Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/8jDEcVcWkpUrMeF86ohyWa8NTSs.roa
File: 8jDEcVcWkpUrMeF86ohyWa8NTSs.roa (raw, json)
Hash identifier: B1e3uoHq77PivHPQuPisAkx/4dkBr/O7KvhgW9YoDwo=
Subject key identifier: F2:30:C4:71:57:16:92:95:2B:31:E1:7C:EA:88:72:59:AF:0D:4D:2B
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 01856F8B7A788265998F6755CE5EA8A45E46
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/8jDEcVcWkpUrMeF86ohyWa8NTSs.roa
Signing time: Sun 01 Jan 2023 22:54:49 +0000
ROA not before: Sun 01 Jan 2023 22:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3549
IP address blocks: 185.27.249.0/24 maxlen: 24
185.27.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:7a:78:82:65:99:8f:67:55:ce:5e:a8:a4:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 1 22:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f230c471571692952b31e17cea887259af0d4d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:26:ab:e7:b5:17:a2:e8:77:11:0b:8c:77:
c9:cd:37:52:72:8d:6e:d7:5b:1d:60:0a:a1:a1:3f:
30:19:f5:72:ae:82:ca:79:b4:db:64:d5:e8:be:41:
84:f1:50:90:57:5a:ee:a8:f1:c5:03:05:f9:8f:1d:
d9:a7:ba:e0:e7:cd:32:c8:8a:86:18:f0:47:5d:15:
e4:56:a4:db:6c:b9:91:a7:bc:2c:5c:6b:e7:bf:ea:
ba:0d:67:8f:bc:e0:bb:b8:e6:62:97:c2:17:10:df:
45:41:07:ee:f9:e5:0d:ca:c8:2e:07:18:55:2f:f5:
15:36:c6:be:74:84:29:95:5f:74:0f:c0:59:5b:24:
65:25:9f:e1:96:43:65:40:44:27:9b:ed:42:45:5d:
7d:bf:ca:0b:44:6e:e6:2d:c9:4d:80:55:f6:7e:ec:
ed:85:e1:d0:5b:02:2f:00:55:6f:01:ac:7a:c7:0c:
87:e0:ae:d2:a0:e0:1b:e3:8b:e5:aa:03:14:03:ce:
14:6f:7b:39:44:4c:32:6f:2b:4c:f3:64:77:4f:f7:
a5:6d:fc:7b:45:d3:e6:4b:a6:30:7c:f4:25:7d:9c:
c7:13:04:db:23:39:03:ac:19:58:5c:36:47:11:90:
a4:c4:23:60:b3:d4:c2:65:32:ee:2c:9f:24:05:87:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:C4:71:57:16:92:95:2B:31:E1:7C:EA:88:72:59:AF:0D:4D:2B
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/8jDEcVcWkpUrMeF86ohyWa8NTSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.249.0/24
185.27.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e3:6b:e1:f0:19:33:b1:40:93:47:5a:bc:96:34:d0:2a:8b:
8b:4e:93:99:2e:22:72:48:0d:1c:5c:a4:59:61:2c:f1:66:ee:
ab:17:6a:08:46:d8:7f:ee:8a:23:b0:f9:0c:67:39:c8:3d:08:
50:3b:8c:e4:b5:46:52:56:8c:d8:7e:b3:8b:87:46:29:4d:e9:
ff:d6:2e:f3:a7:cc:cb:8a:fe:38:63:b2:c6:9e:53:4c:c7:70:
fd:29:3c:5c:65:15:4d:d8:d5:ea:c7:2f:7d:f4:63:be:01:cf:
3c:8a:2a:d3:ac:18:13:01:df:2b:3b:33:35:61:40:0b:8a:97:
54:d8:79:55:7a:da:8e:ee:71:cf:85:49:76:1f:37:83:05:df:
2f:80:33:56:a1:4a:1b:b2:19:c9:59:16:9f:90:98:29:37:f2:
7b:38:ac:f2:21:c2:04:69:c5:86:7d:6c:b3:55:b5:1b:ba:46:
80:6a:04:4f:64:ea:04:01:13:50:30:b4:59:3a:22:35:0b:56:
c6:44:9c:ba:19:78:29:1e:0f:89:ca:f7:82:bf:1d:2f:e2:a0:
6b:1a:d7:e1:31:93:8b:35:a0:3d:d3:e7:76:57:1a:e7:3d:e9:
5e:b4:49:3a:95:95:52:17:13:74:db:0f:bf:d5:15:94:33:94:
6d:2a:63:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvi3p4gmWZj2dVzl6opF5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi
M2JlN2QwHhcNMjMwMTAxMjI1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjMwYzQ3MTU3MTY5Mjk1MmIzMWUxN2NlYTg4NzI1OWFmMGQ0ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcImq+e1F6LodxELjHfJzTdSco1u
11sdYAqhoT8wGfVyroLKebTbZNXovkGE8VCQV1ruqPHFAwX5jx3Zp7rg580yyIqG
GPBHXRXkVqTbbLmRp7wsXGvnv+q6DWePvOC7uOZil8IXEN9FQQfu+eUNysguBxhV
L/UVNsa+dIQplV90D8BZWyRlJZ/hlkNlQEQnm+1CRV19v8oLRG7mLclNgFX2fuzt
heHQWwIvAFVvAax6xwyH4K7SoOAb44vlqgMUA84Ub3s5REwybytM82R3T/elbfx7
RdPmS6YwfPQlfZzHEwTbIzkDrBlYXDZHEZCkxCNgs9TCZTLuLJ8kBYcyTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPIwxHFXFpKVKzHhfOqIclmvDU0rMB8GA1UdIwQY
MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt
NWE2NGE1ZmM4YTY0LzEvOGpERWNWY1drcFVyTWVGODZvaHlXYThOVFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0
LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRv5AwQA
uRv7MA0GCSqGSIb3DQEBCwUAA4IBAQBH42vh8BkzsUCTR1q8ljTQKouLTpOZLiJy
SA0cXKRZYSzxZu6rF2oIRth/7oojsPkMZznIPQhQO4zktUZSVozYfrOLh0YpTen/
1i7zp8zLiv44Y7LGnlNMx3D9KTxcZRVN2NXqxy999GO+Ac88iirTrBgTAd8rOzM1
YUALipdU2HlVetqO7nHPhUl2HzeDBd8vgDNWoUobshnJWRafkJgpN/J7OKzyIcIE
acWGfWyzVbUbukaAagRPZOoEARNQMLRZOiI1C1bGRJy6GXgpHg+JyveCvx0v4qBr
GtfhMZOLNaA90+d2VxrnPeletEk6lZVSFxN02w+/1RWUM5RtKmMP
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:33 2024 by rpki-client on console-fra.rpki-client.org