Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/D-7uGbgQpjhGO-Zt9s6uwqg-ZY0.roa
File: D-7uGbgQpjhGO-Zt9s6uwqg-ZY0.roa (raw, json)
Hash identifier: PIfR0hXkd9IZFNChcJr7kNRRR+M9j4Vrtt+WqpH8CeQ=
Subject key identifier: 0F:EE:EE:19:B8:10:A6:38:46:3B:E6:6D:F6:CE:AE:C2:A8:3E:65:8D
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 01856E143ED10DD2B2B5BEF1F7FF4E30F5FA
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/D-7uGbgQpjhGO-Zt9s6uwqg-ZY0.roa
Signing time: Sun 01 Jan 2023 16:04:58 +0000
ROA not before: Sun 01 Jan 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62102
IP address blocks: 185.47.179.0/24 maxlen: 24
185.47.178.0/24 maxlen: 24
185.47.178.0/23 maxlen: 23
185.47.176.0/22 maxlen: 22
185.47.177.0/24 maxlen: 24
185.47.176.0/23 maxlen: 23
185.47.176.0/24 maxlen: 24
2a01:7ce0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:3e:d1:0d:d2:b2:b5:be:f1:f7:ff:4e:30:f5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Jan 1 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0feeee19b810a638463be66df6ceaec2a83e658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:65:5d:fe:f5:09:44:b1:57:46:de:6c:f3:
0e:26:a0:42:f2:86:50:71:aa:a6:de:e3:5b:a6:f6:
69:41:5e:12:98:e9:02:12:6d:ea:3e:09:0c:e3:f0:
2e:11:b9:63:d4:cd:02:cd:72:03:30:78:20:bf:55:
ee:83:a8:6a:fc:ec:68:1d:38:26:21:bd:76:c1:f9:
45:7b:e7:20:76:b6:5d:68:bc:aa:b9:16:12:4a:c2:
3e:fa:cd:51:15:9e:fe:f8:e5:72:02:b3:20:7d:57:
5b:e5:64:3d:a2:ac:46:41:ae:b0:91:a1:32:00:8d:
68:08:01:a9:1a:95:9b:1c:70:f0:ef:4d:c4:bb:0a:
9d:fe:da:d2:11:03:af:90:ed:0c:4f:a0:8e:e1:cd:
d3:e0:66:57:df:bd:bc:07:c0:e9:e7:b8:88:67:46:
50:27:1d:a7:23:b1:c6:9a:f1:fb:c3:bf:37:de:e8:
61:9f:4c:6c:90:39:ab:b5:6f:05:ac:0a:06:d4:29:
38:dd:72:d2:a8:f0:fe:93:ed:a5:c7:87:0c:3f:5d:
2e:cb:34:24:ad:be:74:d0:d0:67:7a:ce:c7:04:7a:
c2:f7:52:e4:bf:dd:77:fe:17:d4:ef:3a:57:c8:18:
4a:67:6c:6c:28:30:a6:e7:0e:75:a9:90:54:6c:ab:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:EE:19:B8:10:A6:38:46:3B:E6:6D:F6:CE:AE:C2:A8:3E:65:8D
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/D-7uGbgQpjhGO-Zt9s6uwqg-ZY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.176.0/22
IPv6:
2a01:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
36:98:30:cf:dd:65:ae:86:fd:e5:30:66:c6:e1:cc:27:77:1d:
cb:7d:ac:5a:c8:c0:65:f1:f4:31:91:e2:86:21:49:e3:d6:4f:
cc:75:24:d1:1f:5f:8f:d4:10:47:b8:32:1b:ed:f1:b6:86:73:
f3:cd:e6:f5:c7:e2:17:f3:91:d9:eb:02:43:4d:7e:6b:aa:49:
25:b1:fc:fe:43:9e:5b:28:1f:1c:d2:0a:36:34:3c:3e:a5:dd:
c9:b5:22:0d:c2:1c:cb:e5:0d:f9:fa:c4:e1:b0:b3:0b:4d:1b:
e2:b8:f5:c0:d7:9b:80:de:04:ea:d3:7d:c7:d9:b4:dd:65:31:
cd:9d:9b:51:fa:14:6f:d4:a9:28:78:34:e5:2d:89:fc:43:a8:
b7:54:24:ff:7e:d0:ba:c2:a2:18:c0:a9:51:75:06:ec:7e:bc:
a6:85:4d:f4:3c:37:57:02:3f:5d:cd:3b:ec:0b:50:0d:49:b8:
29:27:84:9f:42:5f:0b:62:7f:63:c8:65:2b:8e:8e:f4:dd:50:
2f:0a:96:f0:02:7a:de:8c:93:22:fb:0f:9c:0e:de:ff:ca:ab:
d4:62:25:e2:44:bb:a7:16:95:42:71:f1:c4:12:0b:fb:e4:11:
8f:20:c9:a6:03:9a:6f:7d:1b:f1:4e:01:5c:bb:af:51:61:c7:
e9:f9:c2:aa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuFD7RDdKytb7x9/9OMPX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDEzZTJhMTZhMGVlNjYzNDIwN2E4OGZmMGFhYzRlYWJj
NjY5M2MwHhcNMjMwMTAxMTYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVlZWUxOWI4MTBhNjM4NDYzYmU2NmRmNmNlYWVjMmE4M2U2NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14FlXf71CUSxV0bebPMOJqBC8oZQ
caqm3uNbpvZpQV4SmOkCEm3qPgkM4/AuEblj1M0CzXIDMHggv1Xug6hq/OxoHTgm
Ib12wflFe+cgdrZdaLyquRYSSsI++s1RFZ7++OVyArMgfVdb5WQ9oqxGQa6wkaEy
AI1oCAGpGpWbHHDw703Euwqd/trSEQOvkO0MT6CO4c3T4GZX3728B8Dp57iIZ0ZQ
Jx2nI7HGmvH7w7833uhhn0xskDmrtW8FrAoG1Ck43XLSqPD+k+2lx4cMP10uyzQk
rb500NBnes7HBHrC91Lkv913/hfU7zpXyBhKZ2xsKDCm5w51qZBUbKujsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA/u7hm4EKY4RjvmbfbOrsKoPmWNMB8GA1UdIwQY
MBaAFHDRPioWoO5mNCB6iP8KrE6rxmk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0Njct
MmJkZDIwYjQ4MjNiLzEvRC03dUdiZ1FwamhHTy1adDlzNnV3cWctWlkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0NjctMmJkZDIwYjQ4MjNi
LzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS+wMA0E
AgACMAcDBQAqAXzgMA0GCSqGSIb3DQEBCwUAA4IBAQA2mDDP3WWuhv3lMGbG4cwn
dx3LfaxayMBl8fQxkeKGIUnj1k/MdSTRH1+P1BBHuDIb7fG2hnPzzeb1x+IX85HZ
6wJDTX5rqkklsfz+Q55bKB8c0go2NDw+pd3JtSINwhzL5Q35+sThsLMLTRviuPXA
15uA3gTq033H2bTdZTHNnZtR+hRv1KkoeDTlLYn8Q6i3VCT/ftC6wqIYwKlRdQbs
frymhU30PDdXAj9dzTvsC1ANSbgpJ4SfQl8LYn9jyGUrjo703VAvCpbwAnrejJMi
+w+cDt7/yqvUYiXiRLunFpVCcfHEEgv75BGPIMmmA5pvfRvxTgFcu69RYcfp+cKq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org