Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/k3COobjt4sWQBrmuOrrdV7UhyOo.roa
File: k3COobjt4sWQBrmuOrrdV7UhyOo.roa (raw, json)
Hash identifier: eaBMT1ucld1jh/VDV3mmnvnwhgE7sN0e1NputfgYGx4=
Subject key identifier: 93:70:8E:A1:B8:ED:E2:C5:90:06:B9:AE:3A:BA:DD:57:B5:21:C8:EA
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01874BCFFC9EB9CF5D7D8BF3E2B76CE33810
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/k3COobjt4sWQBrmuOrrdV7UhyOo.roa
Signing time: Tue 04 Apr 2023 10:28:54 +0000
ROA not before: Tue 04 Apr 2023 10:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.191.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 20:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:cf:fc:9e:b9:cf:5d:7d:8b:f3:e2:b7:6c:e3:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Apr 4 10:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93708ea1b8ede2c59006b9ae3abadd57b521c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:3c:16:75:db:73:8b:d7:59:21:5b:30:88:
01:e5:bf:0b:16:ca:ba:8d:18:8d:d6:69:f6:fc:e8:
0b:51:46:55:21:ab:97:9a:cd:0f:74:f6:5a:82:14:
7d:f0:e7:0e:77:5e:31:c5:05:1d:d9:e1:fe:c6:ef:
3f:c1:51:58:32:0c:d2:93:69:e7:80:fd:4a:b9:bb:
ae:9f:a0:e7:c1:f2:60:6d:a5:ca:fe:03:0c:be:e7:
c1:c9:7f:0a:59:0b:47:7b:51:a6:f5:34:2b:e1:89:
4a:60:17:02:af:c5:a3:dc:ce:1d:80:df:3b:c4:40:
d6:67:5a:4e:63:cf:d4:83:d6:72:4d:b0:f6:85:67:
3e:d3:03:86:4e:8d:14:fd:e9:b6:a7:88:93:49:e4:
b8:99:b7:b5:80:b1:4d:33:bd:89:0b:48:7d:e8:f2:
f3:e0:c9:ec:dc:f7:25:8e:69:b5:5a:b8:c4:51:73:
bb:b8:80:eb:44:1c:5a:fa:c7:0b:e1:6e:67:58:53:
d4:2e:c4:8a:03:8a:a7:e9:f5:ef:e9:2c:af:4b:79:
cc:c9:9e:62:8d:eb:48:77:3e:e5:c8:73:6a:0b:6a:
dd:ba:ba:6b:c7:4a:b3:5b:52:d3:4b:f7:96:40:93:
00:c7:e8:a3:f9:23:3c:4f:3e:96:9b:ef:f4:d6:7b:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:8E:A1:B8:ED:E2:C5:90:06:B9:AE:3A:BA:DD:57:B5:21:C8:EA
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/k3COobjt4sWQBrmuOrrdV7UhyOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:35:f0:71:12:17:4a:c9:7f:5d:2b:b7:dc:af:2f:15:dd:83:
b5:26:12:f0:8e:04:20:53:89:f9:b9:9e:28:c5:bf:11:e0:8f:
b9:2c:91:50:7f:14:5d:f1:c2:47:b5:3b:35:3c:4e:c2:3c:3d:
cd:a2:f8:d5:5e:0e:50:c2:9c:7a:c9:f1:d6:bb:db:59:00:16:
8d:a4:79:1e:a8:29:7e:24:88:34:5f:71:56:f6:67:36:09:14:
e2:7c:b0:2e:29:2f:9c:71:dd:c5:84:b3:55:1c:67:cb:23:ad:
c4:a1:ef:e9:2e:c3:1b:58:a1:26:20:47:14:fe:94:af:c3:43:
77:69:f1:18:dd:04:96:ae:45:f8:8b:3b:cb:15:33:fa:f1:e2:
e8:dd:0c:25:27:e1:dd:2d:d0:f5:17:68:07:fd:d2:90:3e:77:
37:20:f9:e3:e8:ff:5c:a1:37:4a:f0:7e:32:f5:be:57:97:6a:
bf:6f:78:35:2c:f9:58:e0:ec:7d:27:cc:42:d2:23:7e:22:b0:
5f:65:85:4a:25:1b:dc:4e:82:a3:8f:27:95:22:3f:dd:32:a1:
07:b3:8f:09:a9:d1:92:fe:2b:83:95:97:57:bb:4e:a6:23:5c:
8b:13:e6:16:29:67:7d:16:9b:37:fa:1d:9d:9a:13:65:f2:10:
e4:1f:4b:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdLz/yeuc9dfYvz4rds4zgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjMwNDA0MTAyODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzcwOGVhMWI4ZWRlMmM1OTAwNmI5YWUzYWJhZGQ1N2I1MjFjOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx48FnXbc4vXWSFbMIgB5b8LFsq6
jRiN1mn2/OgLUUZVIauXms0PdPZaghR98OcOd14xxQUd2eH+xu8/wVFYMgzSk2nn
gP1Kubuun6DnwfJgbaXK/gMMvufByX8KWQtHe1Gm9TQr4YlKYBcCr8Wj3M4dgN87
xEDWZ1pOY8/Ug9ZyTbD2hWc+0wOGTo0U/em2p4iTSeS4mbe1gLFNM72JC0h96PLz
4Mns3Pcljmm1WrjEUXO7uIDrRBxa+scL4W5nWFPULsSKA4qn6fXv6SyvS3nMyZ5i
jetIdz7lyHNqC2rdurprx0qzW1LTS/eWQJMAx+ij+SM8Tz6Wm+/01nvplwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNwjqG47eLFkAa5rjq63Ve1IcjqMB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvazNDT29ianQ0c1dRQnJtdU9ycmRWN1VoeU9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+RMA0G
CSqGSIb3DQEBCwUAA4IBAQCoNfBxEhdKyX9dK7fcry8V3YO1JhLwjgQgU4n5uZ4o
xb8R4I+5LJFQfxRd8cJHtTs1PE7CPD3NovjVXg5Qwpx6yfHWu9tZABaNpHkeqCl+
JIg0X3FW9mc2CRTifLAuKS+ccd3FhLNVHGfLI63Eoe/pLsMbWKEmIEcU/pSvw0N3
afEY3QSWrkX4izvLFTP68eLo3QwlJ+HdLdD1F2gH/dKQPnc3IPnj6P9coTdK8H4y
9b5Xl2q/b3g1LPlY4Ox9J8xC0iN+IrBfZYVKJRvcToKjjyeVIj/dMqEHs48JqdGS
/iuDlZdXu06mI1yLE+YWKWd9Fps3+h2dmhNl8hDkH0vd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:09 2024 by rpki-client on console-fra.rpki-client.org