Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/286kE9W36R0vx8Eu5nde4P_EvUc.roa
File: 286kE9W36R0vx8Eu5nde4P_EvUc.roa (raw, json)
Hash identifier: 1tA80fbdiIyjVgcfR2azyDz5ChW4YZAZstBxspcmilM=
Subject key identifier: DB:CE:A4:13:D5:B7:E9:1D:2F:C7:C1:2E:E6:77:5E:E0:FF:C4:BD:47
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 018811787ED94F223577319B2C9D7648024A
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/286kE9W36R0vx8Eu5nde4P_EvUc.roa
Signing time: Fri 12 May 2023 19:38:09 +0000
ROA not before: Fri 12 May 2023 19:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 77.105.166.0/24 maxlen: 24
77.105.167.0/24 maxlen: 24
185.225.201.0/24 maxlen: 24
185.225.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:78:7e:d9:4f:22:35:77:31:9b:2c:9d:76:48:02:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: May 12 19:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbcea413d5b7e91d2fc7c12ee6775ee0ffc4bd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:46:e9:80:e7:fd:b8:17:d0:0e:a1:a8:70:
fe:0d:c8:40:28:b3:dd:37:25:1b:fe:6b:53:f3:bf:
68:7e:fe:08:a3:07:6e:22:a4:bf:42:f2:81:cd:09:
62:4a:88:16:3f:7d:88:68:7e:e2:84:d7:f7:c8:77:
31:e5:de:20:a9:4a:c5:26:6d:a2:5b:4d:69:9f:e7:
99:03:7a:f3:31:3e:48:5e:97:62:74:f8:61:56:85:
89:3c:9f:f2:89:e3:ba:ce:f6:24:9a:34:a7:a1:ed:
e1:0e:33:1f:49:fe:69:18:d7:cc:96:04:2d:ba:eb:
8f:eb:7c:02:5e:13:b1:2b:9c:64:62:e4:ec:49:92:
a8:86:71:7c:8c:a0:56:cf:88:21:e6:e0:fb:f7:c0:
68:fc:92:c2:50:b9:be:f5:fd:0f:48:4c:c6:a9:3c:
e2:db:e6:53:26:44:5d:08:83:b9:67:f7:da:1d:3b:
8e:00:e6:3b:de:2d:1a:f5:b5:73:68:95:7a:43:6e:
7d:1d:6a:87:44:d1:ea:33:83:f0:d1:17:a5:c0:bb:
58:d2:b0:4b:31:04:f0:cf:44:27:d0:a5:23:ba:06:
25:36:a6:d5:ee:8b:c4:16:7c:03:4f:31:ac:50:19:
6f:b6:79:c9:7a:7b:d5:e7:ac:2e:cd:20:0a:33:73:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:A4:13:D5:B7:E9:1D:2F:C7:C1:2E:E6:77:5E:E0:FF:C4:BD:47
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/286kE9W36R0vx8Eu5nde4P_EvUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.166.0/23
185.225.200.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:99:b4:0b:18:44:e5:f1:0b:31:d1:c1:5c:26:e0:c4:0d:7c:
8d:dd:d3:23:d4:71:35:95:70:87:81:10:2d:9a:b5:59:db:f2:
f6:45:3f:72:2b:b7:c1:55:cb:ce:83:c4:4c:45:60:1a:79:8c:
74:d3:4c:9c:e2:f1:e1:86:93:d7:0b:2e:e8:0c:aa:57:2f:ff:
79:40:85:bc:bc:99:a1:c4:c5:9f:1a:12:32:00:07:f8:b8:74:
84:29:cc:80:f8:8a:e6:02:06:16:85:67:e7:91:8e:af:d8:2b:
eb:81:47:80:4c:69:20:f3:12:06:ba:d4:8b:2b:9a:fb:33:13:
f5:da:f6:25:6b:21:78:9a:73:b0:37:0a:ea:7c:b7:32:ad:80:
34:9e:a9:89:ac:dc:c4:b5:59:41:db:6b:8a:c0:f4:b7:82:57:
02:15:03:e1:63:72:ad:b5:85:d4:e4:ec:3e:9f:88:8c:f8:67:
1e:ac:49:76:5b:c4:75:9f:ef:4a:58:d3:fc:b6:c3:7e:5f:60:
2c:e5:87:9a:89:f3:3c:a7:9f:ff:1a:20:26:47:c8:85:d2:f4:
c6:4a:90:1a:1b:99:2f:15:1b:14:e9:f4:65:7e:a9:bd:f0:78:
41:2f:0e:b3:59:ef:e6:99:b7:70:42:0a:2f:72:80:fb:c5:06:
da:59:65:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgReH7ZTyI1dzGbLJ12SAJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjMwNTEyMTkzODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmNlYTQxM2Q1YjdlOTFkMmZjN2MxMmVlNjc3NWVlMGZmYzRiZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiehG6YDn/bgX0A6hqHD+DchAKLPd
NyUb/mtT879ofv4IowduIqS/QvKBzQliSogWP32IaH7ihNf3yHcx5d4gqUrFJm2i
W01pn+eZA3rzMT5IXpdidPhhVoWJPJ/yieO6zvYkmjSnoe3hDjMfSf5pGNfMlgQt
uuuP63wCXhOxK5xkYuTsSZKohnF8jKBWz4gh5uD798Bo/JLCULm+9f0PSEzGqTzi
2+ZTJkRdCIO5Z/faHTuOAOY73i0a9bVzaJV6Q259HWqHRNHqM4Pw0RelwLtY0rBL
MQTwz0Qn0KUjugYlNqbV7ovEFnwDTzGsUBlvtnnJenvV56wuzSAKM3PvjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNvOpBPVt+kdL8fBLuZ3XuD/xL1HMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvMjg2a0U5VzM2UjB2eDhFdTVuZGU0UF9FdlVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTWmmAwQB
ueHIMA0GCSqGSIb3DQEBCwUAA4IBAQCMmbQLGETl8Qsx0cFcJuDEDXyN3dMj1HE1
lXCHgRAtmrVZ2/L2RT9yK7fBVcvOg8RMRWAaeYx000yc4vHhhpPXCy7oDKpXL/95
QIW8vJmhxMWfGhIyAAf4uHSEKcyA+IrmAgYWhWfnkY6v2CvrgUeATGkg8xIGutSL
K5r7MxP12vYlayF4mnOwNwrqfLcyrYA0nqmJrNzEtVlB22uKwPS3glcCFQPhY3Kt
tYXU5Ow+n4iM+GcerEl2W8R1n+9KWNP8tsN+X2As5YeaifM8p5//GiAmR8iF0vTG
SpAaG5kvFRsU6fRlfqm98HhBLw6zWe/mmbdwQgovcoD7xQbaWWVP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:00 2023 by rpki-client on console-fra.rpki-client.org