Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/IKka5XU1ThKeQefjnhd2puJDISs.roa
File: IKka5XU1ThKeQefjnhd2puJDISs.roa (raw, json)
Hash identifier: K5YNiYjoCby+X5G/3jya70DXDdsNZvnVpeAxx24Yllc=
Subject key identifier: 20:A9:1A:E5:75:35:4E:12:9E:41:E7:E3:9E:17:76:A6:E2:43:21:2B
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 018572B43F89D9748D69E6957BF2C77611D0
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/IKka5XU1ThKeQefjnhd2puJDISs.roa
Signing time: Mon 02 Jan 2023 13:38:13 +0000
ROA not before: Mon 02 Jan 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.225.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3f:89:d9:74:8d:69:e6:95:7b:f2:c7:76:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jan 2 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20a91ae575354e129e41e7e39e1776a6e243212b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:27:62:f1:df:7e:2f:58:47:2e:3f:7f:7f:
0f:49:f2:27:2d:5b:5c:58:74:12:64:84:7d:e7:5d:
1c:56:e0:04:74:51:e9:79:1d:28:9f:85:97:a1:00:
56:7e:61:24:43:4c:b9:a7:72:3b:2e:da:e5:bd:9c:
e3:11:04:3b:42:29:74:11:71:a8:b0:02:e0:bf:ff:
66:6c:b9:92:b4:b8:8f:c4:33:4e:4a:03:ef:4c:0b:
5a:b0:6b:45:fb:f8:14:61:7b:b8:65:db:c9:c8:60:
42:44:11:e0:c9:e9:d3:34:6d:49:41:8d:2d:f3:ee:
31:d9:c2:25:3c:17:9d:9e:0e:d8:db:a6:4b:b5:24:
b6:00:e8:2c:a9:c2:f6:f0:02:2a:aa:fb:af:6c:9c:
69:c5:2c:89:18:35:d3:7e:15:55:8e:2b:d1:eb:d0:
a3:ce:25:dd:29:d9:20:44:61:28:a2:3e:9c:de:89:
19:17:78:dd:9b:13:dc:11:64:23:63:47:8b:c2:cb:
2d:9c:ca:13:6e:bd:0e:2b:ff:75:7f:92:0d:b9:56:
5f:b9:dc:18:60:13:ca:c2:4b:81:dd:2b:72:30:89:
7c:4e:cc:1a:5f:9f:21:d8:23:72:32:37:f2:7b:4e:
39:27:17:ae:6e:3d:85:5f:da:94:1c:93:97:d9:cd:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:1A:E5:75:35:4E:12:9E:41:E7:E3:9E:17:76:A6:E2:43:21:2B
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/IKka5XU1ThKeQefjnhd2puJDISs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7b:94:9a:ac:92:d7:db:99:f6:07:fc:79:59:33:e6:89:e2:
bf:28:eb:07:e0:f7:5b:1b:ee:84:fb:ba:37:ba:c3:f4:5f:b1:
62:30:49:76:e2:4d:03:1c:db:ae:c8:04:9c:8b:a2:cb:ef:99:
26:05:89:a3:92:2c:ef:df:d6:09:84:be:84:8c:10:69:bb:89:
c0:42:e5:88:bd:7a:eb:5a:f9:0a:ec:85:a6:ef:cf:b0:e5:a6:
bd:e1:42:07:30:a3:61:92:27:6d:1d:37:ae:db:11:29:c9:15:
5a:ab:f9:2f:fc:e3:79:3f:e7:64:69:bc:84:18:bd:e0:33:cf:
c6:7f:d0:a4:f2:33:da:7a:39:3f:79:ce:b3:d2:51:eb:dc:70:
3f:4c:a6:4a:1a:eb:36:4b:8e:ad:ca:01:5e:a4:24:4e:8b:7d:
07:b6:e6:ee:f0:e4:45:ce:e5:05:95:bd:3f:12:69:14:cb:cd:
87:57:76:93:1d:fc:51:eb:18:f9:a0:54:00:5b:2d:4a:5c:1e:
5e:e4:cb:f7:36:a9:52:92:10:8f:1e:2a:74:d6:43:e5:48:2b:
7d:8c:08:68:fd:c8:df:91:dc:43:9a:5a:46:69:2c:ef:a7:0b:
f0:f8:49:59:39:b7:40:17:38:d9:c4:32:33:56:46:5b:8b:23:
0a:c5:9b:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVytD+J2XSNaeaVe/LHdhHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy
ZDY1MDEwHhcNMjMwMTAyMTMzODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGE5MWFlNTc1MzU0ZTEyOWU0MWU3ZTM5ZTE3NzZhNmUyNDMyMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0YnYvHffi9YRy4/f38PSfInLVtc
WHQSZIR9510cVuAEdFHpeR0on4WXoQBWfmEkQ0y5p3I7LtrlvZzjEQQ7Qil0EXGo
sALgv/9mbLmStLiPxDNOSgPvTAtasGtF+/gUYXu4ZdvJyGBCRBHgyenTNG1JQY0t
8+4x2cIlPBedng7Y26ZLtSS2AOgsqcL28AIqqvuvbJxpxSyJGDXTfhVVjivR69Cj
ziXdKdkgRGEooj6c3okZF3jdmxPcEWQjY0eLwsstnMoTbr0OK/91f5INuVZfudwY
YBPKwkuB3StyMIl8TswaX58h2CNyMjfye045Jxeubj2FX9qUHJOX2c1uJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCpGuV1NU4SnkHn454XdqbiQyErMB8GA1UdIwQY
MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt
OGJhNjg4ODY2OWNmLzEvSUtrYTVYVTFUaEtlUWVmam5oZDJwdUpESVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm
LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueH8MA0G
CSqGSIb3DQEBCwUAA4IBAQCJe5SarJLX25n2B/x5WTPmieK/KOsH4PdbG+6E+7o3
usP0X7FiMEl24k0DHNuuyASci6LL75kmBYmjkizv39YJhL6EjBBpu4nAQuWIvXrr
WvkK7IWm78+w5aa94UIHMKNhkidtHTeu2xEpyRVaq/kv/ON5P+dkabyEGL3gM8/G
f9Ck8jPaejk/ec6z0lHr3HA/TKZKGus2S46tygFepCROi30Htubu8ORFzuUFlb0/
EmkUy82HV3aTHfxR6xj5oFQAWy1KXB5e5Mv3NqlSkhCPHip01kPlSCt9jAho/cjf
kdxDmlpGaSzvpwvw+ElZObdAFzjZxDIzVkZbiyMKxZv4
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:30 2024 by rpki-client on console-fra.rpki-client.org