Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/xu6uW_BmkrvQq1av-weLImQmeSE.roa
File: xu6uW_BmkrvQq1av-weLImQmeSE.roa (raw, json)
Hash identifier: vXS8TkkUs2QJ4iQlNf+cq/CXC7Z/JK1g8y4k4OoUzUA=
Subject key identifier: C6:EE:AE:5B:F0:66:92:BB:D0:AB:56:AF:FB:07:8B:22:64:26:79:21
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 01856F2FE379EE81C7EB7E4F8DBA3A7F8760
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/xu6uW_BmkrvQq1av-weLImQmeSE.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62223
IP address blocks: 185.42.192.0/24 maxlen: 24
185.42.192.0/22 maxlen: 22
185.42.194.0/24 maxlen: 24
185.42.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e3:79:ee:81:c7:eb:7e:4f:8d:ba:3a:7f:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6eeae5bf06692bbd0ab56affb078b2264267921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:4a:b2:11:3e:2f:79:4d:cb:92:ac:a1:de:
3e:83:ea:49:42:b7:c1:a6:c3:32:b0:3d:bf:28:86:
f4:97:fe:19:e6:2b:45:d1:f0:8e:ab:63:47:3c:cb:
b0:e0:5c:34:f8:81:5e:70:5e:6d:d9:dc:3f:e4:7e:
c9:37:0e:19:8f:0d:a8:82:ab:5f:a4:b4:1f:e5:55:
3d:4e:d1:eb:32:9e:2f:e3:42:94:92:ef:bb:e1:39:
ec:3d:79:c0:f2:96:bf:cc:99:93:36:c9:d0:0b:53:
33:ee:75:86:2d:37:1e:6f:8f:ab:06:51:da:27:76:
45:3b:80:fc:c6:45:84:cb:2a:e8:15:94:f6:39:e8:
be:47:3e:c4:36:64:49:93:ff:e9:84:31:63:2f:35:
c1:b4:39:e4:e4:dd:ab:97:19:82:6a:33:b5:58:d0:
d6:e2:88:9b:7d:57:f0:d3:fe:9a:51:13:03:eb:84:
ab:d5:1e:f5:41:47:aa:a8:52:30:ac:e2:64:85:5f:
99:af:62:8a:07:6b:85:88:62:74:a8:b4:b5:8d:3b:
d3:3e:20:54:a3:f9:e5:5d:0e:a3:ea:01:19:1a:15:
78:96:d0:b1:fc:d3:59:e7:25:c8:47:3e:fd:2b:97:
62:0b:e8:13:99:40:0a:38:aa:d6:42:1f:d4:32:51:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:AE:5B:F0:66:92:BB:D0:AB:56:AF:FB:07:8B:22:64:26:79:21
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/xu6uW_BmkrvQq1av-weLImQmeSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
15:0b:3b:3c:c8:8f:62:15:62:00:99:88:06:de:bf:b5:3d:03:
00:fa:65:0f:f4:b3:7d:be:fb:01:dd:d3:a7:43:67:2e:4e:9c:
ed:49:8a:db:b2:57:27:b6:99:bd:be:7f:ea:ae:79:88:e8:b7:
f9:14:b1:03:e9:3b:c3:a6:1d:bd:84:28:cc:6a:56:49:0e:34:
d1:7a:fe:4f:53:7b:68:a5:39:03:a8:e5:f1:e3:d2:2f:32:71:
8a:27:3b:f7:45:c9:f3:45:1d:ba:67:e1:ea:08:45:32:d9:3d:
7a:fc:23:77:35:66:d1:0b:9c:58:59:13:e9:0d:55:34:a4:ef:
6d:5f:db:af:96:ae:5a:69:55:aa:9c:c4:82:f4:9c:b4:58:dd:
81:d2:bc:23:a3:65:4f:da:5e:d9:f4:31:f8:e6:12:5c:1a:28:
80:23:ad:b1:10:85:42:41:da:5a:4d:00:95:e9:ec:2b:dd:da:
c9:66:04:eb:d9:fe:41:57:b5:a7:38:46:dc:1d:9b:ec:0d:16:
5b:1a:a3:56:ce:e3:b0:f8:18:f9:08:89:2c:16:5f:b9:d2:9f:
e7:11:d8:93:37:b0:f8:83:f2:b0:ff:d9:62:72:e9:65:bb:ec:
54:c6:bc:5a:b2:37:de:05:f6:47:fa:3f:83:3d:c1:0d:4c:ba:
85:a7:71:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvL+N57oHH635Pjbo6f4dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YWMxNjBkYTk5YjM0OTRhNTZiNTQ3YzY4YThlMmMwOTE4
NjkxYjUwHhcNMjMwMTAxMjExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmVlYWU1YmYwNjY5MmJiZDBhYjU2YWZmYjA3OGIyMjY0MjY3OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ5KshE+L3lNy5Ksod4+g+pJQrfB
psMysD2/KIb0l/4Z5itF0fCOq2NHPMuw4Fw0+IFecF5t2dw/5H7JNw4Zjw2ogqtf
pLQf5VU9TtHrMp4v40KUku+74TnsPXnA8pa/zJmTNsnQC1Mz7nWGLTceb4+rBlHa
J3ZFO4D8xkWEyyroFZT2Oei+Rz7ENmRJk//phDFjLzXBtDnk5N2rlxmCajO1WNDW
4oibfVfw0/6aURMD64Sr1R71QUeqqFIwrOJkhV+Zr2KKB2uFiGJ0qLS1jTvTPiBU
o/nlXQ6j6gEZGhV4ltCx/NNZ5yXIRz79K5diC+gTmUAKOKrWQh/UMlGzhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMburlvwZpK70KtWr/sHiyJkJnkhMB8GA1UdIwQY
MBaAFBasFg2pmzSUpWtUfGio4sCRhpG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYt
MWU2OTEyNjg5ZGQ4LzEveHU2dVdfQm1rcnZRcTFhdi13ZUxJbVFtZVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYtMWU2OTEyNjg5ZGQ4
LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSrAMA0G
CSqGSIb3DQEBCwUAA4IBAQAVCzs8yI9iFWIAmYgG3r+1PQMA+mUP9LN9vvsB3dOn
Q2cuTpztSYrbslcntpm9vn/qrnmI6Lf5FLED6TvDph29hCjMalZJDjTRev5PU3to
pTkDqOXx49IvMnGKJzv3RcnzRR26Z+HqCEUy2T16/CN3NWbRC5xYWRPpDVU0pO9t
X9uvlq5aaVWqnMSC9Jy0WN2B0rwjo2VP2l7Z9DH45hJcGiiAI62xEIVCQdpaTQCV
6ewr3drJZgTr2f5BV7WnOEbcHZvsDRZbGqNWzuOw+Bj5CIksFl+50p/nEdiTN7D4
g/Kw/9licullu+xUxrxasjfeBfZH+j+DPcENTLqFp3H3
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:14 2024 by rpki-client on console-fra.rpki-client.org