Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/DOV9lJdouUUPW3lhxN1wtRspOyw.roa
File: DOV9lJdouUUPW3lhxN1wtRspOyw.roa (raw, json)
Hash identifier: FfGhAiHlafeJyFfwWOesXD4hwL+C0JUFLN0/wOFkAg8=
Subject key identifier: 0C:E5:7D:94:97:68:B9:45:0F:5B:79:61:C4:DD:70:B5:1B:29:3B:2C
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018977A2D3427B6C6A9718942FA5BDA2E6AB
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/DOV9lJdouUUPW3lhxN1wtRspOyw.roa
Signing time: Fri 21 Jul 2023 08:48:26 +0000
ROA not before: Fri 21 Jul 2023 08:48:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202423
IP address blocks: 185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.142.97.0/24 maxlen: 24
185.142.96.0/24 maxlen: 24
185.142.98.0/24 maxlen: 24
194.187.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:a2:d3:42:7b:6c:6a:97:18:94:2f:a5:bd:a2:e6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jul 21 08:48:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce57d949768b9450f5b7961c4dd70b51b293b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:f5:e3:85:a2:3d:35:8f:38:b5:f2:02:6b:
3c:38:19:50:5e:a7:8a:0b:d1:2a:02:3d:53:a8:99:
40:bc:fe:b6:76:32:d9:16:94:2e:97:2a:e5:a9:b9:
a1:19:6e:7e:a7:1f:42:a9:a5:75:ff:3a:bb:ad:bb:
aa:c7:fb:fa:21:79:e0:52:3e:35:f0:e7:a3:57:30:
a4:b6:03:1d:07:b1:90:47:37:68:93:c4:61:97:48:
53:fc:8d:8f:01:f3:c8:5e:af:53:74:67:02:5a:88:
74:23:0f:8e:24:2e:d0:42:71:c9:42:1b:50:85:09:
34:af:30:6e:b4:ad:9f:e6:1e:f8:78:3b:ba:18:be:
0a:06:1b:92:af:18:f4:b6:f3:c3:3d:f5:c7:b7:e2:
8c:40:d0:e9:a0:07:7a:7b:b5:50:ab:af:ba:a8:cb:
83:17:1b:88:ad:b5:0d:84:8a:84:ca:3c:fe:db:7a:
ef:bb:5c:c9:24:71:a5:a3:95:db:5c:3c:d9:d0:c2:
82:bb:6f:44:93:b9:0c:28:a4:82:45:9f:2f:63:94:
be:99:2c:c3:13:d7:c7:47:7c:30:ee:8e:a2:d2:9a:
6e:f5:4f:4d:a4:98:e2:cb:15:66:93:c2:f9:4f:41:
10:74:32:3c:33:ef:9d:b8:bd:90:bd:43:e9:b0:f0:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:7D:94:97:68:B9:45:0F:5B:79:61:C4:DD:70:B5:1B:29:3B:2C
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/DOV9lJdouUUPW3lhxN1wtRspOyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.96.0-185.142.98.255
185.239.50.0/23
194.187.123.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7e:d9:49:07:9c:f9:86:f0:e9:23:fc:c2:c5:55:e5:09:14:
70:e7:f9:c6:8d:ac:aa:15:5d:15:4d:f9:e7:38:1d:06:23:e7:
f8:4b:7c:7a:ce:28:14:2d:e3:5c:30:94:79:df:40:db:bf:d1:
84:4a:e2:cd:02:48:ed:62:6c:c7:de:9d:1d:c1:d4:7c:f5:ee:
4c:5a:0c:81:5e:30:bc:ec:17:14:5d:f0:7d:96:99:35:ef:9d:
66:0f:7c:15:15:fd:81:23:32:05:69:b5:d1:9e:e5:ff:be:f1:
c5:3f:42:69:97:c3:53:fa:ec:9a:3a:9f:37:3d:1f:dc:c4:01:
ed:a6:e1:ac:c5:c5:85:ce:c5:04:a5:17:b6:9e:75:75:44:b7:
f9:2f:b9:9c:6a:f3:0e:b2:61:37:f7:8f:ab:ec:43:c4:5e:17:
80:83:9c:ad:b9:82:35:d1:71:2f:5c:94:23:c9:8e:db:2e:14:
ba:95:2a:6c:2b:12:73:bb:8e:74:5a:ac:46:1b:24:36:35:4f:
68:b2:b5:4c:6a:8f:e9:b4:85:b3:9f:86:64:ac:a5:63:5f:64:
ee:73:37:cf:00:1b:c4:e3:ae:24:6a:da:b1:1c:69:e0:01:d7:
04:97:ba:a0:f9:ad:17:1a:f6:a6:4c:9d:66:d6:45:79:62:7f:
20:24:2f:a3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYl3otNCe2xqlxiUL6W9ouarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjMwNzIxMDg0ODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U1N2Q5NDk3NjhiOTQ1MGY1Yjc5NjFjNGRkNzBiNTFiMjkzYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhID144WiPTWPOLXyAms8OBlQXqeK
C9EqAj1TqJlAvP62djLZFpQulyrlqbmhGW5+px9CqaV1/zq7rbuqx/v6IXngUj41
8OejVzCktgMdB7GQRzdok8Rhl0hT/I2PAfPIXq9TdGcCWoh0Iw+OJC7QQnHJQhtQ
hQk0rzButK2f5h74eDu6GL4KBhuSrxj0tvPDPfXHt+KMQNDpoAd6e7VQq6+6qMuD
FxuIrbUNhIqEyjz+23rvu1zJJHGlo5XbXDzZ0MKCu29Ek7kMKKSCRZ8vY5S+mSzD
E9fHR3ww7o6i0ppu9U9NpJjiyxVmk8L5T0EQdDI8M++duL2QvUPpsPBWMwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAzlfZSXaLlFD1t5YcTdcLUbKTssMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvRE9WOWxKZG91VVVQVzNsaHhOMXd0UnNwT3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAW5jmAD
BAC5jmIDBAG57zIDBADCu3swDQYJKoZIhvcNAQELBQADggEBAFF+2UkHnPmG8Okj
/MLFVeUJFHDn+caNrKoVXRVN+ec4HQYj5/hLfHrOKBQt41wwlHnfQNu/0YRK4s0C
SO1ibMfenR3B1Hz17kxaDIFeMLzsFxRd8H2WmTXvnWYPfBUV/YEjMgVptdGe5f++
8cU/QmmXw1P67Jo6nzc9H9zEAe2m4azFxYXOxQSlF7aedXVEt/kvuZxq8w6yYTf3
j6vsQ8ReF4CDnK25gjXRcS9clCPJjtsuFLqVKmwrEnO7jnRarEYbJDY1T2iytUxq
j+m0hbOfhmSspWNfZO5zN88AG8TjriRq2rEcaeAB1wSXuqD5rRca9qZMnWbWRXli
fyAkL6M=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:10 2024 by rpki-client on console-fra.rpki-client.org