Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/kV0bzC1VbD3WxY15_y-GXiNNwMw.roa
File: kV0bzC1VbD3WxY15_y-GXiNNwMw.roa (raw, json)
Hash identifier: q5CuZA3j/WEP99N4TvfD+4R7lfW/acs8SP/YKEaFx98=
Subject key identifier: 91:5D:1B:CC:2D:55:6C:3D:D6:C5:8D:79:FF:2F:86:5E:23:4D:C0:CC
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 01856ED4CD22F925ABC5FCE915206D2B7FD8
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/kV0bzC1VbD3WxY15_y-GXiNNwMw.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.222.116.0/22 maxlen: 22
2a0c:3800::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cd:22:f9:25:ab:c5:fc:e9:15:20:6d:2b:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=915d1bcc2d556c3dd6c58d79ff2f865e234dc0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:1b:5c:3c:29:49:ed:48:ae:59:f1:16:63:
6c:54:b2:8d:70:3d:be:91:5a:eb:89:12:f2:71:48:
6d:34:1c:02:e2:a6:34:6f:f5:24:21:f2:18:e1:a1:
3f:13:68:f5:79:b3:f4:78:c4:c2:99:18:0c:80:86:
19:73:9c:02:53:8a:26:df:dd:37:d5:03:5d:f3:09:
d8:1a:71:e7:55:34:d1:ff:42:f3:7a:4c:56:7f:fb:
f0:30:a5:b3:af:1a:dc:c1:66:f1:1d:50:85:8a:01:
79:5f:cc:6e:59:00:28:5d:9f:dd:f5:7a:49:ef:de:
e7:65:d2:68:63:76:86:b9:7c:45:44:4d:c2:f5:0b:
92:d7:cf:05:e0:e9:bb:37:2c:11:03:ce:e8:d3:db:
dc:f1:65:fd:bc:a8:c1:c5:8b:db:52:bf:f5:a0:e8:
40:97:2c:c9:15:43:be:53:dc:51:72:c0:0b:00:7f:
1c:c4:13:99:e1:7a:ab:77:08:ab:f6:75:a8:f3:a7:
ac:66:eb:83:42:69:23:0d:fd:3c:f7:ab:b0:96:e7:
91:20:97:3e:86:cc:0d:15:04:bf:60:4b:73:43:55:
31:c6:4d:1a:a9:e7:ff:bf:26:5b:e2:fc:ba:a0:b2:
87:f6:eb:4a:06:01:1f:e1:ea:da:d1:d4:77:fc:d7:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5D:1B:CC:2D:55:6C:3D:D6:C5:8D:79:FF:2F:86:5E:23:4D:C0:CC
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/kV0bzC1VbD3WxY15_y-GXiNNwMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/22
IPv6:
2a0c:3800::/32
Signature Algorithm: sha256WithRSAEncryption
a4:54:de:fe:53:69:45:42:c9:f0:8a:b0:13:bd:2f:97:5a:04:
7f:6b:29:df:2f:2a:81:15:b8:d6:a7:44:7e:a5:02:c1:0f:08:
fe:8a:9f:df:7b:52:22:11:28:99:63:ba:65:3c:e6:fa:91:38:
53:99:01:86:c3:cd:54:87:fe:a9:5b:03:c9:5b:f2:11:2c:3b:
60:50:51:e9:95:56:55:79:23:06:c5:e0:17:86:a6:43:49:aa:
ae:98:d7:30:cf:93:36:f5:7a:7c:3e:f4:5f:d5:8c:03:05:ea:
e8:17:70:21:76:31:01:d4:1a:9d:d4:e8:34:8d:9d:d5:32:2e:
da:34:cd:e5:b4:8a:cd:87:9c:86:e9:aa:3d:2b:a8:24:a2:c1:
83:f0:77:7b:40:18:d6:64:c5:7f:38:a0:ff:10:97:92:3e:25:
ac:c4:a9:07:a2:51:7b:8b:70:a5:9c:d9:94:fe:b1:cf:cc:7e:
5d:08:7a:e4:90:a9:10:25:74:aa:d4:92:08:40:73:5f:b3:50:
4a:8c:05:b0:4d:ec:cd:9a:92:88:9d:58:31:9c:5d:7a:e5:39:
ad:54:ff:14:bb:cb:b2:1d:25:55:91:f3:00:76:04:09:f6:d6:
03:a6:46:14:41:0c:1b:d4:6b:bf:fd:e6:a6:ab:d4:5a:33:c6:
c8:a9:d2:59
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVu1M0i+SWrxfzpFSBtK3/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy
NmJhMGYwHhcNMjMwMTAxMTkzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVkMWJjYzJkNTU2YzNkZDZjNThkNzlmZjJmODY1ZTIzNGRjMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGobXDwpSe1IrlnxFmNsVLKNcD2+
kVrriRLycUhtNBwC4qY0b/UkIfIY4aE/E2j1ebP0eMTCmRgMgIYZc5wCU4om3903
1QNd8wnYGnHnVTTR/0LzekxWf/vwMKWzrxrcwWbxHVCFigF5X8xuWQAoXZ/d9XpJ
797nZdJoY3aGuXxFRE3C9QuS188F4Om7NywRA87o09vc8WX9vKjBxYvbUr/1oOhA
lyzJFUO+U9xRcsALAH8cxBOZ4Xqrdwir9nWo86esZuuDQmkjDf0896uwlueRIJc+
hswNFQS/YEtzQ1Uxxk0aqef/vyZb4vy6oLKH9utKBgEf4era0dR3/NfIwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJFdG8wtVWw91sWNef8vhl4jTcDMMB8GA1UdIwQY
MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEva1YwYnpDMVZiRDNXeFkxNV95LUdYaU5Od013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud50MA0E
AgACMAcDBQAqDDgAMA0GCSqGSIb3DQEBCwUAA4IBAQCkVN7+U2lFQsnwirATvS+X
WgR/aynfLyqBFbjWp0R+pQLBDwj+ip/fe1IiESiZY7plPOb6kThTmQGGw81Uh/6p
WwPJW/IRLDtgUFHplVZVeSMGxeAXhqZDSaqumNcwz5M29Xp8PvRf1YwDBeroF3Ah
djEB1Bqd1Og0jZ3VMi7aNM3ltIrNh5yG6ao9K6gkosGD8Hd7QBjWZMV/OKD/EJeS
PiWsxKkHolF7i3ClnNmU/rHPzH5dCHrkkKkQJXSq1JIIQHNfs1BKjAWwTezNmpKI
nVgxnF165TmtVP8Uu8uyHSVVkfMAdgQJ9tYDpkYUQQwb1Gu//eamq9RaM8bIqdJZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:46 2024 by rpki-client on console-ams.rpki-client.org