Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/DWk1wViwVgzaz6z-z20cY8pLoYY.roa
File: DWk1wViwVgzaz6z-z20cY8pLoYY.roa (raw, json)
Hash identifier: aGI+rSNva+uu/dB3uQGZcd1A7x8nNs9S7Zt9bf0giNc=
Subject key identifier: 0D:69:35:C1:58:B0:56:0C:DA:CF:AC:FE:CF:6D:1C:63:CA:4B:A1:86
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 018571BA0580631D3D3130D6903DAD717DFB
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/DWk1wViwVgzaz6z-z20cY8pLoYY.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210744
IP address blocks: 185.22.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:05:80:63:1d:3d:31:30:d6:90:3d:ad:71:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6935c158b0560cdacfacfecf6d1c63ca4ba186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:1d:e9:97:29:f2:26:6e:e6:e6:59:32:34:
c0:32:3b:cf:97:f9:f5:5e:8a:ae:e5:1d:1b:d4:c2:
43:5d:2a:f8:c7:cc:d1:1f:04:4c:4d:ce:cb:d9:4f:
7e:1d:8d:37:52:d6:f0:9b:ce:3f:e5:c9:4c:dd:f8:
65:da:45:0c:88:92:15:fc:45:32:65:e7:ab:1d:bf:
5a:d6:9b:b1:4e:b3:b5:4b:49:1f:ee:68:2f:06:8f:
16:9e:0e:65:19:e9:14:ef:e9:e1:ae:ca:a6:32:bc:
f1:9a:21:d1:fb:2b:4c:e2:d0:24:6c:1a:76:5d:07:
0d:33:0d:2c:7e:1f:5d:00:81:3e:46:4e:1c:9c:3c:
97:4d:88:b8:4e:97:ef:a3:8f:d5:f5:d3:78:9d:13:
ae:b3:5f:4e:08:84:38:32:7a:25:f3:3a:f8:19:fd:
ba:71:4c:8f:7d:40:8f:1b:d4:57:35:ff:ea:b8:43:
99:0e:cb:eb:33:40:46:ef:89:bc:0e:ab:7e:99:d2:
e9:2d:70:38:de:43:6c:77:18:40:06:36:dd:d3:86:
21:cf:e0:36:e1:70:06:68:c2:18:50:99:cd:75:82:
13:04:22:a1:c5:f6:d4:50:ca:87:66:54:99:e8:d4:
56:5e:ab:39:05:85:0a:e2:c9:df:d9:96:90:1f:21:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:35:C1:58:B0:56:0C:DA:CF:AC:FE:CF:6D:1C:63:CA:4B:A1:86
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/DWk1wViwVgzaz6z-z20cY8pLoYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.228.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1b:36:13:6a:11:d1:70:10:1e:62:54:81:ce:4c:4b:cf:86:
9d:91:0d:6b:3a:15:33:2c:8a:67:dd:0e:1b:43:09:9f:15:be:
08:a5:7a:65:f6:65:d9:10:a0:69:2a:01:f7:1f:1b:f3:5f:98:
82:10:1d:7a:6a:c7:3a:cd:70:9c:bb:bc:e1:90:58:8e:c2:5e:
35:f8:04:33:d4:f3:85:f4:a8:c7:39:5d:85:78:5a:a1:b8:af:
99:0e:d0:99:67:e3:44:88:75:20:ef:bc:1b:92:78:8b:01:64:
62:08:a8:58:e0:d5:f9:29:38:c8:41:39:c2:95:26:ae:9b:33:
7e:af:e5:8f:4e:41:56:6d:6d:e2:19:66:7a:ae:85:16:9c:a2:
74:62:b6:1b:a0:dc:39:f8:ba:f5:71:e4:f1:96:44:b0:64:32:
ad:68:00:10:d3:86:34:cc:8a:0c:fa:5f:d6:b6:b9:59:17:2f:
4a:1f:d2:cb:24:85:0c:80:c5:b5:58:dd:3d:92:c0:c0:21:6e:
aa:82:09:74:b2:8a:39:b4:2c:87:fb:e8:c5:03:1b:c7:d2:28:
64:4a:7d:86:04:b0:3d:87:d4:45:d6:5d:67:47:c6:26:b4:a7:
2f:20:40:68:6b:d2:5f:dd:95:5f:7b:dd:30:91:31:a7:70:74:
f9:50:a4:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxugWAYx09MTDWkD2tcX37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDc5NGQ5ZmNhYjIzZWMwNWRkZGQ1MDQ4YTNmYzcyMDQw
MDJhMmEwHhcNMjMwMTAyMDkwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDY5MzVjMTU4YjA1NjBjZGFjZmFjZmVjZjZkMWM2M2NhNGJhMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSkd6Zcp8iZu5uZZMjTAMjvPl/n1
Xoqu5R0b1MJDXSr4x8zRHwRMTc7L2U9+HY03Utbwm84/5clM3fhl2kUMiJIV/EUy
ZeerHb9a1puxTrO1S0kf7mgvBo8Wng5lGekU7+nhrsqmMrzxmiHR+ytM4tAkbBp2
XQcNMw0sfh9dAIE+Rk4cnDyXTYi4Tpfvo4/V9dN4nROus19OCIQ4Mnol8zr4Gf26
cUyPfUCPG9RXNf/quEOZDsvrM0BG74m8Dqt+mdLpLXA43kNsdxhABjbd04Yhz+A2
4XAGaMIYUJnNdYITBCKhxfbUUMqHZlSZ6NRWXqs5BYUK4snf2ZaQHyGHrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1pNcFYsFYM2s+s/s9tHGPKS6GGMB8GA1UdIwQY
MBaAFN5HlNn8qyPsBd3dUEij/HIEACoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDIt
ZjAxMTI5Mzk1M2Y1LzEvRFdrMXdWaXdWZ3phejZ6LXoyMGNZOHBMb1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDItZjAxMTI5Mzk1M2Y1
LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRbkMA0G
CSqGSIb3DQEBCwUAA4IBAQBWGzYTahHRcBAeYlSBzkxLz4adkQ1rOhUzLIpn3Q4b
QwmfFb4IpXpl9mXZEKBpKgH3HxvzX5iCEB16asc6zXCcu7zhkFiOwl41+AQz1POF
9KjHOV2FeFqhuK+ZDtCZZ+NEiHUg77wbkniLAWRiCKhY4NX5KTjIQTnClSaumzN+
r+WPTkFWbW3iGWZ6roUWnKJ0YrYboNw5+Lr1ceTxlkSwZDKtaAAQ04Y0zIoM+l/W
trlZFy9KH9LLJIUMgMW1WN09ksDAIW6qggl0soo5tCyH++jFAxvH0ihkSn2GBLA9
h9RF1l1nR8YmtKcvIEBoa9Jf3ZVfe90wkTGncHT5UKRH
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:29 2024 by rpki-client on console-ams.rpki-client.org