Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/rNml8gLwGJewDYi_FoV14FGjQHw.roa
File: rNml8gLwGJewDYi_FoV14FGjQHw.roa (raw, json)
Hash identifier: XzhLs72O5WLqSA5lhj9SRkz2Jvc8cSeizYASMIPtVCk=
Subject key identifier: AC:D9:A5:F2:02:F0:18:97:B0:0D:88:BF:16:85:75:E0:51:A3:40:7C
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 01856E01F3C3FE586134A85220C4A29865AC
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/rNml8gLwGJewDYi_FoV14FGjQHw.roa
Signing time: Sun 01 Jan 2023 15:44:59 +0000
ROA not before: Sun 01 Jan 2023 15:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213212
IP address blocks: 185.76.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f3:c3:fe:58:61:34:a8:52:20:c4:a2:98:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Jan 1 15:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd9a5f202f01897b00d88bf168575e051a3407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:74:74:fe:95:ab:21:c8:e0:5b:f6:c3:21:
14:a4:93:ab:6d:2d:86:f5:3a:fc:85:62:88:f6:a7:
0b:b5:ab:d8:50:a7:ee:ec:32:e7:b5:b8:41:2a:dc:
3a:1c:2c:c5:93:be:4f:31:ed:f5:d4:23:1a:10:de:
b3:b1:9a:40:b1:04:f3:e5:22:75:ee:35:a1:05:03:
ef:1d:7c:ef:29:a0:03:df:9a:66:3b:fb:3d:59:8f:
ff:26:84:d7:3e:b3:6c:1d:4e:5b:6b:14:8c:df:01:
8c:d9:1b:71:6d:62:12:35:de:57:b7:62:6e:b6:a3:
0d:d2:93:d8:7e:43:e5:37:50:37:89:30:42:a6:1f:
b0:d0:97:bf:01:4f:a9:33:4d:ca:5e:07:66:76:3d:
5a:0f:25:58:4c:07:6a:3a:47:64:91:ee:9e:6a:55:
6e:10:6f:ac:d0:ff:f8:67:4d:b7:4b:ef:a8:72:83:
23:d7:46:2d:69:1b:36:f7:f5:63:7d:7c:fc:3e:9c:
75:de:0a:e0:a7:29:d9:bf:22:94:9c:08:4f:7e:4a:
0f:7d:f4:f9:18:9e:9a:a7:47:23:80:15:f9:29:a2:
1a:56:c7:a0:b1:57:b7:07:2a:65:e2:fa:49:55:bf:
e0:ad:fb:84:40:c7:70:4c:91:92:65:ec:57:e0:46:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:A5:F2:02:F0:18:97:B0:0D:88:BF:16:85:75:E0:51:A3:40:7C
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/rNml8gLwGJewDYi_FoV14FGjQHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:84:36:71:96:80:a6:ef:a4:7c:6b:93:72:f2:e3:97:28:2d:
eb:20:35:54:9c:cd:8e:f9:a9:60:6f:5b:00:8e:5f:34:70:b5:
9e:57:9c:b5:55:55:93:a6:70:af:20:1b:c8:43:06:9f:43:f2:
7f:63:da:32:0f:c3:d8:8c:73:29:d3:e4:83:b2:39:be:ce:13:
de:da:75:82:75:e5:b8:d2:27:2d:47:7b:e8:8c:23:0c:44:24:
01:e3:d4:1a:a4:38:d6:32:e3:9d:94:66:9e:c5:de:8a:eb:11:
c2:c5:c7:59:f5:43:53:18:f6:fc:8e:b0:15:53:d9:47:bd:c3:
fa:7b:f2:b0:59:55:20:53:6f:ef:44:4c:8c:a1:2e:29:35:43:
71:3f:ae:40:92:ac:f7:6e:f4:d1:7f:1e:f4:55:5d:20:96:34:
ba:1f:e7:ae:15:25:cf:d7:7d:0b:b3:ba:8d:5c:f7:0f:b4:da:
27:c2:06:ff:c7:87:88:6a:99:11:c5:72:df:00:96:0d:99:dd:
49:76:e7:34:ab:14:67:a4:ba:58:d4:e1:95:13:56:83:63:eb:
dd:04:14:35:fd:d4:df:eb:f9:6b:f4:57:2d:f4:1c:9c:cb:80:
16:22:e8:ae:8d:40:6b:d4:32:ea:76:2c:b1:17:68:f0:44:bf:
e2:be:44:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAfPD/lhhNKhSIMSimGWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzg1YzA0OGNmM2Q1YjIxODY5ZjQ5NDM0ZjJkM2JiNDdk
NDNiYTEwHhcNMjMwMTAxMTU0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Q5YTVmMjAyZjAxODk3YjAwZDg4YmYxNjg1NzVlMDUxYTM0MDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tZ0dP6VqyHI4Fv2wyEUpJOrbS2G
9Tr8hWKI9qcLtavYUKfu7DLntbhBKtw6HCzFk75PMe311CMaEN6zsZpAsQTz5SJ1
7jWhBQPvHXzvKaAD35pmO/s9WY//JoTXPrNsHU5baxSM3wGM2RtxbWISNd5Xt2Ju
tqMN0pPYfkPlN1A3iTBCph+w0Je/AU+pM03KXgdmdj1aDyVYTAdqOkdkke6ealVu
EG+s0P/4Z023S++ocoMj10YtaRs29/VjfXz8Ppx13grgpynZvyKUnAhPfkoPffT5
GJ6ap0cjgBX5KaIaVsegsVe3Bypl4vpJVb/grfuEQMdwTJGSZexX4EZbhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzZpfIC8BiXsA2IvxaFdeBRo0B8MB8GA1UdIwQY
MBaAFBZ4XASM89WyGGn0lDTy07tH1DuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAt
YWIzN2ZlZDUyYTRkLzEvck5tbDhnTHdHSmV3RFlpX0ZvVjE0RkdqUUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAtYWIzN2ZlZDUyYTRk
LzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUyfMA0G
CSqGSIb3DQEBCwUAA4IBAQB9hDZxloCm76R8a5Ny8uOXKC3rIDVUnM2O+algb1sA
jl80cLWeV5y1VVWTpnCvIBvIQwafQ/J/Y9oyD8PYjHMp0+SDsjm+zhPe2nWCdeW4
0ictR3vojCMMRCQB49QapDjWMuOdlGaexd6K6xHCxcdZ9UNTGPb8jrAVU9lHvcP6
e/KwWVUgU2/vREyMoS4pNUNxP65Akqz3bvTRfx70VV0gljS6H+euFSXP130Ls7qN
XPcPtNonwgb/x4eIapkRxXLfAJYNmd1Jduc0qxRnpLpY1OGVE1aDY+vdBBQ1/dTf
6/lr9Fct9Bycy4AWIuiujUBr1DLqdiyxF2jwRL/ivkQe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:16 2024 by rpki-client on console-ams.rpki-client.org