Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/2NRm3DNPK0m81dhtf9mED4t2TDg.roa
File: 2NRm3DNPK0m81dhtf9mED4t2TDg.roa (raw, json)
Hash identifier: 59O8DcfJ6lGVPGaJIIqpNIlxtVDH4aRIhusvyH8/fNk=
Subject key identifier: D8:D4:66:DC:33:4F:2B:49:BC:D5:D8:6D:7F:D9:84:0F:8B:76:4C:38
Certificate issuer: /CN=4b25df8620374243e3c5eab25550af24e0eff48c
Certificate serial: 01856C13791DD9B8B10AA4E46F619A9A3B72
Authority key identifier: 4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/2NRm3DNPK0m81dhtf9mED4t2TDg.roa
Signing time: Sun 01 Jan 2023 06:44:53 +0000
ROA not before: Sun 01 Jan 2023 06:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43279
IP address blocks: 185.208.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:79:1d:d9:b8:b1:0a:a4:e4:6f:61:9a:9a:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b25df8620374243e3c5eab25550af24e0eff48c
Validity
Not Before: Jan 1 06:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8d466dc334f2b49bcd5d86d7fd9840f8b764c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:87:5a:c1:51:15:04:c4:37:11:ef:2f:6e:
94:5e:89:97:12:a5:f8:a7:32:ec:a8:66:7f:30:b7:
0c:4f:5c:55:e8:3d:51:08:d9:0a:7f:38:0a:50:7c:
15:2e:99:82:69:b5:08:85:55:09:55:e5:b3:43:0b:
04:60:33:6f:5b:fe:f3:c9:9e:f8:57:d6:e9:4b:1c:
87:dd:4a:49:b9:4f:d5:71:0a:30:ce:84:28:c3:38:
99:af:32:6b:77:8a:fe:aa:b3:b4:77:0c:f1:9e:69:
66:16:fd:e6:79:b5:85:53:98:51:52:08:6d:42:72:
f9:e2:b5:08:77:e0:4c:f4:7d:2c:df:22:54:6d:af:
77:ca:d3:0d:5f:48:6b:be:70:f5:4e:d7:ac:32:b6:
4f:00:d4:42:cb:42:ce:24:9f:d1:0c:55:39:f1:e3:
ef:9f:aa:3e:bd:b4:b4:6d:00:43:0c:a3:d7:5f:b1:
fe:a4:89:9b:aa:22:e4:2a:d0:e5:23:81:8d:44:15:
fc:f8:e6:a7:41:5b:9b:23:ff:9b:d4:60:4b:54:cc:
53:63:55:6a:d5:84:8f:0a:23:48:0d:1f:a9:c2:3a:
1c:8e:54:dd:44:ce:25:5f:33:c1:4c:b9:8c:8b:60:
ba:64:3b:fb:ff:cc:b5:7c:cc:47:2f:62:b9:b8:55:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:66:DC:33:4F:2B:49:BC:D5:D8:6D:7F:D9:84:0F:8B:76:4C:38
X509v3 Authority Key Identifier:
keyid:4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/2NRm3DNPK0m81dhtf9mED4t2TDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.232.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8d:3e:32:bc:74:c2:3e:b7:b3:ac:3c:94:fc:8e:58:8f:58:
2e:ff:89:46:0d:12:35:ea:cf:9d:8c:7a:37:13:b4:5d:58:19:
84:f3:82:4d:73:29:de:7e:7c:e8:a9:47:3e:8d:eb:5e:e4:ba:
d4:01:18:43:7c:9d:57:27:53:bc:dc:04:b6:56:49:e6:37:1b:
2f:36:ca:1a:11:07:52:7e:1f:e0:b1:59:3f:95:a2:92:f8:14:
9a:b2:ff:d9:57:24:19:e1:f0:c0:4a:e7:d7:e7:6a:08:fb:bd:
0c:da:c5:a8:b1:a2:70:ec:03:3e:da:b9:68:83:18:79:63:e8:
bc:33:18:41:ea:f7:47:15:af:d0:c2:94:02:93:46:b9:b9:cf:
45:cb:cb:37:45:c4:8c:58:b4:2e:43:83:c7:23:59:61:b5:e8:
f1:45:25:99:12:1e:e6:23:1f:3b:cf:c1:da:2c:4b:45:66:ff:
35:ef:31:fa:66:29:59:27:fe:c9:a9:c0:4b:48:5e:83:26:01:
7b:bd:09:c0:9d:2d:0d:97:dc:3b:13:cd:76:8d:b7:07:14:fb:
d5:74:b3:de:4d:31:1b:06:e7:d8:a4:8b:61:c3:50:f3:d4:14:
fd:7c:71:24:6f:ad:7b:40:77:35:71:b3:b5:50:dd:fc:e6:d2:
01:32:b0:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsE3kd2bixCqTkb2GamjtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjVkZjg2MjAzNzQyNDNlM2M1ZWFiMjU1NTBhZjI0ZTBl
ZmY0OGMwHhcNMjMwMTAxMDY0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGQ0NjZkYzMzNGYyYjQ5YmNkNWQ4NmQ3ZmQ5ODQwZjhiNzY0YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlriHWsFRFQTENxHvL26UXomXEqX4
pzLsqGZ/MLcMT1xV6D1RCNkKfzgKUHwVLpmCabUIhVUJVeWzQwsEYDNvW/7zyZ74
V9bpSxyH3UpJuU/VcQowzoQowziZrzJrd4r+qrO0dwzxnmlmFv3mebWFU5hRUght
QnL54rUId+BM9H0s3yJUba93ytMNX0hrvnD1TtesMrZPANRCy0LOJJ/RDFU58ePv
n6o+vbS0bQBDDKPXX7H+pImbqiLkKtDlI4GNRBX8+OanQVubI/+b1GBLVMxTY1Vq
1YSPCiNIDR+pwjocjlTdRM4lXzPBTLmMi2C6ZDv7/8y1fMxHL2K5uFUj3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjUZtwzTytJvNXYbX/ZhA+Ldkw4MB8GA1UdIwQY
MBaAFEsl34YgN0JD48XqslVQryTg7/SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2Yt
YTQxYjUwYWEyNzJkLzEvMk5SbTNETlBLMG04MWRodGY5bUVENHQyVERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2YtYTQxYjUwYWEyNzJk
LzEvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudDoMA0G
CSqGSIb3DQEBCwUAA4IBAQB5jT4yvHTCPrezrDyU/I5Yj1gu/4lGDRI16s+djHo3
E7RdWBmE84JNcynefnzoqUc+jete5LrUARhDfJ1XJ1O83AS2VknmNxsvNsoaEQdS
fh/gsVk/laKS+BSasv/ZVyQZ4fDASufX52oI+70M2sWosaJw7AM+2rlogxh5Y+i8
MxhB6vdHFa/QwpQCk0a5uc9Fy8s3RcSMWLQuQ4PHI1lhtejxRSWZEh7mIx87z8Ha
LEtFZv817zH6ZilZJ/7JqcBLSF6DJgF7vQnAnS0Nl9w7E812jbcHFPvVdLPeTTEb
BufYpIthw1Dz1BT9fHEkb617QHc1cbO1UN385tIBMrBP
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:56 2024 by rpki-client on console-fra.rpki-client.org