Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/c_CmEaW3Uo4xvTO-9sDojw_5yos.roa
File: c_CmEaW3Uo4xvTO-9sDojw_5yos.roa (raw, json)
Hash identifier: 8P3ONeoGwhOMt9F2E99LdauFlHAehyCL75mKuWOaN54=
Subject key identifier: 73:F0:A6:11:A5:B7:52:8E:31:BD:33:BE:F6:C0:E8:8F:0F:F9:CA:8B
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 01856C4A3B3978058472DCC71A9FE0ECC3D6
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/c_CmEaW3Uo4xvTO-9sDojw_5yos.roa
Signing time: Sun 01 Jan 2023 07:44:42 +0000
ROA not before: Sun 01 Jan 2023 07:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
2a0f:aac0:3::/48 maxlen: 48
2a0f:aac0:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:3b:39:78:05:84:72:dc:c7:1a:9f:e0:ec:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 07:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f0a611a5b7528e31bd33bef6c0e88f0ff9ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:3d:8c:6a:dd:48:7a:c8:dc:24:b8:52:3b:
b4:f8:ea:56:58:b8:8c:2e:ae:42:f4:43:b8:c9:f6:
c1:13:45:27:b2:e8:24:e6:39:cd:8b:9f:c2:66:2b:
92:13:e6:05:5e:99:ce:dd:f1:77:42:66:9e:c3:aa:
a4:68:f7:59:d5:f6:4f:48:99:de:aa:82:34:ea:ed:
71:3f:ae:8e:d1:a9:00:6a:a1:29:24:68:06:fa:4a:
c6:e1:46:90:ae:ee:15:6f:90:d6:6a:0e:06:c6:f9:
7b:2c:6e:39:4b:22:64:1b:2c:be:2a:e1:41:38:2d:
ca:9c:dc:3a:1a:93:1e:60:9e:07:97:98:c5:11:b5:
57:18:72:a4:d3:ea:99:fd:57:9a:a7:cd:03:63:0b:
76:9d:09:b2:bd:b4:11:cc:57:37:8b:ea:7c:ad:38:
a4:31:43:80:c3:44:5d:61:ed:43:dd:8e:ff:f1:94:
66:f6:56:47:b3:24:d9:2a:2a:e1:b6:dc:75:fe:1a:
76:fc:6a:a4:e5:5c:cb:69:5b:7a:4f:f8:eb:c4:b2:
f8:5c:cd:01:b9:54:19:d0:f1:c2:c5:ca:c8:e7:ee:
4d:eb:7b:07:85:45:d0:6f:6c:af:c2:fa:5b:16:fc:
d8:0c:4c:13:4f:e9:74:af:f7:50:ff:ff:5f:5f:df:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:A6:11:A5:B7:52:8E:31:BD:33:BE:F6:C0:E8:8F:0F:F9:CA:8B
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/c_CmEaW3Uo4xvTO-9sDojw_5yos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.108.0/23
IPv6:
2a0f:aac0:3::-2a0f:aac0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:09:32:f4:09:66:80:fd:35:85:76:69:00:29:be:a8:d9:24:
a7:b5:22:31:2b:a3:48:c6:47:d8:7b:25:17:87:91:34:96:41:
03:f5:e0:c0:5e:07:a5:c2:28:6e:07:2e:9e:f1:9b:e4:3d:0d:
b7:41:3d:25:61:5c:b0:27:68:92:48:f2:da:68:ed:14:05:79:
b2:24:62:e7:f5:7f:11:99:48:00:b9:f1:0a:11:e4:86:71:5d:
5c:7b:24:53:11:25:41:60:76:fd:8f:eb:bd:89:83:f0:6f:2c:
d6:23:48:4a:82:2b:5a:22:b7:c7:16:77:2b:bb:c7:c5:4a:b5:
43:af:12:91:d0:a9:49:e7:8a:d4:f8:31:3a:cb:f2:6c:91:68:
6b:c4:04:85:f0:22:f3:eb:09:be:d0:70:50:b3:f0:6d:6e:77:
90:29:f7:dd:0f:30:a1:4a:fe:6e:0f:c1:ed:8e:b1:a1:74:cb:
78:03:97:3f:74:4e:a8:e3:be:da:f9:8a:3d:f2:11:7f:e7:d5:
df:d2:9c:bb:5e:a7:d1:1f:28:7b:f2:37:de:22:2f:9e:21:7f:
dc:e2:22:9c:21:56:1a:20:e1:b5:78:fa:94:62:5c:4f:68:08:
2e:71:c3:06:99:e2:8c:6e:40:de:e1:98:f0:87:bf:d7:fa:3e:
f9:75:d7:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVsSjs5eAWEctzHGp/g7MPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjMwMTAxMDc0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2YwYTYxMWE1Yjc1MjhlMzFiZDMzYmVmNmMwZTg4ZjBmZjljYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPI9jGrdSHrI3CS4Uju0+OpWWLiM
Lq5C9EO4yfbBE0Unsugk5jnNi5/CZiuSE+YFXpnO3fF3Qmaew6qkaPdZ1fZPSJne
qoI06u1xP66O0akAaqEpJGgG+krG4UaQru4Vb5DWag4Gxvl7LG45SyJkGyy+KuFB
OC3KnNw6GpMeYJ4Hl5jFEbVXGHKk0+qZ/Veap80DYwt2nQmyvbQRzFc3i+p8rTik
MUOAw0RdYe1D3Y7/8ZRm9lZHsyTZKirhttx1/hp2/Gqk5VzLaVt6T/jrxLL4XM0B
uVQZ0PHCxcrI5+5N63sHhUXQb2yvwvpbFvzYDEwTT+l0r/dQ//9fX9/eAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHPwphGlt1KOMb0zvvbA6I8P+cqLMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEvY19DbUVhVzNVbzR4dlRPLTlzRG9qd181eW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQBuedsMBoE
AgACMBQwEgMHACoPqsAAAwMHACoPqsAABDANBgkqhkiG9w0BAQsFAAOCAQEAcQky
9AlmgP01hXZpACm+qNkkp7UiMSujSMZH2HslF4eRNJZBA/XgwF4HpcIobgcunvGb
5D0Nt0E9JWFcsCdokkjy2mjtFAV5siRi5/V/EZlIALnxChHkhnFdXHskUxElQWB2
/Y/rvYmD8G8s1iNISoIrWiK3xxZ3K7vHxUq1Q68SkdCpSeeK1PgxOsvybJFoa8QE
hfAi8+sJvtBwULPwbW53kCn33Q8woUr+bg/B7Y6xoXTLeAOXP3ROqOO+2vmKPfIR
f+fV39Kcu16n0R8oe/I33iIvniF/3OIinCFWGiDhtXj6lGJcT2gILnHDBpnijG5A
3uGY8Ie/1/o++XXXtQ==
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:56 2024 by rpki-client on console-ams.rpki-client.org