Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/nDq6xYKzauIxPh8XdXPqZI4r67k.roa
File: nDq6xYKzauIxPh8XdXPqZI4r67k.roa (raw, json)
Hash identifier: Al4TgVasw4i6DKykqQgO6usiLnXKDmQmSLcq6YY4Nm4=
Subject key identifier: 9C:3A:BA:C5:82:B3:6A:E2:31:3E:1F:17:75:73:EA:64:8E:2B:EB:B9
Certificate issuer: /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial: 01857142D62720334E51C4EBE97F32FCDB07
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/nDq6xYKzauIxPh8XdXPqZI4r67k.roa
Signing time: Mon 02 Jan 2023 06:54:43 +0000
ROA not before: Mon 02 Jan 2023 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201453
IP address blocks: 185.112.78.0/24 maxlen: 24
185.112.76.0/22 maxlen: 22
185.112.76.0/24 maxlen: 24
185.112.79.0/24 maxlen: 24
2a06:6382::/32 maxlen: 32
2a06:6386::/32 maxlen: 32
2a06:6387::/32 maxlen: 32
2a06:6381::/32 maxlen: 32
2a06:6384::/32 maxlen: 32
2a06:6380::/32 maxlen: 32
2a06:6383::/32 maxlen: 32
2a06:6385::/32 maxlen: 32
2a06:6380::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d6:27:20:33:4e:51:c4:eb:e9:7f:32:fc:db:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Validity
Not Before: Jan 2 06:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3abac582b36ae2313e1f177573ea648e2bebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:91:09:33:50:35:41:a1:fa:26:02:90:53:
8a:db:46:a8:be:40:e8:3c:f4:28:d0:bf:ac:92:a6:
0c:dd:4c:38:16:34:8c:d8:5f:64:e6:9b:9e:8e:82:
05:42:9c:7e:7f:7f:d1:a8:c3:c9:8e:38:96:6a:ac:
c0:df:cb:d8:e3:86:55:a2:80:a1:8f:b3:c0:2e:6e:
01:c1:85:1f:46:bb:c6:91:b3:57:ba:dc:61:f3:45:
6d:77:ff:37:5d:3b:e6:7b:97:4e:8a:50:27:60:39:
36:8b:b0:de:53:78:90:90:30:ba:d8:3a:90:b3:8f:
67:dd:74:b4:73:8f:d0:72:10:a5:55:1a:0a:06:1b:
2e:60:5a:82:0b:8d:39:c4:02:95:3a:15:f7:e4:e5:
4e:3e:76:e1:93:a4:6d:26:69:4c:8f:89:2c:1f:a9:
85:2c:17:78:7c:62:e7:0c:5e:5f:df:b6:44:a8:cb:
1d:eb:41:a8:6c:01:26:bc:fd:a5:14:87:06:c4:a2:
45:c2:a2:d2:c9:1f:d4:c0:e8:5c:86:f4:a7:e0:62:
f0:ad:48:f1:e8:93:6b:6f:50:21:71:48:f3:ee:f9:
d7:c1:24:5e:2f:29:5e:4a:5c:a2:b0:4b:43:08:26:
52:4b:c5:92:9b:e2:1c:61:bf:a2:23:2b:58:aa:90:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:BA:C5:82:B3:6A:E2:31:3E:1F:17:75:73:EA:64:8E:2B:EB:B9
X509v3 Authority Key Identifier:
keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/nDq6xYKzauIxPh8XdXPqZI4r67k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.76.0/22
IPv6:
2a06:6380::/29
Signature Algorithm: sha256WithRSAEncryption
63:97:d3:d7:b6:00:85:e2:2a:12:aa:74:2b:5d:c8:88:71:51:
