Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8aGSXgOorqb2zs5CclsX2BCt4CY.roa
File: 8aGSXgOorqb2zs5CclsX2BCt4CY.roa (raw, json)
Hash identifier: zqhpIZpUpJzuHQ5y/LlzDhONmkOc2y6At2joU8Q1MCE=
Subject key identifier: F1:A1:92:5E:03:A8:AE:A6:F6:CE:CE:42:72:5B:17:D8:10:AD:E0:26
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01856FCBADB29631B0BB54E8A076D0BD25EC
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8aGSXgOorqb2zs5CclsX2BCt4CY.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57717
IP address blocks: 185.173.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ad:b2:96:31:b0:bb:54:e8:a0:76:d0:bd:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a1925e03a8aea6f6cece42725b17d810ade026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:91:bb:a5:c5:c7:b2:81:e2:d6:b0:f4:17:
64:b2:bd:fd:b6:81:ed:01:c7:51:b2:cd:85:7a:eb:
e9:46:7a:02:d4:df:13:dd:49:75:e9:5b:a6:6f:ef:
f8:5f:2f:a5:68:36:15:1f:8c:24:44:08:ae:e8:85:
6e:60:1a:b6:07:5c:af:58:20:7c:aa:30:09:88:8f:
77:a7:8f:f0:da:33:61:f9:d3:26:a3:6f:a2:65:3b:
8f:23:d9:4d:40:04:c2:dd:06:60:83:7b:e9:6f:f8:
94:a1:43:ce:77:76:6a:fb:ae:b3:d0:49:43:1c:df:
fd:40:76:17:65:a2:98:f3:a4:88:14:f4:4d:01:42:
64:99:d6:df:3e:63:bd:fd:06:6f:a0:9c:97:14:a3:
cc:a4:58:67:4c:67:f9:cc:75:60:9f:49:7e:db:c3:
af:39:05:96:43:84:4d:fc:d5:9a:93:0d:8c:66:2b:
cf:39:af:9f:9c:2e:10:97:a6:75:fa:f6:11:c4:e7:
6e:a5:9a:7d:8b:8e:c8:62:8b:f3:f6:9d:8b:23:e9:
28:77:87:d9:2f:98:7e:94:5e:22:f2:11:ce:bb:85:
3f:f4:14:9f:f9:cb:2b:fd:e5:db:2f:fe:3c:9b:7a:
a0:a0:65:93:50:6b:07:7d:1a:e4:d6:a2:cf:df:a4:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:92:5E:03:A8:AE:A6:F6:CE:CE:42:72:5B:17:D8:10:AD:E0:26
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8aGSXgOorqb2zs5CclsX2BCt4CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.235.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9f:e3:c0:8f:ec:0b:dc:3e:bf:ed:78:ca:2c:47:db:bd:b1:
be:b1:19:07:75:e8:6b:f4:c4:4e:c7:7e:1f:30:91:96:b3:00:
e5:1b:a7:07:ec:fa:86:6d:60:c1:2b:eb:15:a8:06:e2:7c:dc:
87:14:6f:55:7d:b0:7e:28:ef:cd:2a:33:5c:ae:24:06:2f:db:
15:7c:e4:d8:9c:88:78:56:bb:b9:d1:7b:1c:13:55:a9:90:d3:
a3:c7:ca:ef:98:ef:8c:9b:d7:3e:fb:1c:f1:29:13:f3:07:6e:
e2:44:b4:ab:7d:f1:a0:45:62:2e:29:e5:ae:da:b5:6e:b9:ad:
ca:c7:a3:c3:4c:ab:e6:97:5e:a8:6a:1b:d7:31:63:10:af:b2:
2c:0c:19:1f:a3:b1:fe:48:6f:f0:e3:f9:f3:3b:ec:51:cc:5e:
92:88:65:ea:8a:ed:b0:ae:5e:8c:b6:35:43:3e:19:4a:25:d0:
4a:86:ba:d9:49:f0:57:a3:f7:61:50:74:f8:9b:2a:72:01:3b:
61:3e:8a:38:16:a9:bf:7c:f9:ac:11:23:d0:5d:cd:f7:35:4c:
3e:27:28:2a:c9:d1:55:bd:c4:21:66:c7:bf:bf:9a:13:f6:fc:
29:f7:61:1a:3c:63:3a:19:84:18:38:7e:25:1d:56:b7:c3:46:
9c:5f:5f:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy62yljGwu1TooHbQvSXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2
NGFiNzEwHhcNMjMwMTAyMDAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWExOTI1ZTAzYThhZWE2ZjZjZWNlNDI3MjViMTdkODEwYWRlMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D+Ru6XFx7KB4taw9Bdksr39toHt
AcdRss2FeuvpRnoC1N8T3Ul16Vumb+/4Xy+laDYVH4wkRAiu6IVuYBq2B1yvWCB8
qjAJiI93p4/w2jNh+dMmo2+iZTuPI9lNQATC3QZgg3vpb/iUoUPOd3Zq+66z0ElD
HN/9QHYXZaKY86SIFPRNAUJkmdbfPmO9/QZvoJyXFKPMpFhnTGf5zHVgn0l+28Ov
OQWWQ4RN/NWakw2MZivPOa+fnC4Ql6Z1+vYRxOdupZp9i47IYovz9p2LI+kod4fZ
L5h+lF4i8hHOu4U/9BSf+csr/eXbL/48m3qgoGWTUGsHfRrk1qLP36TJrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGhkl4DqK6m9s7OQnJbF9gQreAmMB8GA1UdIwQY
MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt
NGM4ODgzMzI3YTJhLzEvOGFHU1hnT29ycWIyenM1Q2Nsc1gyQkN0NENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh
LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua3rMA0G
CSqGSIb3DQEBCwUAA4IBAQBIn+PAj+wL3D6/7XjKLEfbvbG+sRkHdehr9MROx34f
MJGWswDlG6cH7PqGbWDBK+sVqAbifNyHFG9VfbB+KO/NKjNcriQGL9sVfOTYnIh4
Vru50XscE1WpkNOjx8rvmO+Mm9c++xzxKRPzB27iRLSrffGgRWIuKeWu2rVuua3K
x6PDTKvml16oahvXMWMQr7IsDBkfo7H+SG/w4/nzO+xRzF6SiGXqiu2wrl6MtjVD
PhlKJdBKhrrZSfBXo/dhUHT4mypyATthPoo4Fqm/fPmsESPQXc33NUw+JygqydFV
vcQhZse/v5oT9vwp92EaPGM6GYQYOH4lHVa3w0acX19y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-fra.rpki-client.org