Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C2CX7vCSeGi1z6vL6vYN_0Kst8Y.roa
File: C2CX7vCSeGi1z6vL6vYN_0Kst8Y.roa (raw, json)
Hash identifier: 6qIngpqc+437zTNiNph1ec5v9lIZhmRc1p8waPWghHc=
Subject key identifier: 0B:60:97:EE:F0:92:78:68:B5:CF:AB:CB:EA:F6:0D:FF:42:AC:B7:C6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCB6E21072AEFFA2A564DF2C61024E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C2CX7vCSeGi1z6vL6vYN_0Kst8Y.roa
Signing time: Sun 01 Jan 2023 05:45:04 +0000
ROA not before: Sun 01 Jan 2023 05:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397451
IP address blocks: 89.46.112.0/23 maxlen: 23
85.204.196.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b6:e2:10:72:ae:ff:a2:a5:64:df:2c:61:02:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b6097eef0927868b5cfabcbeaf60dff42acb7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:16:94:83:48:62:ae:47:ea:67:04:b4:82:
5c:1c:44:5f:01:ad:c1:cb:a5:d4:87:c4:79:a8:28:
77:b7:8a:3b:d1:cf:8c:b3:52:28:f0:f6:bf:36:cf:
ef:2e:84:fa:d1:73:0c:bf:52:9d:72:f9:30:6e:a0:
fa:ee:5e:be:46:12:d3:a0:e2:f9:95:e7:65:9b:67:
d2:59:7b:77:6f:4b:8b:5b:2d:d0:23:3f:22:e6:3d:
10:82:37:d7:8c:e4:7f:24:df:bc:d9:ee:c9:16:0c:
79:24:06:7e:f3:97:f7:be:f9:46:16:b2:f0:0b:69:
7a:43:3a:a3:14:e3:3a:39:b2:32:2d:c2:a3:cf:43:
12:6f:ff:8f:0c:51:52:3d:b8:d9:a6:01:39:79:ff:
d7:d3:71:86:79:d0:a4:5b:08:35:3d:e6:70:41:66:
c1:6e:3f:96:77:f8:d5:e0:5b:1c:c7:7f:b6:dc:90:
70:3b:fd:01:91:8b:0c:cd:6b:04:ce:0c:03:7d:51:
30:d8:e3:77:65:3d:76:60:fa:f6:ba:85:85:a6:a9:
d7:41:9b:86:01:98:de:5b:6e:9c:37:a9:f3:46:d2:
0d:22:80:74:07:a9:cb:50:ea:ea:00:73:4f:d6:d9:
7d:12:4c:23:f5:f8:2e:d2:98:40:07:de:8f:a9:91:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:97:EE:F0:92:78:68:B5:CF:AB:CB:EA:F6:0D:FF:42:AC:B7:C6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C2CX7vCSeGi1z6vL6vYN_0Kst8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.196.0/23
89.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:88:bf:6e:a7:2b:25:dd:fc:6d:05:5a:64:4c:c6:d4:8e:5e:
55:70:90:50:7c:be:5e:75:fa:24:57:69:bb:fd:5d:ac:ba:0f:
d4:8a:3e:94:da:ea:a0:3b:2f:d7:e3:ee:c3:8e:1f:2d:f3:1a:
15:27:0b:8d:6b:e6:63:36:7f:d7:06:b0:24:83:43:1a:a6:fc:
cb:c2:17:2c:f7:8b:dd:66:c8:f6:cd:5f:8a:c0:cb:e6:75:26:
ad:e0:15:16:ed:46:f6:fb:dc:a8:23:b9:c7:d1:ae:d4:82:78:
0c:bc:86:9e:93:79:8a:7d:96:10:dc:1a:00:4a:48:66:0c:2f:
68:8f:15:6c:80:6f:73:62:a7:a8:15:f5:bc:5c:8a:e7:78:07:
13:a7:de:ae:dd:92:17:84:38:59:c2:87:cb:c7:84:b0:ae:bd:
62:e1:04:95:26:63:a4:19:bb:5e:95:ba:25:cf:6a:10:b5:41:
18:eb:a8:48:d8:2c:d5:12:9c:bf:38:30:cd:dc:18:d4:98:f4:
48:b5:a5:35:db:bd:d3:8e:81:66:64:93:30:4a:4e:b0:62:19:
07:d8:43:75:6a:d7:59:90:d9:9b:1f:63:07:dd:c7:3a:b4:5e:
fb:62:2f:cb:2a:81:12:2a:d2:47:8e:39:90:e6:44:b6:62:8d:
66:41:93:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVr3LbiEHKu/6KlZN8sYQJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwMTAxMDU0NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjYwOTdlZWYwOTI3ODY4YjVjZmFiY2JlYWY2MGRmZjQyYWNiN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QkWlINIYq5H6mcEtIJcHERfAa3B
y6XUh8R5qCh3t4o70c+Ms1Io8Pa/Ns/vLoT60XMMv1KdcvkwbqD67l6+RhLToOL5
ledlm2fSWXt3b0uLWy3QIz8i5j0QgjfXjOR/JN+82e7JFgx5JAZ+85f3vvlGFrLw
C2l6QzqjFOM6ObIyLcKjz0MSb/+PDFFSPbjZpgE5ef/X03GGedCkWwg1PeZwQWbB
bj+Wd/jV4Fscx3+23JBwO/0BkYsMzWsEzgwDfVEw2ON3ZT12YPr2uoWFpqnXQZuG
AZjeW26cN6nzRtINIoB0B6nLUOrqAHNP1tl9Ekwj9fgu0phAB96PqZFDVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAtgl+7wknhotc+ry+r2Df9CrLfGMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvQzJDWDd2Q1NlR2kxejZ2TDZ2WU5fMEtzdDhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVczEAwQB
WS5wMA0GCSqGSIb3DQEBCwUAA4IBAQAOiL9upysl3fxtBVpkTMbUjl5VcJBQfL5e
dfokV2m7/V2sug/Uij6U2uqgOy/X4+7Djh8t8xoVJwuNa+ZjNn/XBrAkg0MapvzL
whcs94vdZsj2zV+KwMvmdSat4BUW7Ub2+9yoI7nH0a7UgngMvIaek3mKfZYQ3BoA
SkhmDC9ojxVsgG9zYqeoFfW8XIrneAcTp96u3ZIXhDhZwofLx4Swrr1i4QSVJmOk
Gbtelbolz2oQtUEY66hI2CzVEpy/ODDN3BjUmPRItaU1273TjoFmZJMwSk6wYhkH
2EN1atdZkNmbH2MH3cc6tF77Yi/LKoESKtJHjjmQ5kS2Yo1mQZPB
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:10 2024 by rpki-client on console-fra.rpki-client.org