Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/4Wceso7xCH_fAfeqxgNhJFWaA-w.roa
File: 4Wceso7xCH_fAfeqxgNhJFWaA-w.roa (raw, json)
Hash identifier: VjT4dC9oBD895Gl+DdrdHVv+GSpY5lDju3TGJNXhfHY=
Subject key identifier: E1:67:1E:B2:8E:F1:08:7F:DF:01:F7:AA:C6:03:61:24:55:9A:03:EC
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 018572035045FBD9526C4AB8D715A4D16EFB
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/4Wceso7xCH_fAfeqxgNhJFWaA-w.roa
Signing time: Mon 02 Jan 2023 10:24:57 +0000
ROA not before: Mon 02 Jan 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203606
IP address blocks: 185.123.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:50:45:fb:d9:52:6c:4a:b8:d7:15:a4:d1:6e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Jan 2 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1671eb28ef1087fdf01f7aac6036124559a03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:63:78:15:4d:f1:6d:f5:75:8b:68:c6:f1:
c3:b0:49:a3:4a:03:45:96:bd:09:94:47:59:3e:8d:
07:de:eb:a2:69:c2:3a:92:0d:8e:66:04:63:70:54:
df:2d:e0:59:32:9e:1b:31:7f:6c:ba:45:8b:64:81:
d7:0b:56:78:6a:c7:e9:21:8a:93:54:cd:60:d3:e6:
87:b7:35:4c:53:1b:27:05:b0:8e:25:f2:5d:72:6a:
89:11:1c:fc:b4:c4:01:e8:15:5a:d7:d2:5c:de:be:
b7:6e:23:80:6c:a6:51:d0:9e:c3:20:c8:76:05:e1:
96:94:de:d0:5b:94:69:ed:a6:c1:43:1c:8d:47:4c:
a6:b3:fe:ba:62:2f:ed:2f:08:6a:13:aa:ec:a4:46:
fd:c7:80:e6:d6:bb:29:d4:b0:c9:bf:e8:db:7b:fe:
66:70:c3:52:6a:6d:ea:96:75:9f:4f:83:50:67:5e:
0a:7c:3a:2b:37:ed:0e:9f:38:0f:d6:ac:ff:35:84:
4d:ce:0c:d0:52:34:28:ec:ef:0d:c3:c4:3e:61:74:
52:52:a3:7b:4c:98:1f:7d:f8:74:86:b2:e6:79:a8:
e3:19:f2:bb:25:94:da:eb:4b:c1:68:83:23:30:f1:
a3:a8:9e:29:fe:e3:bf:06:31:3d:bf:09:37:e3:a3:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:1E:B2:8E:F1:08:7F:DF:01:F7:AA:C6:03:61:24:55:9A:03:EC
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/4Wceso7xCH_fAfeqxgNhJFWaA-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:11:1f:9e:dd:cc:5e:95:6d:f1:98:10:79:98:e6:b6:e1:47:
f6:d6:f0:f2:27:8a:9c:a7:2e:82:34:5d:fa:2e:40:86:2c:ea:
22:f5:b2:d8:f1:a7:9e:71:68:4d:5c:c7:f2:a4:79:48:99:0e:
e7:57:ed:7a:25:9a:6c:02:72:fe:3d:fc:f3:33:f2:52:72:9b:
85:c5:10:0d:b8:20:c8:e0:22:ec:0a:13:96:f6:ed:6e:37:d4:
a6:61:71:a4:34:fd:ce:40:e7:77:6c:24:29:4b:d2:e5:55:2b:
21:b7:71:2a:35:d5:30:3d:d1:0e:91:07:2e:ad:d4:b7:85:0c:
71:0f:4f:c5:8a:09:8a:b3:eb:ea:ac:a0:81:1e:9b:35:f3:c2:
58:63:7a:21:e8:65:89:a2:f5:3f:4f:fc:de:dd:ee:62:b1:7c:
f9:27:cc:b6:0f:61:d0:67:21:d5:06:d2:28:6f:9e:ac:e7:95:
e8:fc:7f:9a:5f:28:33:3a:cd:ae:3b:e7:9a:04:08:41:38:d2:
70:4c:f6:6f:68:9e:5a:d4:52:e3:0e:27:03:d0:93:93:90:d9:
cc:8c:ff:ce:62:3b:4f:8d:3d:0d:c0:cf:de:57:de:1d:f9:98:
04:42:e5:d7:0b:ff:8a:1b:dd:9d:12:b9:cf:3d:00:12:cd:b3:
da:9d:49:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyA1BF+9lSbEq41xWk0W77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZj
MDM3ODEwHhcNMjMwMTAyMTAyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTY3MWViMjhlZjEwODdmZGYwMWY3YWFjNjAzNjEyNDU1OWEwM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3xjeBVN8W31dYtoxvHDsEmjSgNF
lr0JlEdZPo0H3uuiacI6kg2OZgRjcFTfLeBZMp4bMX9sukWLZIHXC1Z4asfpIYqT
VM1g0+aHtzVMUxsnBbCOJfJdcmqJERz8tMQB6BVa19Jc3r63biOAbKZR0J7DIMh2
BeGWlN7QW5Rp7abBQxyNR0yms/66Yi/tLwhqE6rspEb9x4Dm1rsp1LDJv+jbe/5m
cMNSam3qlnWfT4NQZ14KfDorN+0OnzgP1qz/NYRNzgzQUjQo7O8Nw8Q+YXRSUqN7
TJgfffh0hrLmeajjGfK7JZTa60vBaIMjMPGjqJ4p/uO/BjE9vwk346PVmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFnHrKO8Qh/3wH3qsYDYSRVmgPsMB8GA1UdIwQY
MBaAFIaBvaaRB596sjX3nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDkt
ZjQyODUwZjgwY2E0LzEvNFdjZXNvN3hDSF9mQWZlcXhnTmhKRldhQS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0
LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXtoMA0G
CSqGSIb3DQEBCwUAA4IBAQBHER+e3cxelW3xmBB5mOa24Uf21vDyJ4qcpy6CNF36
LkCGLOoi9bLY8aeecWhNXMfypHlImQ7nV+16JZpsAnL+PfzzM/JScpuFxRANuCDI
4CLsChOW9u1uN9SmYXGkNP3OQOd3bCQpS9LlVSsht3EqNdUwPdEOkQcurdS3hQxx
D0/FigmKs+vqrKCBHps188JYY3oh6GWJovU/T/ze3e5isXz5J8y2D2HQZyHVBtIo
b56s55Xo/H+aXygzOs2uO+eaBAhBONJwTPZvaJ5a1FLjDicD0JOTkNnMjP/OYjtP
jT0NwM/eV94d+ZgEQuXXC/+KG92dErnPPQASzbPanUlj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org