Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/0wmrYOSQC9GAoIsYWrrBQNi1rNs.roa
File: 0wmrYOSQC9GAoIsYWrrBQNi1rNs.roa (raw, json)
Hash identifier: +UfsHPbSAI/1ah+YtTngFIiQ15zWcevdKKEE9U5e3w4=
Subject key identifier: D3:09:AB:60:E4:90:0B:D1:80:A0:8B:18:5A:BA:C1:40:D8:B5:AC:DB
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018A6EDF7FB65B7CB55ACA76F3F7E76964FC
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/0wmrYOSQC9GAoIsYWrrBQNi1rNs.roa
Signing time: Thu 07 Sep 2023 09:00:55 +0000
ROA not before: Thu 07 Sep 2023 09:00:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25311
IP address blocks: 86.105.206.0/23 maxlen: 24
195.182.220.0/23 maxlen: 24
2a03:9c20:2002::/48 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:df:7f:b6:5b:7c:b5:5a:ca:76:f3:f7:e7:69:64:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Sep 7 09:00:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d309ab60e4900bd180a08b185abac140d8b5acdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:e6:09:33:cc:ae:d4:4e:bd:04:05:73:6d:
9c:5d:4f:8e:4b:53:02:50:24:02:f6:77:74:c6:e3:
a9:84:7c:40:73:c9:09:1d:24:ee:4d:c8:27:2b:ef:
7f:c6:ea:07:2d:8e:65:85:02:a5:6b:5f:46:bc:d8:
f6:a7:7e:71:0b:af:92:15:ee:c6:0f:13:56:e8:f7:
e0:7a:cb:db:81:a1:9c:0e:86:bc:bf:d3:c3:ee:ec:
35:50:02:e0:2e:24:9c:2a:91:23:ca:8a:82:ad:4a:
cf:3d:93:d9:2a:bd:c1:9d:07:f6:b2:8c:42:a8:ea:
7b:1b:6c:eb:37:c0:f6:6a:a6:d6:e3:92:c7:98:a5:
40:0b:64:ac:a6:c1:c3:51:b1:f7:f7:99:15:d4:3f:
d9:c0:84:50:89:8c:92:5a:5b:c2:73:e3:b4:b8:e6:
15:e3:de:33:e4:2c:72:c2:40:25:54:fe:0d:b6:05:
54:65:44:68:ac:17:d0:5f:9c:87:da:39:39:fd:f3:
de:3e:aa:fe:50:05:bd:9d:c3:3a:ba:01:aa:22:91:
db:57:a0:27:0b:d7:39:3f:aa:d8:bc:58:9c:d7:46:
43:b9:0a:45:7f:f4:8f:0b:2f:6d:fd:8a:09:53:3f:
79:10:c6:a8:e2:eb:56:be:df:99:bb:8c:f8:e9:3b:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:AB:60:E4:90:0B:D1:80:A0:8B:18:5A:BA:C1:40:D8:B5:AC:DB
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/0wmrYOSQC9GAoIsYWrrBQNi1rNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.206.0/23
195.182.220.0/23
IPv6:
2a03:9c20:2002::/48
Signature Algorithm: sha256WithRSAEncryption
4d:3d:80:ac:5e:2b:5a:b8:81:75:5e:de:ac:fd:df:d8:ed:39:
ce:6a:82:9d:8f:a3:27:a4:b9:ba:fa:40:9d:9a:05:2d:be:ae:
df:01:ba:e0:82:96:e0:4a:55:d5:37:70:4c:5e:e4:e2:74:47:
bd:17:59:a0:93:20:ef:f5:66:4d:32:34:3f:93:52:73:b8:7a:
bd:e4:36:7b:5c:2a:8b:58:65:2a:66:79:27:72:17:e8:fe:18:
14:fb:ae:ca:f7:24:db:e0:d3:6e:e3:24:66:b6:76:d3:4b:56:
11:2f:a0:b2:1b:55:c9:ce:a0:8e:19:a2:b1:f9:18:f2:2f:da:
30:eb:c3:7a:54:e9:c0:00:1b:7f:39:34:f6:19:65:a4:15:de:
0a:b1:cf:69:15:c7:4d:55:30:f8:62:41:05:26:f7:fe:af:e0:
c9:23:43:84:09:51:33:9c:76:c7:f0:40:32:69:1a:eb:7a:2a:
06:03:0a:cd:7b:7a:cc:da:7d:a2:73:8b:0b:d6:9c:ec:0a:69:
05:83:d8:55:1b:3d:08:07:c4:db:58:0a:db:47:64:c3:cd:3d:
6d:51:c2:06:b8:d6:a5:dd:92:f7:a9:99:dd:48:00:38:3b:3d:
60:05:b8:03:99:2b:e3:ba:0c:b3:28:ca:25:b9:2b:af:13:aa:
31:26:90:3f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYpu33+2W3y1Wsp28/fnaWT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjMwOTA3MDkwMDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzA5YWI2MGU0OTAwYmQxODBhMDhiMTg1YWJhYzE0MGQ4YjVhY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvzmCTPMrtROvQQFc22cXU+OS1MC
UCQC9nd0xuOphHxAc8kJHSTuTcgnK+9/xuoHLY5lhQKla19GvNj2p35xC6+SFe7G
DxNW6PfgesvbgaGcDoa8v9PD7uw1UALgLiScKpEjyoqCrUrPPZPZKr3BnQf2soxC
qOp7G2zrN8D2aqbW45LHmKVAC2SspsHDUbH395kV1D/ZwIRQiYySWlvCc+O0uOYV
494z5CxywkAlVP4NtgVUZURorBfQX5yH2jk5/fPePqr+UAW9ncM6ugGqIpHbV6An
C9c5P6rYvFic10ZDuQpFf/SPCy9t/YoJUz95EMao4utWvt+Zu4z46TszjQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNMJq2DkkAvRgKCLGFq6wUDYtazbMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvMHdtcllPU1FDOUdBb0lzWVdyckJRTmkxck5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBVmnOAwQB
w7bcMA8EAgACMAkDBwAqA5wgIAIwDQYJKoZIhvcNAQELBQADggEBAE09gKxeK1q4
gXVe3qz939jtOc5qgp2Poyekubr6QJ2aBS2+rt8BuuCCluBKVdU3cExe5OJ0R70X
WaCTIO/1Zk0yND+TUnO4er3kNntcKotYZSpmeSdyF+j+GBT7rsr3JNvg027jJGa2
dtNLVhEvoLIbVcnOoI4ZorH5GPIv2jDrw3pU6cAAG385NPYZZaQV3gqxz2kVx01V
MPhiQQUm9/6v4MkjQ4QJUTOcdsfwQDJpGut6KgYDCs17eszafaJziwvWnOwKaQWD
2FUbPQgHxNtYCttHZMPNPW1Rwga41qXdkvepmd1IADg7PWAFuAOZK+O6DLMoyiW5
K68TqjEmkD8=
-----END CERTIFICATE-----
Generated at Mon Sep 18 08:12:12 2023 by rpki-client on console-fra.rpki-client.org