Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa
File: oSwQQWMruU-_0GslI_aqDn0-2fk.roa (raw, json)
Hash identifier: laXajjjGwpJtG0tlbkowwEE6xgTNFJO/Nz2nhw6uAr0=
Subject key identifier: A1:2C:10:41:63:2B:B9:4F:BF:D0:6B:25:23:F6:AA:0E:7D:3E:D9:F9
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 01856B40FE1EE3B978662234B4BC4E25463E
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa
Signing time: Sun 01 Jan 2023 02:54:59 +0000
ROA not before: Sun 01 Jan 2023 02:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207996
IP address blocks: 185.203.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:fe:1e:e3:b9:78:66:22:34:b4:bc:4e:25:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jan 1 02:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a12c1041632bb94fbfd06b2523f6aa0e7d3ed9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:3f:0c:59:97:bf:1f:50:aa:9d:c0:12:88:
b4:d1:f8:b0:e7:82:7c:07:6e:6a:7f:6a:50:fa:ef:
e9:fc:f7:e7:81:bf:e2:c7:8b:d2:83:9f:9c:3b:1d:
7e:cc:ae:05:ef:02:f2:30:f6:ac:85:1d:e6:d1:c2:
96:26:d9:8d:fa:1a:22:72:5b:f4:cf:5e:de:37:cb:
c1:bf:16:96:6a:32:db:c9:1f:2a:91:55:7b:b4:55:
c8:9e:49:d6:57:e5:33:90:85:01:2a:af:4c:57:1f:
e1:06:bb:21:63:8f:02:3e:4b:df:a9:b6:b0:78:2a:
12:36:b5:b1:a4:e1:7d:2c:5a:7e:9c:b0:d9:9f:18:
00:c1:03:a8:ef:11:d7:ba:5b:89:ae:71:c0:4f:4a:
4a:8e:d8:b6:b3:8d:9a:0f:64:33:9c:42:f0:1d:79:
71:e6:dc:f5:a6:03:b8:d5:9e:07:40:13:25:6d:64:
3d:b0:fa:11:fc:61:c2:4e:9c:47:1e:a0:dc:e3:7f:
20:27:e3:6a:cf:b2:99:90:e7:4b:22:36:89:b7:43:
6e:8e:74:90:ed:df:96:e0:25:1f:10:29:e5:46:19:
fe:2d:b8:ab:21:31:82:b7:53:e3:c7:f7:c4:04:f1:
ad:4d:67:4a:3c:fb:d3:e1:bf:69:b2:1c:4a:42:03:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2C:10:41:63:2B:B9:4F:BF:D0:6B:25:23:F6:AA:0E:7D:3E:D9:F9
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.113.0/24
Signature Algorithm: sha256WithRSAEncryption
43:93:6b:c5:39:de:fa:d6:25:05:d3:31:9d:be:f0:f2:61:0a:
e2:14:30:80:6f:8f:72:05:b1:85:d1:2d:d1:96:d2:0c:36:1c:
74:18:71:46:3c:68:89:66:12:97:a5:65:63:af:b9:4d:d8:3c:
36:3a:51:50:8a:05:83:c5:7d:f6:57:ba:a3:0e:0c:a8:08:d9:
1b:ac:5f:8e:d3:ff:d2:e1:ea:e6:3d:30:87:bf:bb:3f:47:71:
93:70:07:62:24:ed:3b:61:63:53:3e:53:d5:d3:b3:fe:17:26:
69:f1:01:a7:0d:60:0b:48:3e:4d:34:ec:b8:d8:87:a6:7b:4a:
35:99:4b:ea:50:b1:1d:65:99:72:a6:4d:3a:32:a1:0f:ba:ff:
e6:02:ac:29:03:09:3e:17:9f:f0:1a:5d:a4:3c:dc:c4:55:52:
3d:f1:0d:57:84:16:b4:84:98:5d:53:3c:54:96:b7:cc:15:03:
07:41:c4:b5:fa:78:e5:9d:c7:18:f7:fb:10:7f:68:fe:2d:8d:
66:18:ea:cb:d4:b2:9a:f7:27:76:46:35:f7:77:da:5e:c5:c9:
30:39:94:99:1d:31:82:06:ad:e5:46:25:f8:d4:7e:1c:50:b0:
08:0c:91:96:19:ce:8b:67:f4:7e:66:fb:33:59:95:19:49:b8:
d1:e1:1e:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrQP4e47l4ZiI0tLxOJUY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjRjYmE1MjFjMDgwZGI3MmE2ZTU0YTFiOGNmNDQ5NWNi
YmM3ZDYwHhcNMjMwMTAxMDI1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJjMTA0MTYzMmJiOTRmYmZkMDZiMjUyM2Y2YWEwZTdkM2VkOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiw/DFmXvx9Qqp3AEoi00fiw54J8
B25qf2pQ+u/p/Pfngb/ix4vSg5+cOx1+zK4F7wLyMPashR3m0cKWJtmN+hoiclv0
z17eN8vBvxaWajLbyR8qkVV7tFXInknWV+UzkIUBKq9MVx/hBrshY48CPkvfqbaw
eCoSNrWxpOF9LFp+nLDZnxgAwQOo7xHXuluJrnHAT0pKjti2s42aD2QznELwHXlx
5tz1pgO41Z4HQBMlbWQ9sPoR/GHCTpxHHqDc438gJ+Nqz7KZkOdLIjaJt0NujnSQ
7d+W4CUfECnlRhn+LbirITGCt1Pjx/fEBPGtTWdKPPvT4b9pshxKQgNxUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEsEEFjK7lPv9BrJSP2qg59Ptn5MB8GA1UdIwQY
MBaAFPcky6UhwIDbcqblShuM9Elcu8fWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAt
MTAzYjIwNmJhMjhiLzEvb1N3UVFXTXJ1VS1fMEdzbElfYXFEbjAtMmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAtMTAzYjIwNmJhMjhi
LzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuctxMA0G
CSqGSIb3DQEBCwUAA4IBAQBDk2vFOd761iUF0zGdvvDyYQriFDCAb49yBbGF0S3R
ltIMNhx0GHFGPGiJZhKXpWVjr7lN2Dw2OlFQigWDxX32V7qjDgyoCNkbrF+O0//S
4ermPTCHv7s/R3GTcAdiJO07YWNTPlPV07P+FyZp8QGnDWALSD5NNOy42Ieme0o1
mUvqULEdZZlypk06MqEPuv/mAqwpAwk+F5/wGl2kPNzEVVI98Q1XhBa0hJhdUzxU
lrfMFQMHQcS1+njlnccY9/sQf2j+LY1mGOrL1LKa9yd2RjX3d9pexckwOZSZHTGC
Bq3lRiX41H4cULAIDJGWGc6LZ/R+ZvszWZUZSbjR4R7C
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:01 2024 by rpki-client on console-ams.rpki-client.org