a7d7f460d61435516846131c2b2f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:09:42:ba:16:7b:a2:6a:0d:31:a7:9e:c0:
70:22:72:3e:bb:7e:28:1a:a5:ec:f7:f4:40:0c:6f:
50:1c:ed:b1:5f:77:77:45:f3:52:00:a1:9f:06:1f:
df:52:bd:51:28:4d:fa:60:c5:65:bc:ef:ff:14:89:
cc:8e:ff:59:42:15:af:61:5a:f8:c8:cb:76:e2:17:
1a:f1:32:ad:b6:1a:95:40:5d:1b:8b:4d:f1:16:98:
a7:aa:48:e8:a5:a9:d4:c1:ff:b0:54:4c:28:97:34:
02:eb:65:4c:48:0a:46:b0:51:c7:ac:7a:95:fb:48:
e6:ce:8a:ca:39:07:18:ba:aa:bf:65:a5:1e:d3:29:
e0:c1:7a:bc:00:a7:20:9a:d9:be:18:33:2c:9b:5f:
32:cc:51:73:38:f5:91:9f:83:7a:00:10:b6:c5:33:
38:52:b3:e4:6a:1e:d7:79:e8:94:5b:59:5c:20:2d:
be:9b:cc:e5:42:19:74:5b:c9:8b:7e:74:e3:e0:a3:
08:8b:e6:1a:90:e4:5c:7a:ff:5e:0b:6f:97:05:50:
d7:02:e3:52:88:94:82:6f:55:72:43:0e:cd:4e:ca:
74:73:b8:29:2d:94:01:3c:4a:1f:a7:07:d2:3b:cc:
0a:d9:fb:d3:61:1e:1e:8d:a0:3f:38:7e:6c:bf:bf:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:75:1F:A0:A7:D7:F4:60:D6:14:35:51:68:46:13:1C:2B:2F:4C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OGB1H6Cn1_Rg1hQ1UWhGExwrL0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.57.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f1:d6:41:bb:01:37:0e:64:00:b7:0e:cd:aa:31:9e:9d:c9:
07:12:53:7f:0b:ce:1f:fb:1e:44:83:01:0a:16:91:8a:c9:16:
b3:17:90:a5:a0:5b:b5:d8:35:fe:90:66:29:81:97:a7:f0:90:
dd:27:ce:af:e4:71:22:70:ce:d5:c8:79:26:3f:4d:86:48:7b:
69:ac:5c:15:56:a3:66:01:fe:c0:78:c6:40:4f:31:59:bf:53:
c5:e6:c0:de:d2:0e:73:c5:be:28:b1:20:21:cd:58:46:f2:ee:
1c:02:0b:34:69:97:eb:c8:77:7e:38:eb:f7:d9:a7:41:0f:5a:
20:bd:e7:89:6c:23:f3:51:ab:38:33:f5:d9:d3:0b:d2:92:a3:
37:2c:95:42:04:99:1a:5f:83:52:b1:2b:c1:55:59:26:b7:a8:
63:4c:4f:17:67:61:fb:df:64:db:9f:69:3e:dc:d3:58:ec:b7:
47:1d:3a:a9:cd:63:b9:ec:18:40:01:69:e8:f9:2c:fd:09:bb:
15:30:30:fb:d4:75:74:5a:1b:7d:f5:5e:5a:e5:64:ef:6d:c5:
3d:4e:e2:3b:82:f8:40:99:9c:ab:ee:a9:f5:99:0a:7c:88:2b:
7d:5d:f5:06:6b:28:39:3a:b2:2b:2b:18:95:08:81:46:c5:a9:
00:02:72:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRvF+OskLCvu7DQH7ZmjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYwNzUxZmEwYTdkN2Y0NjBkNjE0MzU1MTY4NDYxMzFjMmIyZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIQJQroWe6JqDTGnnsBwInI+u34o
GqXs9/RADG9QHO2xX3d3RfNSAKGfBh/fUr1RKE36YMVlvO//FInMjv9ZQhWvYVr4
yMt24hca8TKtthqVQF0bi03xFpinqkjopanUwf+wVEwolzQC62VMSApGsFHHrHqV
+0jmzorKOQcYuqq/ZaUe0yngwXq8AKcgmtm+GDMsm18yzFFzOPWRn4N6ABC2xTM4
UrPkah7XeeiUW1lcIC2+m8zlQhl0W8mLfnTj4KMIi+YakORcev9eC2+XBVDXAuNS
iJSCb1VyQw7NTsp0c7gpLZQBPEofpwfSO8wK2fvTYR4ejaA/OH5sv790xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhgdR+gp9f0YNYUNVFoRhMcKy9MMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvT0dCMUg2Q24xX1JnMWhRMVVXaEdFeHdyTDB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUg5MA0G
CSqGSIb3DQEBCwUAA4IBAQBV8dZBuwE3DmQAtw7NqjGenckHElN/C84f+x5EgwEK
FpGKyRazF5CloFu12DX+kGYpgZen8JDdJ86v5HEicM7VyHkmP02GSHtprFwVVqNm
Af7AeMZATzFZv1PF5sDe0g5zxb4osSAhzVhG8u4cAgs0aZfryHd+OOv32adBD1og
veeJbCPzUas4M/XZ0wvSkqM3LJVCBJkaX4NSsSvBVVkmt6hjTE8XZ2H732Tbn2k+
3NNY7LdHHTqpzWO57BhAAWno+Sz9CbsVMDD71HV0Wht99V5a5WTvbcU9TuI7gvhA
mZyr7qn1mQp8iCt9XfUGayg5OrIrKxiVCIFGxakAAnKT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org