Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I-hQ4VpzjOuQVnVS-GSD6BWCYhI.roa
File: I-hQ4VpzjOuQVnVS-GSD6BWCYhI.roa (raw, json)
Hash identifier: TsB6+cTLtPey1mB4i6Uzfz92j1lWsx+wyrKVVXePtQ0=
Subject key identifier: 23:E8:50:E1:5A:73:8C:EB:90:56:75:52:F8:64:83:E8:15:82:62:12
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0185735612452290CB87FBA2BA597B813E21
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I-hQ4VpzjOuQVnVS-GSD6BWCYhI.roa
Signing time: Mon 02 Jan 2023 16:34:58 +0000
ROA not before: Mon 02 Jan 2023 16:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56860
IP address blocks: 37.235.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:12:45:22:90:cb:87:fb:a2:ba:59:7b:81:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 2 16:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e850e15a738ceb90567552f86483e815826212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:77:c4:63:ee:5f:dc:e9:9c:bd:f4:05:23:
36:cb:ca:e2:74:26:a9:f7:23:fa:5e:54:7d:ff:e5:
ce:7c:7e:67:93:b3:67:bd:9d:3e:3a:0e:e0:73:7b:
2a:be:6e:74:fb:16:47:78:3c:04:f6:1b:d4:30:f2:
82:48:0b:6a:c3:e1:bc:51:27:ec:e6:b9:c0:7a:27:
2d:ca:e8:6e:ba:90:67:84:c7:68:6c:b0:13:99:6f:
79:56:94:38:81:18:8d:74:5e:c3:80:e5:b9:f9:c7:
06:e4:d6:96:95:23:d1:ae:01:70:79:53:e5:81:bb:
24:be:1c:62:de:53:c1:6b:2e:6b:26:77:d1:6e:82:
79:32:79:4d:67:8f:31:7b:b0:e5:e3:07:d0:b7:20:
a3:db:1c:25:b8:05:4f:6f:a1:11:4a:9b:93:54:d6:
43:ed:6d:78:42:ab:56:c7:27:2d:a4:6d:40:20:86:
01:09:29:91:8a:49:60:2b:22:82:7f:da:fb:12:e4:
59:f8:51:6b:13:6a:0f:a6:2f:9b:74:3d:35:ad:11:
f6:b5:fa:d9:9b:c4:8a:23:80:bb:3f:23:f7:a4:d5:
aa:49:03:4e:50:fe:30:b8:af:95:b8:ab:b7:6a:d5:
b1:99:f6:8f:c0:11:65:fc:a2:1e:6e:a2:1e:81:6d:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:50:E1:5A:73:8C:EB:90:56:75:52:F8:64:83:E8:15:82:62:12
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I-hQ4VpzjOuQVnVS-GSD6BWCYhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:82:16:7e:3e:ee:64:d4:8b:0f:43:a0:3f:e9:b4:52:ee:
9c:6e:50:19:b3:0f:56:ed:f8:14:5b:54:e4:f9:16:60:fe:af:
e7:f6:b9:4f:ae:b2:74:f5:be:cd:e5:9a:4f:ca:c7:64:bf:8a:
49:ed:44:af:e5:87:d3:f5:7a:57:b1:7a:0f:db:de:69:ef:a4:
5c:63:ae:d7:7c:39:c4:7c:b7:92:74:c9:a0:41:45:ad:a3:f7:
c5:3c:06:e5:1e:04:dd:2d:20:21:75:9b:c3:dd:af:29:8f:8c:
0d:69:c6:4f:07:4a:b0:8f:89:72:00:c9:e8:4b:57:cb:d8:a8:
63:7c:55:a8:4a:fe:b4:32:94:71:2f:93:b1:04:f2:ef:31:89:
93:68:2a:5b:b9:90:c5:bc:c0:f6:68:b0:c5:b7:dc:61:c4:a9:
cd:e9:46:ff:38:82:19:5e:bf:49:0b:7d:9e:c4:21:98:66:02:
f2:40:b1:94:14:be:02:b5:49:4d:73:d0:56:71:43:39:41:ec:
59:72:3d:0b:de:e5:33:6b:79:9d:88:22:b1:7d:94:ad:d3:b1:
8b:2d:df:22:e3:69:42:af:54:e4:11:3a:0d:f3:f9:9d:14:21:
6c:69:dc:2d:6a:2c:9c:ed:cb:cd:1d:ee:cb:9f:a4:ad:1e:67:
7c:9d:e1:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVhJFIpDLh/uiull7gT4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2
MGM2ZTEwHhcNMjMwMTAyMTYzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2U4NTBlMTVhNzM4Y2ViOTA1Njc1NTJmODY0ODNlODE1ODI2MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbR3xGPuX9zpnL30BSM2y8ridCap
9yP6XlR9/+XOfH5nk7NnvZ0+Og7gc3sqvm50+xZHeDwE9hvUMPKCSAtqw+G8USfs
5rnAeictyuhuupBnhMdobLATmW95VpQ4gRiNdF7DgOW5+ccG5NaWlSPRrgFweVPl
gbskvhxi3lPBay5rJnfRboJ5MnlNZ48xe7Dl4wfQtyCj2xwluAVPb6ERSpuTVNZD
7W14QqtWxyctpG1AIIYBCSmRiklgKyKCf9r7EuRZ+FFrE2oPpi+bdD01rRH2tfrZ
m8SKI4C7PyP3pNWqSQNOUP4wuK+VuKu3atWxmfaPwBFl/KIebqIegW3m/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPoUOFac4zrkFZ1Uvhkg+gVgmISMB8GA1UdIwQY
MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt
YWM4MDBjNmQ5NzZmLzEvSS1oUTRWcHpqT3VRVm5WUy1HU0Q2QldDWWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm
LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJetMMA0G
CSqGSIb3DQEBCwUAA4IBAQBN7YIWfj7uZNSLD0OgP+m0Uu6cblAZsw9W7fgUW1Tk
+RZg/q/n9rlPrrJ09b7N5ZpPysdkv4pJ7USv5YfT9XpXsXoP295p76RcY67XfDnE
fLeSdMmgQUWto/fFPAblHgTdLSAhdZvD3a8pj4wNacZPB0qwj4lyAMnoS1fL2Khj
fFWoSv60MpRxL5OxBPLvMYmTaCpbuZDFvMD2aLDFt9xhxKnN6Ub/OIIZXr9JC32e
xCGYZgLyQLGUFL4CtUlNc9BWcUM5QexZcj0L3uUza3mdiCKxfZSt07GLLd8i42lC
r1TkEToN8/mdFCFsadwtaiyc7cvNHe7Ln6StHmd8neFZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org