Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/UMx3T8ExOxb_sFFNLi8TKkr5904.roa
File: UMx3T8ExOxb_sFFNLi8TKkr5904.roa (raw, json)
Hash identifier: rIO/HyYeeZsFLdd8qLjag0wO+oxkZF2tEhW+uJUqv7w=
Subject key identifier: 50:CC:77:4F:C1:31:3B:16:FF:B0:51:4D:2E:2F:13:2A:4A:F9:F7:4E
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0187007E903D8B7DE2C2F96B60813E1683D8
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/UMx3T8ExOxb_sFFNLi8TKkr5904.roa
Signing time: Mon 20 Mar 2023 19:28:27 +0000
ROA not before: Mon 20 Mar 2023 19:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:7e:90:3d:8b:7d:e2:c2:f9:6b:60:81:3e:16:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 20 19:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50cc774fc1313b16ffb0514d2e2f132a4af9f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:d5:5e:1a:64:38:7b:02:29:92:bc:60:cf:
20:c8:f9:fb:5a:9b:e7:fc:c4:25:02:71:07:b4:16:
b7:99:a0:8f:ad:1b:53:75:3d:a7:c1:e2:c4:d1:85:
0c:0d:78:38:de:d3:b3:6a:76:52:bc:73:1f:a0:73:
a0:29:2c:78:22:df:69:b8:dd:34:93:16:e8:81:27:
28:cd:8e:b5:34:65:6f:d6:32:df:f0:e4:a1:97:18:
95:24:31:0b:85:29:ab:8f:9c:53:64:39:19:19:a5:
f9:5e:de:31:c5:41:5d:8c:9a:11:03:1f:29:94:fa:
4a:03:98:84:25:38:8c:66:4c:2b:1a:07:c0:bc:1f:
2f:25:0c:bf:c3:c2:3e:5d:91:d3:19:7f:de:9a:f7:
ec:30:aa:a2:f8:1d:28:7e:07:21:ab:35:ff:37:05:
4e:dc:eb:5b:68:c9:38:4d:65:5c:80:a9:5d:ab:5f:
91:b7:f8:b1:0e:c4:49:0d:04:fc:a2:f4:9c:2f:63:
bb:16:35:a0:61:a8:b9:a2:2a:cd:31:fe:f3:bd:9e:
4a:e2:c3:7f:bf:b6:d9:e1:5c:74:38:67:04:68:ad:
b6:2b:0a:aa:ec:9e:98:71:25:ba:78:94:84:d6:fd:
a3:9a:90:bf:38:03:98:d4:65:fc:61:2c:72:b9:5f:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:77:4F:C1:31:3B:16:FF:B0:51:4D:2E:2F:13:2A:4A:F9:F7:4E
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/UMx3T8ExOxb_sFFNLi8TKkr5904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
Signature Algorithm: sha256WithRSAEncryption
26:75:8c:d4:dc:3b:c7:96:c1:dd:46:21:42:d1:06:58:7a:d2:
5e:29:e6:44:fe:f2:7e:cc:98:f0:b2:80:de:30:15:5a:5d:1f:
34:e8:eb:d6:cd:5c:32:e0:e2:f1:42:78:d7:30:b8:58:1c:4e:
05:7a:2d:12:82:78:b5:85:02:23:b9:71:8a:e3:05:79:aa:23:
26:96:a0:25:ec:8a:6c:8a:5c:42:b1:42:5d:f6:9d:9a:94:09:
51:97:5a:c4:d9:a9:b4:a0:ee:a0:c5:35:26:09:66:57:96:36:
d7:e2:f9:aa:a8:c1:35:89:b9:59:5e:ce:ad:78:ae:e7:e6:68:
d7:c2:93:51:88:e5:9d:3d:c9:4c:7d:6e:71:4b:e6:b9:5b:de:
04:61:f9:47:d8:11:ee:a8:c5:06:77:17:bd:fc:63:99:94:d0:
d7:aa:cd:9e:33:3f:dc:6b:6e:e6:a6:49:6b:3e:7a:9f:bb:7d:
12:75:fa:71:ca:52:8d:ad:a9:16:b4:0c:bb:4b:9e:8b:c6:99:
28:d7:99:f4:2f:e8:7d:87:61:1e:ef:2e:81:5b:6e:b0:a5:cd:
54:35:69:e3:9b:e3:bf:c7:46:ab:0c:53:18:4e:2b:bd:1d:f2:
7e:30:3b:bb:f8:03:e3:2e:d6:e4:00:88:5f:91:26:0b:b8:a6:
af:ec:f4:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcAfpA9i33iwvlrYIE+FoPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjMwMzIwMTkyODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGNjNzc0ZmMxMzEzYjE2ZmZiMDUxNGQyZTJmMTMyYTRhZjlmNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3VXhpkOHsCKZK8YM8gyPn7Wpvn
/MQlAnEHtBa3maCPrRtTdT2nweLE0YUMDXg43tOzanZSvHMfoHOgKSx4It9puN00
kxbogScozY61NGVv1jLf8OShlxiVJDELhSmrj5xTZDkZGaX5Xt4xxUFdjJoRAx8p
lPpKA5iEJTiMZkwrGgfAvB8vJQy/w8I+XZHTGX/emvfsMKqi+B0ofgchqzX/NwVO
3OtbaMk4TWVcgKldq1+Rt/ixDsRJDQT8ovScL2O7FjWgYai5oirNMf7zvZ5K4sN/
v7bZ4Vx0OGcEaK22Kwqq7J6YcSW6eJSE1v2jmpC/OAOY1GX8YSxyuV8gswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDMd0/BMTsW/7BRTS4vEypK+fdOMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvVU14M1Q4RXhPeGJfc0ZGTkxpOFRLa3I1OTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoYMA0G
CSqGSIb3DQEBCwUAA4IBAQAmdYzU3DvHlsHdRiFC0QZYetJeKeZE/vJ+zJjwsoDe
MBVaXR806OvWzVwy4OLxQnjXMLhYHE4Fei0Sgni1hQIjuXGK4wV5qiMmlqAl7Ips
ilxCsUJd9p2alAlRl1rE2am0oO6gxTUmCWZXljbX4vmqqME1iblZXs6teK7n5mjX
wpNRiOWdPclMfW5xS+a5W94EYflH2BHuqMUGdxe9/GOZlNDXqs2eMz/ca27mpklr
Pnqfu30SdfpxylKNrakWtAy7S56Lxpko15n0L+h9h2Ee7y6BW26wpc1UNWnjm+O/
x0arDFMYTiu9HfJ+MDu7+APjLtbkAIhfkSYLuKav7PRG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:51 2023 by rpki-client on console-fra.rpki-client.org