Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/4UJP8WCNjdm_IJzNRMa2wkiBK98.roa
File: 4UJP8WCNjdm_IJzNRMa2wkiBK98.roa (raw, json)
Hash identifier: hOyZ0DuQauVYO799Nbo2pErwkj+Ui5mf3jcmookkvmQ=
Subject key identifier: E1:42:4F:F1:60:8D:8D:D9:BF:20:9C:CD:44:C6:B6:C2:48:81:2B:DF
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0185703968713738265681C4D272E44F7B43
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/4UJP8WCNjdm_IJzNRMa2wkiBK98.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201708
IP address blocks: 185.62.172.0/23 maxlen: 23
185.62.172.0/24 maxlen: 24
185.62.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:68:71:37:38:26:56:81:c4:d2:72:e4:4f:7b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1424ff1608d8dd9bf209ccd44c6b6c248812bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:47:0b:09:78:b3:a8:20:5c:81:d9:0c:0b:
d9:5a:fe:0f:25:f4:19:92:74:52:5f:71:79:91:45:
a7:0c:c3:3a:ac:78:5c:ee:c4:d4:07:1a:fd:b5:bf:
e1:eb:1f:8c:09:e4:1d:11:ed:ab:de:d5:0b:72:8a:
05:2f:3d:78:74:38:2e:e9:0d:56:24:5a:e8:6e:ae:
ae:b7:d5:ac:40:7c:f2:74:48:57:f4:a2:91:57:85:
a0:b9:38:d4:24:d0:6b:41:23:dc:32:3b:97:b2:6e:
3e:53:5f:2e:fc:8f:a6:63:b5:f6:8a:d7:51:3e:57:
6b:a9:3c:27:e3:51:e2:4f:b2:f5:57:ab:b4:80:73:
ca:4f:51:ac:81:c9:8b:0d:3a:9a:98:c0:2e:19:19:
6d:03:a9:22:c4:19:a8:bf:29:c5:12:65:5b:20:71:
aa:c8:f6:f4:b9:6d:25:3b:a7:4d:38:43:03:de:af:
69:f2:60:3e:d2:d7:ec:6a:67:1b:2c:e9:6d:40:88:
bc:21:cc:99:6d:58:e8:e7:a6:51:de:ad:9e:97:f0:
08:85:7e:b3:4b:27:8e:92:b3:bb:af:f5:f2:94:bb:
f6:c9:c0:0b:2d:17:1c:a6:c9:58:35:61:05:9c:57:
0f:de:2d:03:6d:39:51:6e:37:48:58:87:26:02:ce:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:4F:F1:60:8D:8D:D9:BF:20:9C:CD:44:C6:B6:C2:48:81:2B:DF
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/4UJP8WCNjdm_IJzNRMa2wkiBK98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.172.0/23
Signature Algorithm: sha256WithRSAEncryption
57:ff:34:5d:c3:b2:78:33:be:16:0b:4c:57:61:84:5e:9a:06:
33:57:9b:3f:f8:63:ad:e2:6e:d3:94:13:37:01:ac:00:b5:12:
cd:f0:6a:78:a0:a3:35:87:c3:64:89:1b:87:87:4a:0e:3a:c5:
00:81:18:44:7d:24:79:17:33:72:93:56:ce:82:3f:dd:2d:d3:
22:1a:12:fe:0e:64:c0:e8:59:0b:a5:72:a5:24:b1:04:cc:8c:
62:c3:b4:f6:fd:3e:31:7d:7a:47:84:f9:6a:e5:a3:f0:38:19:
5b:0d:53:c6:f0:87:14:bf:ed:00:da:de:ab:66:d1:7d:f4:b7:
e0:04:88:50:e1:ca:19:0d:4d:7e:59:e8:44:87:8d:4c:c5:aa:
e6:90:80:72:f2:32:ac:30:99:5f:10:a9:80:00:9c:1f:89:6d:
7b:37:92:c3:1c:1d:5d:df:e4:37:82:d4:d3:d3:c1:1c:00:35:
0d:02:30:a1:7e:dc:db:9b:b8:d4:d7:2f:08:12:c7:97:ec:9f:
ad:0e:00:a6:6e:38:1a:f9:29:cf:0a:be:e0:b6:a9:d5:0e:39:
de:e8:84:9b:3b:27:f1:22:6f:91:d1:c9:85:b5:71:41:3e:93:
d3:b4:70:7f:f4:3e:08:e3:ea:bf:2a:53:89:de:2b:2b:d7:53:
0b:fe:f3:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOWhxNzgmVoHE0nLkT3tDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjMwMTAyMDIwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTQyNGZmMTYwOGQ4ZGQ5YmYyMDljY2Q0NGM2YjZjMjQ4ODEyYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIdHCwl4s6ggXIHZDAvZWv4PJfQZ
knRSX3F5kUWnDMM6rHhc7sTUBxr9tb/h6x+MCeQdEe2r3tULcooFLz14dDgu6Q1W
JFrobq6ut9WsQHzydEhX9KKRV4WguTjUJNBrQSPcMjuXsm4+U18u/I+mY7X2itdR
PldrqTwn41HiT7L1V6u0gHPKT1GsgcmLDTqamMAuGRltA6kixBmovynFEmVbIHGq
yPb0uW0lO6dNOEMD3q9p8mA+0tfsamcbLOltQIi8IcyZbVjo56ZR3q2el/AIhX6z
SyeOkrO7r/XylLv2ycALLRccpslYNWEFnFcP3i0DbTlRbjdIWIcmAs4fOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFCT/FgjY3ZvyCczUTGtsJIgSvfMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvNFVKUDhXQ05qZG1fSUp6TlJNYTJ3a2lCSzk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuT6sMA0G
CSqGSIb3DQEBCwUAA4IBAQBX/zRdw7J4M74WC0xXYYRemgYzV5s/+GOt4m7TlBM3
AawAtRLN8Gp4oKM1h8NkiRuHh0oOOsUAgRhEfSR5FzNyk1bOgj/dLdMiGhL+DmTA
6FkLpXKlJLEEzIxiw7T2/T4xfXpHhPlq5aPwOBlbDVPG8IcUv+0A2t6rZtF99Lfg
BIhQ4coZDU1+WehEh41MxarmkIBy8jKsMJlfEKmAAJwfiW17N5LDHB1d3+Q3gtTT
08EcADUNAjChftzbm7jU1y8IEseX7J+tDgCmbjga+SnPCr7gtqnVDjne6ISbOyfx
Im+R0cmFtXFBPpPTtHB/9D4I4+q/KlOJ3isr11ML/vOa
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:59 2024 by rpki-client on console-fra.rpki-client.org