Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/M4dWcdfAN7TRdRdyTJ4SVx8_oQs.roa
File: M4dWcdfAN7TRdRdyTJ4SVx8_oQs.roa (raw, json)
Hash identifier: gfUPv4p+HUaoWDc0xgF0OhbW1OivPC0GNwS2p3T2Ae4=
Subject key identifier: 33:87:56:71:D7:C0:37:B4:D1:75:17:72:4C:9E:12:57:1F:3F:A1:0B
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0188765267B62712C52A39CFE76C5984BDF3
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/M4dWcdfAN7TRdRdyTJ4SVx8_oQs.roa
Signing time: Thu 01 Jun 2023 09:38:11 +0000
ROA not before: Thu 01 Jun 2023 09:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199749
IP address blocks: 185.47.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:52:67:b6:27:12:c5:2a:39:cf:e7:6c:59:84:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jun 1 09:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33875671d7c037b4d17517724c9e12571f3fa10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:80:82:7d:63:72:8e:4e:29:6f:5d:bc:ce:
a6:ed:b5:85:9a:7e:da:e6:39:8f:03:9a:bd:ae:ff:
f5:83:ec:74:52:81:0e:4f:57:7a:bb:c1:3c:05:52:
a0:53:32:6f:5c:9f:e4:e6:93:0d:fc:ae:a4:53:69:
4c:5e:d1:87:a3:2f:ff:d7:fa:46:18:43:d7:f2:fe:
ef:02:10:dc:8b:f0:6b:15:71:67:99:cc:9d:68:2d:
c0:9d:90:7d:ab:22:62:34:67:fd:db:37:0c:c9:46:
20:86:bc:44:58:df:58:5a:48:76:e8:23:92:dc:3c:
dd:c6:d2:07:a9:05:dc:1e:de:4f:40:2c:b0:7a:26:
33:65:c9:bb:1b:f4:a5:13:dd:c9:06:2d:e0:81:c0:
9b:57:75:42:20:fe:c3:42:9c:de:29:ee:e2:58:ce:
10:82:b5:32:47:25:23:cf:1d:53:6f:cf:ef:a8:df:
ca:63:76:2b:7a:3b:2e:9f:01:6a:77:49:43:c7:99:
47:f4:22:48:02:cd:54:6a:7b:6d:ed:6e:ba:49:9b:
7e:14:ed:34:15:69:b4:58:63:3a:4d:02:25:35:9c:
ba:f9:88:30:2d:f1:ee:6d:a1:95:e5:b3:6f:23:12:
d4:ab:1a:ae:8e:68:38:bb:f9:66:99:54:3b:9b:d1:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:56:71:D7:C0:37:B4:D1:75:17:72:4C:9E:12:57:1F:3F:A1:0B
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/M4dWcdfAN7TRdRdyTJ4SVx8_oQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.83.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6b:d8:5e:06:20:ee:b1:3c:b0:b1:bf:c4:0d:ea:27:83:04:
cd:9d:08:d0:6d:d0:fc:26:d9:93:2c:c9:db:23:14:85:00:b8:
e5:2e:2e:64:1c:65:01:8b:9c:58:06:09:a2:47:0f:28:c9:9f:
2d:94:f0:e9:20:48:fb:6c:ee:ee:30:d2:95:3c:d3:c7:f6:82:
3c:ce:7d:24:9a:0b:ef:89:1b:d3:5e:25:71:38:04:5c:c9:27:
63:56:ff:b1:0b:e5:06:4b:e2:ff:f5:b7:e5:04:6d:68:b9:83:
9f:bd:d4:19:53:32:c0:92:77:29:bd:36:f9:99:45:c9:33:41:
22:76:60:4d:35:6f:9c:93:09:2c:e2:5d:cd:e1:59:d9:32:5b:
31:bd:67:c8:50:5f:79:8e:e7:f6:2d:53:e0:b3:f1:be:b2:b9:
fb:84:b8:57:aa:f9:6a:ce:08:f7:36:a7:f9:c9:fd:72:e7:4a:
2b:2f:d9:e0:0b:8f:e4:b1:8e:d2:a0:cb:64:d6:0b:80:64:9b:
c7:94:ae:3e:db:21:73:42:ce:4b:a8:8a:0f:50:4c:fa:9d:e8:
07:10:5e:90:73:80:c8:87:fa:10:02:47:ec:1e:47:69:6e:99:
97:a6:a0:dd:d4:61:30:0d:04:39:fc:5e:bc:6d:fc:d4:97:62:
17:84:8a:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh2Ume2JxLFKjnP52xZhL3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5
ODBjNzcwHhcNMjMwNjAxMDkzODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzg3NTY3MWQ3YzAzN2I0ZDE3NTE3NzI0YzllMTI1NzFmM2ZhMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDSAgn1jco5OKW9dvM6m7bWFmn7a
5jmPA5q9rv/1g+x0UoEOT1d6u8E8BVKgUzJvXJ/k5pMN/K6kU2lMXtGHoy//1/pG
GEPX8v7vAhDci/BrFXFnmcydaC3AnZB9qyJiNGf92zcMyUYghrxEWN9YWkh26COS
3DzdxtIHqQXcHt5PQCyweiYzZcm7G/SlE93JBi3ggcCbV3VCIP7DQpzeKe7iWM4Q
grUyRyUjzx1Tb8/vqN/KY3YrejsunwFqd0lDx5lH9CJIAs1Uantt7W66SZt+FO00
FWm0WGM6TQIlNZy6+YgwLfHubaGV5bNvIxLUqxqujmg4u/lmmVQ7m9FoBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOHVnHXwDe00XUXckyeElcfP6ELMB8GA1UdIwQY
MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct
ZjcxYTIyMTQ1ZDRlLzEvTTRkV2NkZkFON1RSZFJkeVRKNFNWeDhfb1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl
LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS9TMA0G
CSqGSIb3DQEBCwUAA4IBAQAja9heBiDusTywsb/EDeongwTNnQjQbdD8JtmTLMnb
IxSFALjlLi5kHGUBi5xYBgmiRw8oyZ8tlPDpIEj7bO7uMNKVPNPH9oI8zn0kmgvv
iRvTXiVxOARcySdjVv+xC+UGS+L/9bflBG1ouYOfvdQZUzLAkncpvTb5mUXJM0Ei
dmBNNW+ckwks4l3N4VnZMlsxvWfIUF95juf2LVPgs/G+srn7hLhXqvlqzgj3Nqf5
yf1y50orL9ngC4/ksY7SoMtk1guAZJvHlK4+2yFzQs5LqIoPUEz6negHEF6Qc4DI
h/oQAkfsHkdpbpmXpqDd1GEwDQQ5/F68bfzUl2IXhIoN
-----END CERTIFICATE-----
Generated at Mon Dec 11 20:39:50 2023 by rpki-client on console-fra.rpki-client.org