Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/PU7RxvEHLDzCBi2ffWigOeB0sw8.roa
File: PU7RxvEHLDzCBi2ffWigOeB0sw8.roa (raw, json)
Hash identifier: YDmFTCAW7pl3QfomlG5kPEJYHdIJ3PHdRm44fiRuATg=
Subject key identifier: 3D:4E:D1:C6:F1:07:2C:3C:C2:06:2D:9F:7D:68:A0:39:E0:74:B3:0F
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 01856D53D5A8698FD3FC7DE1DF6103F86027
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/PU7RxvEHLDzCBi2ffWigOeB0sw8.roa
Signing time: Sun 01 Jan 2023 12:34:48 +0000
ROA not before: Sun 01 Jan 2023 12:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d5:a8:69:8f:d3:fc:7d:e1:df:61:03:f8:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 12:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d4ed1c6f1072c3cc2062d9f7d68a039e074b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:be:3c:0b:b0:22:be:0e:18:ce:fe:9c:af:
7d:da:7d:07:46:d2:bc:10:28:90:0f:1a:f1:57:06:
76:43:46:c1:bb:04:c1:7e:97:ab:09:b5:ae:61:31:
39:6e:e4:0f:fa:45:48:74:85:4e:eb:7b:d6:f4:e6:
7f:c1:ee:52:96:ff:c4:21:ab:ec:0e:01:c5:5f:18:
ad:42:f8:47:f6:6d:e6:17:97:6d:ce:d9:10:2d:7e:
e0:6a:55:7a:cd:0f:7c:c0:de:8a:3c:e1:d4:f7:e2:
25:17:85:ac:c8:0f:ca:b8:ac:eb:13:df:a7:fb:78:
09:31:6b:32:c7:21:be:c7:cd:6c:9c:db:9d:c0:f5:
cd:bb:63:55:7a:4b:8b:d7:8b:71:c1:99:23:c7:81:
04:39:55:9f:ed:38:6c:d3:57:ce:ed:8e:bf:d7:e7:
9c:fc:67:bf:11:2b:18:40:2f:7a:d4:79:d8:77:ab:
ee:56:d3:bb:78:f7:55:6d:33:a8:14:47:8e:8b:ec:
77:c4:26:4e:83:a8:f8:1d:35:eb:0a:df:cf:46:30:
c1:c3:a6:b8:de:a5:c5:f8:6d:f5:fc:c5:81:56:66:
8b:f1:08:7a:d6:b3:ea:97:8d:93:03:28:c5:64:37:
d4:e5:e7:43:a8:cf:1a:0e:53:8f:9d:d4:02:90:b2:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:D1:C6:F1:07:2C:3C:C2:06:2D:9F:7D:68:A0:39:E0:74:B3:0F
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/PU7RxvEHLDzCBi2ffWigOeB0sw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.98.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3d:97:e6:5a:fc:16:bb:81:30:86:b9:47:b1:97:75:74:29:
7e:71:e3:46:ba:92:35:3b:3d:d1:4d:f8:4b:15:28:f4:0d:5d:
c0:1c:31:47:a5:7f:7d:e2:f9:cb:0e:c8:63:6a:2a:8b:2f:73:
0e:5c:0b:af:bf:8f:bd:d2:a3:83:e1:16:a0:01:c3:82:92:a5:
d9:44:3f:2d:60:b5:a7:a3:c2:cb:00:a0:a1:24:0b:db:94:95:
06:5d:e0:89:cd:19:97:fc:1d:65:88:f3:a2:4c:91:3a:55:60:
52:ad:ab:92:50:cc:6a:1d:91:cc:1c:bb:20:78:a0:ac:5d:a2:
68:5c:b6:b9:f3:21:7c:13:1f:0d:ab:6a:86:2f:98:fa:d4:e5:
a1:49:5f:61:44:33:1b:59:7d:b8:b1:aa:12:bf:99:8b:e3:a4:
84:70:11:05:90:8e:56:6c:63:a5:04:c6:55:40:c0:0d:ad:26:
f3:68:dd:f2:fd:09:46:62:90:5c:4b:30:3f:fd:12:96:0b:7d:
a8:19:b0:33:ff:af:7f:74:06:44:13:0a:fc:65:9e:5b:04:33:
9f:23:4d:80:f8:90:c7:d1:9a:92:e8:7b:40:69:8f:22:9d:db:
42:dc:77:9c:c3:85:d6:67:50:a4:cd:f5:b8:45:ba:c4:98:a1:
92:76:eb:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtU9WoaY/T/H3h32ED+GAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw
MjQ0NTUwHhcNMjMwMTAxMTIzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDRlZDFjNmYxMDcyYzNjYzIwNjJkOWY3ZDY4YTAzOWUwNzRiMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulK+PAuwIr4OGM7+nK992n0HRtK8
ECiQDxrxVwZ2Q0bBuwTBfperCbWuYTE5buQP+kVIdIVO63vW9OZ/we5Slv/EIavs
DgHFXxitQvhH9m3mF5dtztkQLX7galV6zQ98wN6KPOHU9+IlF4WsyA/KuKzrE9+n
+3gJMWsyxyG+x81snNudwPXNu2NVekuL14txwZkjx4EEOVWf7Ths01fO7Y6/1+ec
/Ge/ESsYQC961HnYd6vuVtO7ePdVbTOoFEeOi+x3xCZOg6j4HTXrCt/PRjDBw6a4
3qXF+G31/MWBVmaL8Qh61rPql42TAyjFZDfU5edDqM8aDlOPndQCkLITOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1O0cbxByw8wgYtn31ooDngdLMPMB8GA1UdIwQY
MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt
NDcyYjBkMDcyZTgzLzEvUFU3Unh2RUhMRHpDQmkyZmZXaWdPZUIwc3c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz
LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFiMA0G
CSqGSIb3DQEBCwUAA4IBAQBjPZfmWvwWu4EwhrlHsZd1dCl+ceNGupI1Oz3RTfhL
FSj0DV3AHDFHpX994vnLDshjaiqLL3MOXAuvv4+90qOD4RagAcOCkqXZRD8tYLWn
o8LLAKChJAvblJUGXeCJzRmX/B1liPOiTJE6VWBSrauSUMxqHZHMHLsgeKCsXaJo
XLa58yF8Ex8Nq2qGL5j61OWhSV9hRDMbWX24saoSv5mL46SEcBEFkI5WbGOlBMZV
QMANrSbzaN3y/QlGYpBcSzA//RKWC32oGbAz/69/dAZEEwr8ZZ5bBDOfI02A+JDH
0ZqS6HtAaY8indtC3Hecw4XWZ1CkzfW4RbrEmKGSduu6
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:49 2024 by rpki-client on console-fra.rpki-client.org