Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/vChW7qPUN3BQlvygNOhYwQROBb4.roa
File: vChW7qPUN3BQlvygNOhYwQROBb4.roa (raw, json)
Hash identifier: gbmkYBelW9jnZO3pMJiZYuiPDhUAeJQFPvWMjM+Z8zY=
Subject key identifier: BC:28:56:EE:A3:D4:37:70:50:96:FC:A0:34:E8:58:C1:04:4E:05:BE
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 018572D5BC864F4094105BDAFEF2ED4E01F5
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/vChW7qPUN3BQlvygNOhYwQROBb4.roa
Signing time: Mon 02 Jan 2023 14:14:48 +0000
ROA not before: Mon 02 Jan 2023 14:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39743
IP address blocks: 185.5.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bc:86:4f:40:94:10:5b:da:fe:f2:ed:4e:01:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Jan 2 14:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc2856eea3d437705096fca034e858c1044e05be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:19:15:af:74:53:42:c4:d4:60:e3:48:07:
f1:4e:9e:ff:be:6f:31:46:66:f2:52:15:90:e8:9b:
09:58:66:90:6e:ec:0a:c7:e8:65:56:32:6f:e2:ca:
a5:ad:d0:5c:d2:fe:6c:a5:cf:ad:3a:b9:37:d4:06:
d3:c8:7c:85:e9:5e:31:c2:77:df:3e:26:d8:65:93:
be:9a:4a:fd:75:b4:1e:08:c1:b9:ba:56:e4:f7:80:
d8:ea:dd:34:92:96:04:f6:ff:ec:88:a9:0c:f8:88:
cb:52:d2:4b:9a:1d:01:a0:30:9f:59:ca:b1:79:e7:
4c:ce:01:5d:a6:12:2d:22:66:75:8a:f2:5e:04:2b:
29:84:e6:c1:cd:0f:5a:b2:6e:a2:9c:c4:49:e3:2a:
b6:97:bf:2d:b4:18:0f:6a:1c:58:a5:0f:f6:1e:f7:
f4:4e:63:0c:b1:a1:22:54:44:d6:0e:e0:6a:42:55:
a1:1b:fb:60:0a:b9:93:f9:31:52:4c:1f:75:28:26:
f3:e7:75:9f:30:ef:80:d3:ce:7f:c7:42:34:92:80:
66:88:9b:01:5b:d4:e3:bb:eb:d1:61:8b:ad:4f:dc:
4e:56:72:e6:f1:3d:30:c6:d6:c2:19:13:08:29:91:
5c:b5:90:f3:7a:ea:85:00:cf:55:39:d7:13:13:ec:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:56:EE:A3:D4:37:70:50:96:FC:A0:34:E8:58:C1:04:4E:05:BE
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/vChW7qPUN3BQlvygNOhYwQROBb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.46.0/24
Signature Algorithm: sha256WithRSAEncryption
36:77:44:df:1b:ed:4a:d1:83:50:b7:47:b6:db:aa:f6:4d:8a:
09:d4:b2:19:07:35:97:e7:41:45:4d:90:9a:d6:7a:45:9c:93:
50:b3:2a:56:4f:77:5a:4b:6c:d9:20:d4:bc:cf:bb:f2:1f:58:
d1:eb:a3:d5:cd:6b:79:cb:7f:a1:c6:ed:bc:3a:5a:60:93:35:
25:9f:f5:40:41:95:39:4a:ab:ab:4a:0c:de:99:07:95:81:16:
e5:f5:af:70:a3:36:55:67:af:b3:f4:83:82:78:df:8a:27:86:
e5:73:a1:a9:57:a6:0a:62:ca:94:e0:ad:b3:10:58:1e:b9:0c:
b5:2b:f7:e5:e3:cb:7c:c2:e4:83:6e:4c:5e:c9:f9:a7:62:2f:
1a:e2:fa:4a:9b:57:c4:6a:cb:06:12:7f:6d:fd:1c:cf:92:36:
08:1b:53:5a:d4:31:04:49:15:0a:37:9f:5d:f9:94:ad:50:ab:
2f:41:ab:fe:d2:4c:26:17:60:66:66:bf:ca:2b:52:5c:ab:a4:
06:c6:88:8e:13:10:a0:5c:41:59:07:8e:d0:87:a2:2f:f2:28:
45:ef:47:db:27:2d:48:48:f4:f5:ad:5f:99:4e:41:97:0e:69:
c4:ba:4a:64:07:6b:4e:cf:4b:d5:cb:a9:08:04:09:3f:4b:6c:
8e:17:59:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy1byGT0CUEFva/vLtTgH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2NkN2MxYTljNzljODJlZWU1Yzg2YTQyM2MxN2MxZDYz
YzM0MTMwHhcNMjMwMTAyMTQxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzI4NTZlZWEzZDQzNzcwNTA5NmZjYTAzNGU4NThjMTA0NGUwNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkigZFa90U0LE1GDjSAfxTp7/vm8x
RmbyUhWQ6JsJWGaQbuwKx+hlVjJv4sqlrdBc0v5spc+tOrk31AbTyHyF6V4xwnff
PibYZZO+mkr9dbQeCMG5ulbk94DY6t00kpYE9v/siKkM+IjLUtJLmh0BoDCfWcqx
eedMzgFdphItImZ1ivJeBCsphObBzQ9asm6inMRJ4yq2l78ttBgPahxYpQ/2Hvf0
TmMMsaEiVETWDuBqQlWhG/tgCrmT+TFSTB91KCbz53WfMO+A085/x0I0koBmiJsB
W9Tju+vRYYutT9xOVnLm8T0wxtbCGRMIKZFctZDzeuqFAM9VOdcTE+yflwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwoVu6j1DdwUJb8oDToWMEETgW+MB8GA1UdIwQY
MBaAFBM818Gpx5yC7uXIakI8F8HWPDQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQt
NGYzOGM2NTZiMjU2LzEvdkNoVzdxUFVOM0JRbHZ5Z05PaFl3UVJPQmI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQtNGYzOGM2NTZiMjU2
LzEvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQUuMA0G
CSqGSIb3DQEBCwUAA4IBAQA2d0TfG+1K0YNQt0e226r2TYoJ1LIZBzWX50FFTZCa
1npFnJNQsypWT3daS2zZINS8z7vyH1jR66PVzWt5y3+hxu28OlpgkzUln/VAQZU5
SqurSgzemQeVgRbl9a9wozZVZ6+z9IOCeN+KJ4blc6GpV6YKYsqU4K2zEFgeuQy1
K/fl48t8wuSDbkxeyfmnYi8a4vpKm1fEassGEn9t/RzPkjYIG1Na1DEESRUKN59d
+ZStUKsvQav+0kwmF2BmZr/KK1Jcq6QGxoiOExCgXEFZB47Qh6Iv8ihF70fbJy1I
SPT1rV+ZTkGXDmnEukpkB2tOz0vVy6kIBAk/S2yOF1ku
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:34 2024 by rpki-client on console-ams.rpki-client.org