Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/Vok4uWjnpwjTbbbpysHZDfnVhk8.roa
File: Vok4uWjnpwjTbbbpysHZDfnVhk8.roa (raw, json)
Hash identifier: t2Jyx+lxtkCd0JL3hFSZgJIdZUYDJ3bOFXx5971x3F8=
Subject key identifier: 56:89:38:B9:68:E7:A7:08:D3:6D:B6:E9:CA:C1:D9:0D:F9:D5:86:4F
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 018570FBAD3F6E0696AC5279121184A9BA6D
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/Vok4uWjnpwjTbbbpysHZDfnVhk8.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210175
IP address blocks: 185.160.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ad:3f:6e:06:96:ac:52:79:12:11:84:a9:ba:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568938b968e7a708d36db6e9cac1d90df9d5864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:30:ad:ca:bf:bf:00:9e:f7:c3:b5:7f:84:
26:89:b6:b1:7d:d6:61:d9:ff:4e:e0:bd:ee:c1:c3:
64:ea:80:17:6e:3e:08:a7:4a:7b:55:79:3b:31:1d:
6d:fe:51:58:f5:2d:d1:0b:0d:ba:c5:d9:18:4e:7a:
4c:64:0a:f4:e0:b8:72:5b:8d:41:e0:dc:a1:2d:1b:
27:af:06:fa:50:b3:2b:de:51:8b:b7:8a:23:a9:50:
7f:b6:8a:8a:71:75:29:29:9a:a5:f4:0f:b8:70:4e:
e7:38:88:01:15:1a:76:b7:ae:5f:40:2b:c3:96:b1:
80:32:11:a4:92:61:fd:0e:95:25:64:50:db:6d:43:
d3:07:ba:9b:a4:27:76:f3:43:58:2b:94:5b:30:06:
8a:ec:fe:b3:02:fb:87:62:51:d3:a5:eb:93:f2:bb:
e0:5c:da:93:12:d7:56:52:06:5b:d8:c3:72:96:a2:
8f:10:8f:d7:64:53:ce:cc:03:4c:b9:b7:09:99:06:
06:05:50:e5:8f:47:9a:59:de:75:24:e9:5e:12:fa:
9e:2b:c0:b5:54:08:a4:0c:78:4a:a8:52:b7:8f:35:
3a:64:5c:ed:43:d7:ed:c7:61:77:d9:1d:5c:b3:2a:
ff:9d:17:34:20:16:fb:2c:66:a0:2c:73:7e:eb:10:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:38:B9:68:E7:A7:08:D3:6D:B6:E9:CA:C1:D9:0D:F9:D5:86:4F
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/Vok4uWjnpwjTbbbpysHZDfnVhk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:75:a2:e7:35:71:b0:a1:05:50:c3:f9:c1:ab:5c:8a:d3:1b:
d6:81:8d:60:84:04:ca:52:cb:86:a0:59:bc:84:de:1d:84:57:
1f:d0:42:ac:46:79:50:c7:64:f5:48:9d:9f:cc:57:a0:b1:db:
97:32:15:9e:9c:9e:7b:3b:16:93:80:2c:42:12:20:30:f3:47:
7b:df:59:0a:63:d9:a3:50:3f:ce:c0:c1:93:60:ac:d7:13:47:
d4:aa:b1:8b:55:1a:70:06:5c:bd:e7:4b:9f:9a:6e:cb:e0:b3:
75:55:ab:a3:ac:4b:97:91:b9:bf:41:67:f0:8b:21:e0:cf:99:
c7:19:57:cf:05:86:bb:e6:60:49:05:9e:54:b6:27:0a:e7:ae:
4d:05:be:1a:9c:7f:73:1f:bd:e8:a1:07:ac:cf:e9:14:9c:d8:
9b:79:0a:d0:df:f9:4e:c3:3b:1f:75:31:c3:65:5b:9c:61:c5:
91:c7:b1:11:55:95:37:d5:e6:fc:60:49:45:c2:7c:fe:e3:6d:
33:79:92:eb:1c:84:f9:66:4d:22:a8:e0:44:32:a5:14:85:35:
b7:45:da:40:50:72:29:2b:58:82:27:2e:b4:af:d0:aa:e0:00:
47:ec:ed:9a:48:f7:0c:7c:fe:a6:ac:90:13:bd:7d:9c:1d:cd:
b8:29:a5:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+60/bgaWrFJ5EhGEqbptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm
Mjg2MDkwHhcNMjMwMTAyMDUzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg5MzhiOTY4ZTdhNzA4ZDM2ZGI2ZTljYWMxZDkwZGY5ZDU4NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+8wrcq/vwCe98O1f4QmibaxfdZh
2f9O4L3uwcNk6oAXbj4Ip0p7VXk7MR1t/lFY9S3RCw26xdkYTnpMZAr04LhyW41B
4NyhLRsnrwb6ULMr3lGLt4ojqVB/toqKcXUpKZql9A+4cE7nOIgBFRp2t65fQCvD
lrGAMhGkkmH9DpUlZFDbbUPTB7qbpCd280NYK5RbMAaK7P6zAvuHYlHTpeuT8rvg
XNqTEtdWUgZb2MNylqKPEI/XZFPOzANMubcJmQYGBVDlj0eaWd51JOleEvqeK8C1
VAikDHhKqFK3jzU6ZFztQ9ftx2F32R1csyr/nRc0IBb7LGagLHN+6xAu7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaJOLlo56cI02226crB2Q351YZPMB8GA1UdIwQY
MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt
NDQ5OWUzMjM5ZjFmLzEvVm9rNHVXam5wd2pUYmJicHlzSFpEZm5WaGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm
LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaCNMA0G
CSqGSIb3DQEBCwUAA4IBAQA9daLnNXGwoQVQw/nBq1yK0xvWgY1ghATKUsuGoFm8
hN4dhFcf0EKsRnlQx2T1SJ2fzFegsduXMhWenJ57OxaTgCxCEiAw80d731kKY9mj
UD/OwMGTYKzXE0fUqrGLVRpwBly950ufmm7L4LN1VaujrEuXkbm/QWfwiyHgz5nH
GVfPBYa75mBJBZ5UticK565NBb4anH9zH73ooQesz+kUnNibeQrQ3/lOwzsfdTHD
ZVucYcWRx7ERVZU31eb8YElFwnz+420zeZLrHIT5Zk0iqOBEMqUUhTW3RdpAUHIp
K1iCJy60r9Cq4ABH7O2aSPcMfP6mrJATvX2cHc24KaWQ
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:08 2024 by rpki-client on console-ams.rpki-client.org