Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/xs1BZEOxGlAoL-bkAUQhNr3UF3I.roa
File: xs1BZEOxGlAoL-bkAUQhNr3UF3I.roa (raw, json)
Hash identifier: 6gqYIIwmazfZuJrJhmf6pjTA9CHTkVMKVWGw3f4zPYA=
Subject key identifier: C6:CD:41:64:43:B1:1A:50:28:2F:E6:E4:01:44:21:36:BD:D4:17:72
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018672B3966AA9D0B832C2369262F92DA825
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/xs1BZEOxGlAoL-bkAUQhNr3UF3I.roa
Signing time: Tue 21 Feb 2023 06:40:17 +0000
ROA not before: Tue 21 Feb 2023 06:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61156
IP address blocks: 185.17.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 May 2023 07:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:b3:96:6a:a9:d0:b8:32:c2:36:92:62:f9:2d:a8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Feb 21 06:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6cd416443b11a50282fe6e401442136bdd41772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:cb:c8:c6:ac:22:93:5c:43:20:27:2d:9b:
7f:cb:f0:b2:42:ef:08:91:86:37:94:90:f8:1b:8e:
f9:89:86:31:ba:b7:73:a8:59:63:27:76:15:d1:e6:
5b:6a:05:25:a1:32:6e:fe:af:90:3d:84:f8:a8:4a:
e6:f2:b5:b2:17:b7:5b:99:88:f0:0a:81:48:e4:d7:
7b:ec:84:56:5d:d1:02:f9:b0:f5:14:45:dd:8c:a4:
bd:30:8c:88:66:00:49:5b:7e:28:11:51:a0:25:1d:
ea:72:c3:d5:d0:f7:01:a2:a8:6e:5e:c2:e2:bd:c0:
3f:08:a2:28:41:42:74:4b:e0:ab:08:d1:4c:ee:84:
e4:a1:67:d8:96:06:e4:de:83:9d:c8:cc:df:f1:7f:
b7:96:8f:2c:82:7e:3a:fe:e5:b1:26:0c:ba:d3:fa:
67:2a:62:af:01:e1:7f:30:c2:2a:53:ba:12:c3:ac:
e9:cb:dc:11:a3:d6:d8:ec:2f:da:4b:21:d5:c2:21:
09:cc:3e:6a:be:c2:3a:ef:a9:25:af:07:f4:e2:1e:
72:49:48:5c:cc:4a:98:bd:02:49:d3:17:95:ee:14:
9e:d1:a1:53:99:de:88:e2:a9:e4:81:82:63:d0:ab:
81:5f:ee:3e:29:95:25:d5:fe:3a:dc:38:e6:e8:5d:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:41:64:43:B1:1A:50:28:2F:E6:E4:01:44:21:36:BD:D4:17:72
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/xs1BZEOxGlAoL-bkAUQhNr3UF3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c0:8f:73:ca:80:d2:c1:b4:69:4a:21:d2:ba:36:70:85:d2:
46:14:73:93:e8:a5:88:d4:a7:39:19:e0:b7:88:1e:73:de:2c:
82:84:02:b4:e9:7d:40:e0:03:e7:46:8e:f7:26:38:1e:60:80:
86:32:e2:59:da:37:02:fd:d0:ce:c0:7c:68:d4:2e:2e:fe:da:
90:1f:d4:3e:85:6b:01:4e:eb:61:3d:2d:3d:3b:32:d4:0a:99:
27:d2:ae:9d:0e:ca:a1:df:ef:0c:f4:49:ea:01:88:d0:80:7f:
da:fe:58:ed:c5:f2:39:73:ce:69:72:57:25:56:84:6d:99:dd:
09:8c:27:93:dd:96:4b:a3:c4:e5:28:62:07:ad:2c:af:bd:de:
2f:21:30:23:ab:a7:30:16:3b:d8:02:23:80:17:a5:49:36:05:
92:53:2e:5c:46:1d:ec:69:96:e1:81:af:a6:2f:1f:b9:5f:0e:
84:7b:95:d3:cb:77:a5:2a:81:59:de:25:f0:d7:d0:69:11:3f:
93:b2:16:32:36:14:fb:be:f9:ee:66:3d:fe:15:b6:c3:06:76:
7b:96:16:b0:54:68:7b:3a:fb:53:27:da:f3:b0:8e:b5:f6:a3:
28:99:3d:ae:4d:1b:1c:3b:65:69:d1:20:6d:93:25:28:f1:37:
aa:93:6e:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZys5ZqqdC4MsI2kmL5LaglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjMwMjIxMDY0MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmNkNDE2NDQzYjExYTUwMjgyZmU2ZTQwMTQ0MjEzNmJkZDQxNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2jLyMasIpNcQyAnLZt/y/CyQu8I
kYY3lJD4G475iYYxurdzqFljJ3YV0eZbagUloTJu/q+QPYT4qErm8rWyF7dbmYjw
CoFI5Nd77IRWXdEC+bD1FEXdjKS9MIyIZgBJW34oEVGgJR3qcsPV0PcBoqhuXsLi
vcA/CKIoQUJ0S+CrCNFM7oTkoWfYlgbk3oOdyMzf8X+3lo8sgn46/uWxJgy60/pn
KmKvAeF/MMIqU7oSw6zpy9wRo9bY7C/aSyHVwiEJzD5qvsI676klrwf04h5ySUhc
zEqYvQJJ0xeV7hSe0aFTmd6I4qnkgYJj0KuBX+4+KZUl1f463Djm6F3ZdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbNQWRDsRpQKC/m5AFEITa91BdyMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEveHMxQlpFT3hHbEFvTC1ia0FVUWhOcjNVRjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRFUMA0G
CSqGSIb3DQEBCwUAA4IBAQAUwI9zyoDSwbRpSiHSujZwhdJGFHOT6KWI1Kc5GeC3
iB5z3iyChAK06X1A4APnRo73JjgeYICGMuJZ2jcC/dDOwHxo1C4u/tqQH9Q+hWsB
TuthPS09OzLUCpkn0q6dDsqh3+8M9EnqAYjQgH/a/ljtxfI5c85pclclVoRtmd0J
jCeT3ZZLo8TlKGIHrSyvvd4vITAjq6cwFjvYAiOAF6VJNgWSUy5cRh3saZbhga+m
Lx+5Xw6Ee5XTy3elKoFZ3iXw19BpET+TshYyNhT7vvnuZj3+FbbDBnZ7lhawVGh7
OvtTJ9rzsI619qMomT2uTRscO2Vp0SBtkyUo8Teqk25Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org