Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/96V_g-VJHdlGfEPpY54yxs-r738.roa
File: 96V_g-VJHdlGfEPpY54yxs-r738.roa (raw, json)
Hash identifier: 49OyWXng9N5z+XZbOTUQz4PNtoo69b1laIGqEQ4o/6E=
Subject key identifier: F7:A5:7F:83:E5:49:1D:D9:46:7C:43:E9:63:9E:32:C6:CF:AB:EF:7F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0186A3CEE01429DC4D5C7A01C70A1FF866DB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/96V_g-VJHdlGfEPpY54yxs-r738.roa
Signing time: Thu 02 Mar 2023 19:31:29 +0000
ROA not before: Thu 02 Mar 2023 19:31:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.172.20.0/22 maxlen: 24
185.64.100.0/22 maxlen: 24
188.211.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:ce:e0:14:29:dc:4d:5c:7a:01:c7:0a:1f:f8:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 2 19:31:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7a57f83e5491dd9467c43e9639e32c6cfabef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:d2:2f:8a:48:05:bd:2a:84:19:0f:a0:da:
d2:5b:35:bd:56:26:3a:94:65:49:4a:45:61:1c:64:
f7:68:a7:6c:1c:57:e9:80:45:f1:92:6f:f7:24:b6:
22:97:b6:f0:29:43:84:5e:bd:73:df:e1:63:7b:d5:
08:9a:29:26:21:7e:94:26:36:b1:3b:bd:62:77:f0:
60:20:12:9e:3f:b7:f4:b5:61:24:e2:a1:63:5e:72:
83:d0:73:45:76:fe:53:de:00:7d:94:9b:82:59:76:
33:3c:62:88:bd:08:fa:d4:5b:a5:cb:ec:d1:e3:c9:
f9:41:bd:43:0c:bb:c0:6c:27:26:1a:60:2e:96:24:
28:a1:d0:e8:de:67:dc:9e:d4:b5:7c:d7:e0:e7:c5:
40:64:58:46:23:08:69:12:f8:27:59:1c:34:18:e3:
f0:24:6f:a3:c4:0b:1a:f9:df:fe:a2:6e:d4:cc:df:
2c:47:30:b7:7e:8d:07:9b:ad:09:c7:08:67:21:b7:
ef:6d:6c:1a:3d:7a:66:4d:49:a7:c4:cf:99:42:84:
38:9e:7c:bd:8e:fb:a1:64:46:1a:63:1b:62:1c:17:
e7:9d:00:c8:7d:5d:ca:5d:c0:9c:a2:24:18:aa:4f:
c5:e6:56:03:9c:7e:d0:42:62:7f:ed:22:e1:04:77:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A5:7F:83:E5:49:1D:D9:46:7C:43:E9:63:9E:32:C6:CF:AB:EF:7F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/96V_g-VJHdlGfEPpY54yxs-r738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.100.0/22
185.172.20.0/22
188.211.252.0/22
Signature Algorithm: sha256WithRSAEncryption
36:38:c6:24:5f:20:9d:29:b1:0f:68:53:ea:ed:15:3a:c1:96:
a2:02:d1:c7:cf:af:f2:ae:e8:8b:f6:f9:ed:ab:35:31:01:d6:
9b:a5:35:76:d1:1a:da:f7:72:8a:e5:57:fb:05:47:79:e2:f8:
eb:26:a4:05:b7:03:13:0d:d6:9d:f2:30:59:d0:9d:ab:76:45:
3f:10:7b:67:95:31:c3:4a:8f:3b:2e:85:9d:6f:d9:79:fc:33:
e1:17:c5:91:fc:69:13:7e:55:6d:a5:b4:77:da:e2:76:38:83:
3c:1c:90:b9:6b:2d:71:bf:fb:dd:a7:4e:b4:9a:83:ba:a6:de:
6a:76:71:61:ea:5d:97:05:7c:c2:c8:c9:6c:7c:19:4a:47:85:
c7:68:16:94:70:27:01:97:a5:19:d2:73:9c:5d:03:bd:ce:53:
f5:6d:6b:2e:a8:cf:31:e6:5b:ea:64:b3:e3:62:69:88:e1:1e:
c3:8b:8e:17:4e:e3:e8:2e:75:91:64:84:84:bf:bc:74:65:02:
4f:cf:5f:9e:27:4e:3a:fc:30:76:88:2e:31:80:1f:95:c0:36:
c6:69:0a:04:85:8b:a1:20:05:e5:f3:69:07:f3:10:72:17:34:
df:a3:dc:b8:b0:27:9d:c6:41:96:04:31:27:f2:5c:04:33:c6:
a2:e5:7e:09
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYajzuAUKdxNXHoBxwof+GbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwMzAyMTkzMTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2E1N2Y4M2U1NDkxZGQ5NDY3YzQzZTk2MzllMzJjNmNmYWJlZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh93SL4pIBb0qhBkPoNrSWzW9ViY6
lGVJSkVhHGT3aKdsHFfpgEXxkm/3JLYil7bwKUOEXr1z3+Fje9UImikmIX6UJjax
O71id/BgIBKeP7f0tWEk4qFjXnKD0HNFdv5T3gB9lJuCWXYzPGKIvQj61Fuly+zR
48n5Qb1DDLvAbCcmGmAuliQoodDo3mfcntS1fNfg58VAZFhGIwhpEvgnWRw0GOPw
JG+jxAsa+d/+om7UzN8sRzC3fo0Hm60JxwhnIbfvbWwaPXpmTUmnxM+ZQoQ4nny9
jvuhZEYaYxtiHBfnnQDIfV3KXcCcoiQYqk/F5lYDnH7QQmJ/7SLhBHeV/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPelf4PlSR3ZRnxD6WOeMsbPq+9/MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvOTZWX2ctVkpIZGxHZkVQcFk1NHl4cy1yNzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuUBkAwQC
uawUAwQCvNP8MA0GCSqGSIb3DQEBCwUAA4IBAQA2OMYkXyCdKbEPaFPq7RU6wZai
AtHHz6/yruiL9vntqzUxAdabpTV20Rra93KK5Vf7BUd54vjrJqQFtwMTDdad8jBZ
0J2rdkU/EHtnlTHDSo87LoWdb9l5/DPhF8WR/GkTflVtpbR32uJ2OIM8HJC5ay1x
v/vdp060moO6pt5qdnFh6l2XBXzCyMlsfBlKR4XHaBaUcCcBl6UZ0nOcXQO9zlP1
bWsuqM8x5lvqZLPjYmmI4R7Di44XTuPoLnWRZISEv7x0ZQJPz1+eJ046/DB2iC4x
gB+VwDbGaQoEhYuhIAXl82kH8xByFzTfo9y4sCedxkGWBDEn8lwEM8ai5X4J
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org