Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/VXvHpawb_E--yMF68vj0320MxQA.roa
File: VXvHpawb_E--yMF68vj0320MxQA.roa (raw, json)
Hash identifier: e/yVmdiEgmk4Z14mQY69NTK3Iwv3H6OrV44tHIpWjYM=
Subject key identifier: 55:7B:C7:A5:AC:1B:FC:4F:BE:C8:C1:7A:F2:F8:F4:DF:6D:0C:C5:00
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 0186FE5BFDEBD6C1B54A09F36FE9C2F97EE8
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/VXvHpawb_E--yMF68vj0320MxQA.roa
Signing time: Mon 20 Mar 2023 09:31:27 +0000
ROA not before: Mon 20 Mar 2023 09:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 185.186.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:5b:fd:eb:d6:c1:b5:4a:09:f3:6f:e9:c2:f9:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Mar 20 09:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=557bc7a5ac1bfc4fbec8c17af2f8f4df6d0cc500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:db:b1:52:be:96:e8:2b:77:be:63:21:ac:
db:f2:ac:ed:38:8e:80:20:81:1f:44:b6:1c:89:8a:
b3:16:13:55:64:e9:a4:51:b5:db:e9:aa:cd:0c:fc:
eb:f2:ef:11:ad:ea:88:b0:20:49:01:f8:77:83:ef:
a1:15:fb:30:da:69:65:ad:ee:5b:89:02:6a:82:e6:
07:bd:92:47:8d:28:16:60:b0:61:e0:3e:ce:b3:72:
6f:3a:04:43:7d:dd:9d:b1:02:09:ac:e1:b3:37:c8:
11:dc:7a:94:d4:f9:c2:da:65:c1:3b:03:8d:a9:99:
dc:27:60:91:4e:43:a6:7b:b9:b8:88:77:cb:ca:a6:
81:3b:52:63:e9:ae:a2:52:2e:e9:f7:58:dc:7c:aa:
d7:75:5c:b9:bd:d8:27:de:60:5f:57:69:94:fa:1a:
d9:39:2f:27:76:49:26:43:fc:5d:b2:ed:e7:02:c1:
bb:2e:10:b7:2d:6f:f4:32:9a:fc:38:cc:4b:12:01:
7f:c3:d4:6c:1a:cc:22:39:94:a5:cc:d1:72:76:8c:
a0:75:79:1c:35:c9:b2:3f:0f:63:14:05:ac:11:75:
0f:eb:b6:db:dd:a8:9d:92:1f:5a:60:03:df:8e:8e:
d8:4e:99:50:b2:c6:f6:98:d3:ca:4d:3f:81:39:67:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:C7:A5:AC:1B:FC:4F:BE:C8:C1:7A:F2:F8:F4:DF:6D:0C:C5:00
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/VXvHpawb_E--yMF68vj0320MxQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.27.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0f:92:19:85:6d:e9:f5:b2:73:d7:ff:b4:f3:cf:2b:63:8b:
3e:95:67:cb:36:17:d3:1a:7b:88:f5:c9:4e:b7:2a:46:5d:18:
75:e2:04:fa:e4:d6:24:8c:41:3b:b4:d2:8f:f8:2d:2f:8f:37:
4d:12:ce:28:29:d9:cc:ee:33:b8:ac:ff:79:e4:4c:34:d0:32:
d4:58:86:58:f2:4c:47:f0:99:52:3c:2f:a4:02:3f:a4:6d:d1:
38:90:5e:40:d8:43:33:e2:eb:d6:2d:10:3a:fd:76:1f:d8:51:
9c:14:a7:a0:7c:8b:dc:68:0b:05:42:6d:61:e8:cf:28:3b:f7:
fd:8e:20:4a:26:cb:6e:3b:ec:28:37:93:e4:9d:0d:8f:75:d5:
c1:ef:7b:be:5d:67:20:8e:26:3e:8d:bb:de:61:83:38:65:6e:
e8:82:17:4e:d8:f1:dc:01:ae:14:96:0d:aa:41:fe:9f:4e:df:
72:8d:1d:ab:06:bf:65:ee:42:f8:50:00:aa:ba:8b:73:c3:69:
f7:59:71:55:71:dc:c0:f7:e2:eb:2e:0e:c3:d1:5b:b0:02:b4:
99:a7:4e:a3:4d:60:83:42:e2:1f:2b:b3:ad:a9:96:34:fd:be:
f6:a1:b3:67:e4:ac:4c:39:0a:ed:62:3e:0f:60:97:ab:03:0f:
02:a6:48:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb+W/3r1sG1Sgnzb+nC+X7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw
YjY1M2UwHhcNMjMwMzIwMDkzMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTdiYzdhNWFjMWJmYzRmYmVjOGMxN2FmMmY4ZjRkZjZkMGNjNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13bbsVK+lugrd75jIazb8qztOI6A
IIEfRLYciYqzFhNVZOmkUbXb6arNDPzr8u8RreqIsCBJAfh3g++hFfsw2mllre5b
iQJqguYHvZJHjSgWYLBh4D7Os3JvOgRDfd2dsQIJrOGzN8gR3HqU1PnC2mXBOwON
qZncJ2CRTkOme7m4iHfLyqaBO1Jj6a6iUi7p91jcfKrXdVy5vdgn3mBfV2mU+hrZ
OS8ndkkmQ/xdsu3nAsG7LhC3LW/0Mpr8OMxLEgF/w9RsGswiOZSlzNFydoygdXkc
NcmyPw9jFAWsEXUP67bb3aidkh9aYAPfjo7YTplQssb2mNPKTT+BOWdiEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFV7x6WsG/xPvsjBevL49N9tDMUAMB8GA1UdIwQY
MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt
M2UzNmNhOWEyZDY5LzEvVlh2SHBhd2JfRS0teU1GNjh2ajAzMjBNeFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5
LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubobMA0G
CSqGSIb3DQEBCwUAA4IBAQCJD5IZhW3p9bJz1/+0888rY4s+lWfLNhfTGnuI9clO
typGXRh14gT65NYkjEE7tNKP+C0vjzdNEs4oKdnM7jO4rP955Ew00DLUWIZY8kxH
8JlSPC+kAj+kbdE4kF5A2EMz4uvWLRA6/XYf2FGcFKegfIvcaAsFQm1h6M8oO/f9
jiBKJstuO+woN5PknQ2PddXB73u+XWcgjiY+jbveYYM4ZW7oghdO2PHcAa4Ulg2q
Qf6fTt9yjR2rBr9l7kL4UACquotzw2n3WXFVcdzA9+LrLg7D0VuwArSZp06jTWCD
QuIfK7OtqZY0/b72obNn5KxMOQrtYj4PYJerAw8Cpkgg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-ams.rpki-client.org