Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/xgYKuubz5eig_AlB4tktNT7R5Dk.roa
File: xgYKuubz5eig_AlB4tktNT7R5Dk.roa (raw, json)
Hash identifier: V5UHpMyjyIizhMHmFM3tlwA0oNODcO2BXc6dmJb/ASY=
Subject key identifier: C6:06:0A:BA:E6:F3:E5:E8:A0:FC:09:41:E2:D9:2D:35:3E:D1:E4:39
Certificate issuer: /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Certificate serial: 0185703966604A416C0126230622B34C9CF7
Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/xgYKuubz5eig_AlB4tktNT7R5Dk.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34624
IP address blocks: 185.246.2.0/23 maxlen: 23
185.246.0.0/23 maxlen: 23
185.246.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:66:60:4a:41:6c:01:26:23:06:22:b3:4c:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6060abae6f3e5e8a0fc0941e2d92d353ed1e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:99:31:69:e9:cb:ab:e7:00:35:38:49:66:
b1:0a:fd:d4:57:f7:1a:27:8d:6b:cd:12:9b:00:89:
1a:b5:0e:43:ab:43:7b:c0:81:8a:5f:29:cf:33:bb:
b5:8c:14:2c:79:7e:3b:f0:7a:37:73:16:be:34:c8:
09:6f:b2:43:7f:6d:79:b3:e4:c5:16:59:3d:bc:33:
98:ca:97:4d:40:9b:8d:b5:80:b1:5d:d7:93:98:1a:
0c:ab:33:82:69:4c:06:b8:76:cc:d8:11:ea:1f:f5:
12:5e:d0:b1:21:10:12:dc:48:be:50:41:cb:25:52:
7a:33:f8:9e:e0:c8:ca:66:49:57:1c:1c:0f:fc:84:
d0:1f:b0:dc:68:41:13:59:3c:02:b2:5d:aa:07:8e:
29:1b:eb:5b:4a:d8:a0:f9:40:ee:39:b8:a5:36:41:
c0:0e:1e:c8:6a:0c:45:55:44:ce:59:e5:b6:c8:1c:
e5:1a:f8:d7:97:7c:5e:61:ed:7b:59:80:b7:b9:8e:
fd:8e:58:b7:6e:cc:f0:f0:54:3f:9d:f8:cd:42:40:
ce:29:62:29:6a:13:ba:32:0c:56:ae:c1:9e:40:ea:
19:c2:9c:4c:ad:b5:bb:bb:3b:97:74:cb:d8:51:63:
ae:8f:42:4c:8c:00:96:5b:51:0c:af:c7:3a:29:d3:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:0A:BA:E6:F3:E5:E8:A0:FC:09:41:E2:D9:2D:35:3E:D1:E4:39
X509v3 Authority Key Identifier:
keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/xgYKuubz5eig_AlB4tktNT7R5Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:d0:59:d5:98:84:1e:c3:30:92:ed:aa:a7:37:51:a6:fc:a7:
91:01:c2:49:a5:ac:a2:a5:91:11:09:a0:f7:07:30:de:ff:ef:
60:55:18:85:d3:fd:e0:1b:1d:53:c1:70:b8:c7:1c:2e:ea:26:
6c:7f:86:da:a2:c0:e6:21:d6:67:fd:2a:b2:f7:75:57:ce:0e:
da:d6:32:9a:2d:cf:c3:63:13:2f:fc:da:3b:62:33:0a:23:75:
75:ad:1c:57:b7:2a:2e:36:53:8b:c7:87:1c:7a:39:2c:64:3c:
53:92:e7:24:99:5e:05:b1:1f:26:70:c7:d8:25:d2:75:9e:12:
7c:37:7c:07:a6:b4:77:11:57:7a:5a:ea:fd:16:93:fe:98:ee:
52:30:70:73:f4:44:60:0f:f0:33:a5:f3:f3:fc:ca:86:6b:ca:
b7:7f:70:41:18:85:36:f7:e2:b9:1b:05:27:04:ee:de:a7:b8:
e4:83:57:9c:bc:7f:08:8f:30:6d:72:fb:b6:50:52:08:35:59:
83:90:de:30:6c:07:d5:4b:cb:07:38:7a:15:70:ca:f1:e5:c8:
c1:ff:d9:b9:47:54:5e:69:9a:84:b2:48:a6:f5:c3:a0:e3:60:
3f:53:10:38:5a:1e:2f:36:c2:ba:a5:e2:3d:dd:1a:15:1a:ee:
6f:e5:aa:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOWZgSkFsASYjBiKzTJz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTEwOGI0NmMyNWQ5MzJiNjUwNmMzZWYwYTg3ZThiODIx
MmVhMTgwHhcNMjMwMTAyMDIwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjA2MGFiYWU2ZjNlNWU4YTBmYzA5NDFlMmQ5MmQzNTNlZDFlNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB2ZMWnpy6vnADU4SWaxCv3UV/ca
J41rzRKbAIkatQ5Dq0N7wIGKXynPM7u1jBQseX478Ho3cxa+NMgJb7JDf215s+TF
Flk9vDOYypdNQJuNtYCxXdeTmBoMqzOCaUwGuHbM2BHqH/USXtCxIRAS3Ei+UEHL
JVJ6M/ie4MjKZklXHBwP/ITQH7DcaEETWTwCsl2qB44pG+tbStig+UDuObilNkHA
Dh7IagxFVUTOWeW2yBzlGvjXl3xeYe17WYC3uY79jli3bszw8FQ/nfjNQkDOKWIp
ahO6MgxWrsGeQOoZwpxMrbW7uzuXdMvYUWOuj0JMjACWW1EMr8c6KdP5fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYGCrrm8+XooPwJQeLZLTU+0eQ5MB8GA1UdIwQY
MBaAFBLhCLRsJdkytlBsPvCofouCEuoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjkt
ZWE0YTZkYzE2M2M5LzEveGdZS3V1Yno1ZWlnX0FsQjR0a3ROVDdSNURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjktZWE0YTZkYzE2M2M5
LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufYAMA0G
CSqGSIb3DQEBCwUAA4IBAQCn0FnVmIQewzCS7aqnN1Gm/KeRAcJJpayipZERCaD3
BzDe/+9gVRiF0/3gGx1TwXC4xxwu6iZsf4baosDmIdZn/Sqy93VXzg7a1jKaLc/D
YxMv/No7YjMKI3V1rRxXtyouNlOLx4ccejksZDxTkuckmV4FsR8mcMfYJdJ1nhJ8
N3wHprR3EVd6Wur9FpP+mO5SMHBz9ERgD/AzpfPz/MqGa8q3f3BBGIU29+K5GwUn
BO7ep7jkg1ecvH8IjzBtcvu2UFIINVmDkN4wbAfVS8sHOHoVcMrx5cjB/9m5R1Re
aZqEskim9cOg42A/UxA4Wh4vNsK6peI93RoVGu5v5aop
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:27 2024 by rpki-client on console-ams.rpki-client.org