23:c6:a5:a7:00:e9:22:d0:7a:af:cd:95:91:14:e8:b8:ab:04:
1a:5a:ea:5a:06:99:a8:19:fe:3d:89:29:ea:a3:be:2c:5c:0c:
23:ea:bc:37:a3:0a:dd:c6:51:da:28:f3:72:5c:92:0e:1f:7c:
a6:00:77:07:40:64:cd:c3:db:e9:96:5a:e0:9c:08:e3:59:44:
a9:54:6d:f3:fe:14:f5:75:0a:b5:28:76:f8:6c:41:62:37:c5:
4e:8e:6e:80:ea:10:35:07:6d:f3:6a:83:5f:63:8c:7b:c0:05:
53:93:b1:8a:b4:9b:7e:0c:e2:9a:77:19:04:18:1b:8f:40:1c:
4e:ff:d9:d4:20:0e:6b:41:64:1d:58:96:e4:52:13:b4:df:87:
f2:3f:c6:bd:78:2a:45:41:9d:ca:8a:d4:10:36:ae:24:0e:cb:
75:c2:ae:32:6c:60:94:00:6d:00:4e:36:c2:ee:dc:d7:80:e1:
cd:07:c4:b8:cd:5b:c7:c7:65:9e:61:09:e9:b1:07:b8:90:26:
a1:57:d4:f5:72:17:48:8d:93:99:0d:1c:9d:ae:5f:52:89:44:
93:7c:e2:fd:0e:42:4c:9a:45:92:c4:e7:24:f4:66:5d:13:d1:
09:b7:45:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxQtYnIDNOUcTr6X8y/NsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDQwNGM4MzkyZTgyZDRiNzAyOWI2OWNiNmVlMjkwYjli
NDJjMDAwHhcNMjMwMTAyMDY1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzNhYmFjNTgyYjM2YWUyMzEzZTFmMTc3NTczZWE2NDhlMmJlYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb2RCTNQNUGh+iYCkFOK20aovkDo
PPQo0L+skqYM3Uw4FjSM2F9k5puejoIFQpx+f3/RqMPJjjiWaqzA38vY44ZVooCh
j7PALm4BwYUfRrvGkbNXutxh80Vtd/83XTvme5dOilAnYDk2i7DeU3iQkDC62DqQ
s49n3XS0c4/QchClVRoKBhsuYFqCC405xAKVOhX35OVOPnbhk6RtJmlMj4ksH6mF
LBd4fGLnDF5f37ZEqMsd60GobAEmvP2lFIcGxKJFwqLSyR/UwOhchvSn4GLwrUjx
6JNrb1AhcUjz7vnXwSReLyleSlyisEtDCCZSS8WSm+IcYb+iIytYqpC+xwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJw6usWCs2riMT4fF3Vz6mSOK+u5MB8GA1UdIwQY
MBaAFB1EBMg5LoLUtwKbactu4pC5tCwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVRRXlEa3VndFMzQXB0cHkyN2lrTG0wTEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI4MzUtZjViNS00NzA0LWFlOTct
YzI2MzI4NTYxMDMwLzEvbkRxNnhZS3phdUl4UGg4WGRYUHFaSTRyNjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI4MzUtZjViNS00NzA0LWFlOTctYzI2MzI4NTYxMDMw
LzEvSFVRRXlEa3VndFMzQXB0cHkyN2lrTG0wTEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXBMMA0E
AgACMAcDBQMqBmOAMA0GCSqGSIb3DQEBCwUAA4IBAQBjl9PXtgCF4ioSqnQrXciI
cVEjxqWnAOki0HqvzZWRFOi4qwQaWupaBpmoGf49iSnqo74sXAwj6rw3owrdxlHa
KPNyXJIOH3ymAHcHQGTNw9vpllrgnAjjWUSpVG3z/hT1dQq1KHb4bEFiN8VOjm6A
6hA1B23zaoNfY4x7wAVTk7GKtJt+DOKadxkEGBuPQBxO/9nUIA5rQWQdWJbkUhO0
34fyP8a9eCpFQZ3KitQQNq4kDst1wq4ybGCUAG0ATjbC7tzXgOHNB8S4zVvHx2We
YQnpsQe4kCahV9T1chdIjZOZDRydrl9SiUSTfOL9DkJMmkWSxOck9GZdE9EJt0WZ
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:26 2024 by rpki-client on console-fra.rpki-client.org