Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4X6bZ0uK5xvFZ6q_lLBLzG0c9g8.roa
File: 4X6bZ0uK5xvFZ6q_lLBLzG0c9g8.roa (raw, json)
Hash identifier: z8tfrnlpRmSnp2x6OfyXKXHOERrFKIqbisPyvJE/8XE=
Subject key identifier: E1:7E:9B:67:4B:8A:E7:1B:C5:67:AA:BF:94:B0:4B:CC:6D:1C:F6:0F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B71523ACC0B8F0849D1AF6F1C8084E247
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4X6bZ0uK5xvFZ6q_lLBLzG0c9g8.roa
Signing time: Fri 27 Oct 2023 13:28:16 +0000
ROA not before: Fri 27 Oct 2023 13:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 185.231.172.0/24 maxlen: 24
185.231.175.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
185.231.174.0/24 maxlen: 24
82.115.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:52:3a:cc:0b:8f:08:49:d1:af:6f:1c:80:84:e2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 27 13:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17e9b674b8ae71bc567aabf94b04bcc6d1cf60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:72:9a:6a:67:f7:df:6c:02:85:13:1a:e0:
3e:63:5f:a7:2c:76:dd:e9:ec:a7:a2:3a:0b:49:44:
02:39:1b:34:c9:37:5f:c9:f1:82:6f:5f:81:a2:bb:
ac:53:55:3b:3e:59:2e:17:ef:06:4d:4f:7e:b7:25:
06:be:b9:ab:70:1a:6f:8c:92:4f:0b:93:a4:6e:02:
a0:b5:55:07:ef:9c:23:20:d2:94:91:71:92:fd:27:
6a:8f:23:4a:18:56:f8:82:96:9e:bb:80:86:36:c2:
12:bb:f1:b0:45:e0:e0:26:5f:fa:62:0a:75:f0:2a:
78:e3:b4:70:b0:52:25:98:51:fc:08:7e:f7:21:ad:
2e:3f:ee:ef:e2:c1:47:ae:24:94:0f:66:40:c7:47:
a0:8e:32:7a:04:99:24:10:c6:26:ff:a5:14:4f:2e:
c7:2a:33:a8:01:06:fa:98:c7:b6:a4:53:f3:76:f2:
e8:dd:53:a9:83:42:c7:e3:b8:07:31:d3:fe:e2:2d:
83:91:d4:d8:ab:b7:45:62:bf:e6:16:4d:24:8f:9c:
49:e9:cf:da:5a:7e:ad:bd:3e:be:4e:8d:7b:c0:89:
e2:35:0d:8f:30:e1:ad:79:d4:37:f4:fa:df:53:66:
5c:25:ef:75:2c:c9:e3:6b:eb:35:d8:49:6f:df:e1:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:9B:67:4B:8A:E7:1B:C5:67:AA:BF:94:B0:4B:CC:6D:1C:F6:0F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4X6bZ0uK5xvFZ6q_lLBLzG0c9g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.28.0/24
185.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:f6:d9:b9:02:ee:4e:34:3d:37:93:4a:53:e7:c7:3a:b0:8a:
4f:a1:cc:9d:16:f4:9f:9e:c9:c6:dd:7d:81:4d:7e:80:54:86:
dc:74:35:8a:3b:bb:83:af:d9:3e:6f:c8:56:ea:b7:cb:9a:16:
f4:f9:46:79:b3:6d:08:e8:02:94:2d:a7:b2:13:f1:92:bd:97:
5e:11:18:61:2a:56:18:9c:04:5b:1a:4d:0c:7a:9e:75:7d:21:
e0:2e:46:e9:12:62:e8:23:4e:46:89:3b:53:8f:14:24:f9:72:
05:77:84:50:3b:08:67:70:38:fe:e5:e4:9e:97:97:63:a0:38:
27:49:25:a6:09:3f:48:58:a4:3e:b0:4e:12:80:be:94:7b:e7:
5c:0f:52:76:07:63:94:e6:fc:45:58:86:d9:0b:a6:12:fe:d8:
53:b2:51:54:4b:47:f6:f9:dd:a9:66:32:5f:a2:aa:37:a6:82:
64:e9:6a:ef:a8:75:b6:83:ee:4a:4f:db:37:d8:25:c7:ff:75:
68:55:b7:69:4b:23:e0:a5:8c:c2:8f:84:b4:4d:31:d4:92:45:
8a:80:5e:99:14:43:6d:6b:ab:c2:73:b0:df:8e:44:de:71:33:
c6:69:57:e5:1f:36:ec:ed:d4:30:2f:ce:d8:63:37:39:ea:e2:
1e:49:c7:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtxUjrMC48ISdGvbxyAhOJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMxMDI3MTMyODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTdlOWI2NzRiOGFlNzFiYzU2N2FhYmY5NGIwNGJjYzZkMWNmNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmpymmpn999sAoUTGuA+Y1+nLHbd
6eynojoLSUQCORs0yTdfyfGCb1+BorusU1U7PlkuF+8GTU9+tyUGvrmrcBpvjJJP
C5OkbgKgtVUH75wjINKUkXGS/SdqjyNKGFb4gpaeu4CGNsISu/GwReDgJl/6Ygp1
8Cp447RwsFIlmFH8CH73Ia0uP+7v4sFHriSUD2ZAx0egjjJ6BJkkEMYm/6UUTy7H
KjOoAQb6mMe2pFPzdvLo3VOpg0LH47gHMdP+4i2DkdTYq7dFYr/mFk0kj5xJ6c/a
Wn6tvT6+To17wIniNQ2PMOGtedQ39PrfU2ZcJe91LMnja+s12Elv3+HKLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOF+m2dLiucbxWeqv5SwS8xtHPYPMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvNFg2YlowdUs1eHZGWjZxX2xMQkx6RzBjOWc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnMcAwQC
ueesMA0GCSqGSIb3DQEBCwUAA4IBAQCk9tm5Au5OND03k0pT58c6sIpPocydFvSf
nsnG3X2BTX6AVIbcdDWKO7uDr9k+b8hW6rfLmhb0+UZ5s20I6AKULaeyE/GSvZde
ERhhKlYYnARbGk0Mep51fSHgLkbpEmLoI05GiTtTjxQk+XIFd4RQOwhncDj+5eSe
l5djoDgnSSWmCT9IWKQ+sE4SgL6Ue+dcD1J2B2OU5vxFWIbZC6YS/thTslFUS0f2
+d2pZjJfoqo3poJk6WrvqHW2g+5KT9s32CXH/3VoVbdpSyPgpYzCj4S0TTHUkkWK
gF6ZFENta6vCc7DfjkTecTPGaVflHzbs7dQwL87YYzc56uIeScdg
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org