Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/f1r5hSWGfAxlvR6YLk6UB9mieck.roa
File: f1r5hSWGfAxlvR6YLk6UB9mieck.roa (raw, json)
Hash identifier: 29b3aFYhDyO8o9p4MUTUINbagfLZHZv4xH1V+hIH8oM=
Subject key identifier: 7F:5A:F9:85:25:86:7C:0C:65:BD:1E:98:2E:4E:94:07:D9:A2:79:C9
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD205322C8AD183C6731FFC502EE4
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/f1r5hSWGfAxlvR6YLk6UB9mieck.roa
Signing time: Sun 01 Jan 2023 09:14:54 +0000
ROA not before: Sun 01 Jan 2023 09:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199833
IP address blocks: 81.177.254.0/23 maxlen: 23
81.177.186.0/24 maxlen: 24
2a03:aa00:1000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d2:05:32:2c:8a:d1:83:c6:73:1f:fc:50:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f5af98525867c0c65bd1e982e4e9407d9a279c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:b2:35:3c:7f:6d:56:f9:b7:32:64:5c:77:
ec:70:2b:39:5f:59:12:09:2e:e9:16:a9:07:b8:38:
85:ff:45:7d:95:6b:42:4d:e3:1d:61:2b:2a:9f:5e:
f1:40:5c:ce:9e:fb:a2:73:ff:bd:f7:20:ae:75:3d:
5f:1c:7e:f3:50:32:3f:9b:03:51:da:e3:ae:29:a7:
67:90:70:69:eb:5b:91:9a:71:55:6a:07:30:ec:03:
87:93:1f:81:76:b5:b6:07:ab:89:c5:33:da:d0:be:
4f:78:40:7a:89:63:27:b2:47:12:64:1e:1a:c4:02:
36:49:37:df:9d:d8:80:8a:4a:3a:fa:dd:71:8a:d7:
27:d0:a1:85:1c:a3:bd:c8:b2:bc:e8:a6:da:7d:2d:
25:f3:d6:b7:cd:a4:26:7d:0b:f4:f7:d8:23:42:7d:
a9:01:0c:a2:44:86:0e:0e:be:30:07:19:08:b4:e1:
92:a5:4a:30:9a:f8:84:15:80:90:dc:1a:dc:2e:9d:
e3:a6:11:84:69:6e:e4:bb:b6:ba:d8:1c:8b:eb:6d:
33:86:ce:1f:bc:7e:43:f3:39:03:a7:5a:32:02:e2:
37:30:64:38:f6:0c:1b:fc:06:8b:70:77:84:22:6b:
09:a7:f1:39:d6:11:76:af:e6:51:a9:67:d5:0c:e2:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5A:F9:85:25:86:7C:0C:65:BD:1E:98:2E:4E:94:07:D9:A2:79:C9
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/f1r5hSWGfAxlvR6YLk6UB9mieck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.186.0/24
81.177.254.0/23
IPv6:
2a03:aa00:1000::/48
Signature Algorithm: sha256WithRSAEncryption
91:c0:bf:3e:da:1e:fe:45:a3:6d:74:f0:6c:d5:6f:6d:1d:90:
92:0e:86:dd:3a:74:5e:f7:fa:00:83:d7:49:5c:fb:74:15:71:
f0:78:26:ff:95:50:3b:de:14:47:fc:ba:7b:fe:f9:f0:0d:a5:
ac:6d:47:ce:a8:c7:f6:c4:fe:ce:b0:bf:84:3f:de:76:20:ff:
55:68:56:17:89:31:bb:c4:b0:30:56:a6:48:7c:ff:5d:0e:8a:
63:b4:c7:bb:52:bb:4e:6e:04:0b:49:2d:70:f4:3b:30:61:6a:
70:3f:c3:68:26:61:28:1d:cd:f4:69:cd:19:90:1d:ae:9d:0d:
b9:be:00:e2:c2:b9:a9:5b:31:34:ed:91:3b:a6:20:b6:70:85:
e9:10:f1:22:df:6c:62:01:ec:fe:37:48:6c:47:21:c3:7c:9b:
b1:18:65:14:51:95:ec:d0:20:3c:fd:24:15:43:13:7d:67:6c:
75:f4:e6:53:03:18:81:1c:ee:3b:ea:99:14:ec:95:c0:2b:f5:
68:8d:3e:6e:96:0f:35:4b:c0:b1:b2:75:b6:77:a5:32:5b:51:
f6:c0:1b:7f:90:a0:33:31:53:24:67:f9:3b:47:d9:f7:8c:d7:
0e:4d:1a:01:5f:90:48:9d:15:d1:ea:ec:e1:1b:0c:c4:04:39:
f3:2a:dc:59
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVsnNIFMiyK0YPGcx/8UC7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjMwMTAxMDkxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVhZjk4NTI1ODY3YzBjNjViZDFlOTgyZTRlOTQwN2Q5YTI3OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT+yNTx/bVb5tzJkXHfscCs5X1kS
CS7pFqkHuDiF/0V9lWtCTeMdYSsqn17xQFzOnvuic/+99yCudT1fHH7zUDI/mwNR
2uOuKadnkHBp61uRmnFVagcw7AOHkx+BdrW2B6uJxTPa0L5PeEB6iWMnskcSZB4a
xAI2STffndiAiko6+t1xitcn0KGFHKO9yLK86KbafS0l89a3zaQmfQv099gjQn2p
AQyiRIYODr4wBxkItOGSpUowmviEFYCQ3BrcLp3jphGEaW7ku7a62ByL620zhs4f
vH5D8zkDp1oyAuI3MGQ49gwb/AaLcHeEImsJp/E51hF2r+ZRqWfVDOKeDQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFH9a+YUlhnwMZb0emC5OlAfZonnJMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvZjFyNWhTV0dmQXhsdlI2WUxrNlVCOW1pZWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUbG6AwQB
UbH+MA8EAgACMAkDBwAqA6oAEAAwDQYJKoZIhvcNAQELBQADggEBAJHAvz7aHv5F
o2108GzVb20dkJIOht06dF73+gCD10lc+3QVcfB4Jv+VUDveFEf8unv++fANpaxt
R86ox/bE/s6wv4Q/3nYg/1VoVheJMbvEsDBWpkh8/10OimO0x7tSu05uBAtJLXD0
OzBhanA/w2gmYSgdzfRpzRmQHa6dDbm+AOLCualbMTTtkTumILZwhekQ8SLfbGIB
7P43SGxHIcN8m7EYZRRRlezQIDz9JBVDE31nbHX05lMDGIEc7jvqmRTslcAr9WiN
Pm6WDzVLwLGydbZ3pTJbUfbAG3+QoDMxUyRn+TtH2feM1w5NGgFfkEidFdHq7OEb
DMQEOfMq3Fk=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:55 2024 by rpki-client on console-ams.rpki-client.org