Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/i_TctoCQBp3aqCpzM_uXe91Gemg.roa
File: i_TctoCQBp3aqCpzM_uXe91Gemg.roa (raw, json)
Hash identifier: bJwepnbQJaAWjU/WERf3uY5UkDmrEoxSokTq2Sl1APM=
Subject key identifier: 8B:F4:DC:B6:80:90:06:9D:DA:A8:2A:73:33:FB:97:7B:DD:46:7A:68
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 018CE7FB316AF842164FB74FC721E8E2AFBE
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/i_TctoCQBp3aqCpzM_uXe91Gemg.roa
Signing time: Mon 08 Jan 2024 07:30:48 +0000
ROA not before: Mon 08 Jan 2024 07:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61060
IP address blocks: 185.132.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:fb:31:6a:f8:42:16:4f:b7:4f:c7:21:e8:e2:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jan 8 07:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bf4dcb68090069ddaa82a7333fb977bdd467a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:e5:c8:b8:c7:df:cf:15:17:3b:48:2a:b1:
38:88:e2:1f:f3:e7:6d:b4:4a:e4:24:7b:42:91:a8:
f2:6d:08:7c:6b:4e:8d:87:dd:dc:96:d6:5d:3b:6f:
5b:ad:27:c2:2b:d4:88:c6:c3:f0:2b:7d:0b:54:25:
ae:64:0f:5a:3b:f1:b5:16:e7:17:0f:2f:38:32:8e:
cd:8a:a1:dd:04:d6:08:96:ac:22:93:14:f7:c3:17:
f0:a1:e5:9b:9b:00:06:9f:de:50:94:b8:26:d1:82:
7e:2c:8d:70:dd:86:59:0a:cd:00:ae:ee:7e:fa:00:
dc:a3:9a:b2:4b:e1:be:90:59:4a:69:0e:23:4a:41:
b9:15:3a:19:2f:cc:9c:34:8d:3c:a3:cc:c8:ef:2d:
60:9d:92:9c:ac:47:a6:ac:06:1c:09:e0:25:88:8a:
bb:ec:47:c8:09:21:76:aa:1d:75:90:6f:a8:dc:93:
96:57:f8:84:0b:e3:d5:5d:39:60:4c:9d:1e:76:bf:
e4:99:92:8c:94:69:d6:ff:84:bf:45:d6:8d:fd:87:
28:15:4d:ac:f1:88:74:d7:19:87:bd:76:6a:02:cc:
d2:62:0a:c6:af:f0:12:64:6c:49:a2:2e:2c:26:7e:
f3:31:4f:09:8a:91:e7:54:b8:a9:7c:0f:b4:33:58:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:DC:B6:80:90:06:9D:DA:A8:2A:73:33:FB:97:7B:DD:46:7A:68
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/i_TctoCQBp3aqCpzM_uXe91Gemg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:20:1f:59:dc:25:90:5e:32:8c:bb:74:49:c8:49:95:90:53:
65:3f:b5:46:de:a4:93:27:0b:78:f9:f2:0a:cd:4b:d8:1a:db:
24:c8:38:99:8d:3a:f8:b9:dd:14:f8:90:af:1b:ee:1d:eb:89:
8e:08:e5:2a:b1:ce:83:50:d8:bd:c4:3f:34:d1:f9:57:0d:13:
6a:64:14:c9:90:cb:99:e5:2b:9f:17:d2:51:f9:d5:58:22:6b:
1a:ef:35:c1:4e:a6:b3:cb:d4:79:d4:75:8a:70:46:a1:0e:3c:
71:3b:70:ea:33:1a:38:51:3a:c2:7a:1f:8e:88:a0:3e:c6:13:
8c:ec:88:03:4c:48:83:74:cf:7c:f2:d4:66:b2:ad:de:3b:be:
61:28:db:e4:b4:fa:cb:ff:41:ef:87:32:f7:ea:42:75:ea:5d:
e0:f6:76:40:70:05:4c:93:bb:cf:3b:51:9f:59:c1:4b:29:45:
c9:7a:d3:79:76:64:8f:80:9a:34:fa:16:95:2e:7b:e9:f9:c1:
ac:3a:ba:3b:49:84:b6:c1:bd:ed:59:ab:97:0e:64:12:d6:d7:
64:4d:74:9e:2e:bb:8a:77:ec:a7:08:44:11:59:62:95:da:3d:
cf:31:e9:4a:7e:82:c1:cc:5c:8f:8d:b3:f6:2b:5d:da:f5:74:
24:b0:63:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzn+zFq+EIWT7dPxyHo4q++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjQwMTA4MDczMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmY0ZGNiNjgwOTAwNjlkZGFhODJhNzMzM2ZiOTc3YmRkNDY3YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksPlyLjH388VFztIKrE4iOIf8+dt
tErkJHtCkajybQh8a06Nh93cltZdO29brSfCK9SIxsPwK30LVCWuZA9aO/G1FucX
Dy84Mo7NiqHdBNYIlqwikxT3wxfwoeWbmwAGn95QlLgm0YJ+LI1w3YZZCs0Aru5+
+gDco5qyS+G+kFlKaQ4jSkG5FToZL8ycNI08o8zI7y1gnZKcrEemrAYcCeAliIq7
7EfICSF2qh11kG+o3JOWV/iEC+PVXTlgTJ0edr/kmZKMlGnW/4S/RdaN/YcoFU2s
8Yh01xmHvXZqAszSYgrGr/ASZGxJoi4sJn7zMU8JipHnVLipfA+0M1gANwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIv03LaAkAad2qgqczP7l3vdRnpoMB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvaV9UY3RvQ1FCcDNhcUNwek1fdVhlOTFHZW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYTsMA0G
CSqGSIb3DQEBCwUAA4IBAQCNIB9Z3CWQXjKMu3RJyEmVkFNlP7VG3qSTJwt4+fIK
zUvYGtskyDiZjTr4ud0U+JCvG+4d64mOCOUqsc6DUNi9xD800flXDRNqZBTJkMuZ
5SufF9JR+dVYImsa7zXBTqazy9R51HWKcEahDjxxO3DqMxo4UTrCeh+OiKA+xhOM
7IgDTEiDdM988tRmsq3eO75hKNvktPrL/0HvhzL36kJ16l3g9nZAcAVMk7vPO1Gf
WcFLKUXJetN5dmSPgJo0+haVLnvp+cGsOro7SYS2wb3tWauXDmQS1tdkTXSeLruK
d+ynCEQRWWKV2j3PMelKfoLBzFyPjbP2K13a9XQksGMx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org