Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/xQRausQdbv_nhwvsaMH515nYlZc.roa
File: xQRausQdbv_nhwvsaMH515nYlZc.roa (raw, json)
Hash identifier: K7more1iR4L1HfgPrqIEFJGeGpB6zvqjzfFszU0xVjo=
Subject key identifier: C5:04:5A:BA:C4:1D:6E:FF:E7:87:0B:EC:68:C1:F9:D7:99:D8:95:97
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 01856C4A592D0C565E1640A1FDC0C501960D
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/xQRausQdbv_nhwvsaMH515nYlZc.roa
Signing time: Sun 01 Jan 2023 07:44:49 +0000
ROA not before: Sun 01 Jan 2023 07:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62104
IP address blocks: 185.47.213.0/24 maxlen: 24
185.47.212.0/22 maxlen: 22
185.47.212.0/24 maxlen: 24
185.47.215.0/24 maxlen: 24
185.47.214.0/24 maxlen: 24
185.67.76.0/24 maxlen: 24
185.67.76.0/22 maxlen: 22
185.67.78.0/24 maxlen: 24
185.67.77.0/24 maxlen: 24
185.67.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:59:2d:0c:56:5e:16:40:a1:fd:c0:c5:01:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Jan 1 07:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5045abac41d6effe7870bec68c1f9d799d89597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:0c:03:57:64:ae:4b:0c:f4:52:00:13:60:
ab:ad:d0:48:c0:42:44:b6:17:60:b2:38:c8:7a:d4:
09:40:c8:b9:c6:1b:88:f0:3b:3c:4e:77:c7:33:63:
02:0e:8d:63:a4:dd:62:91:ff:b8:54:68:5f:36:de:
dc:6c:c4:54:70:b5:9d:77:e4:f6:80:d5:17:e1:75:
90:55:9b:03:ab:91:58:cb:12:fa:9c:05:9a:7c:a5:
11:e2:5b:94:a9:56:16:98:98:8e:64:3d:09:74:e7:
9a:78:99:d8:45:03:77:0a:e7:42:6a:5e:08:3f:d6:
1e:9e:4e:b3:75:31:a7:84:74:f1:a4:9b:83:0e:6b:
78:21:27:5a:bf:60:c1:46:b5:09:12:1e:c3:0f:08:
ad:b7:f2:6c:ad:b6:84:15:84:b8:ac:59:4a:66:95:
d9:e0:c3:1a:d0:bb:f9:aa:fa:0f:e6:2f:03:11:d2:
d2:f1:a0:0b:de:15:d9:4a:69:96:14:5e:08:0d:32:
c7:69:c3:ce:dd:b3:84:bc:fb:39:80:07:18:6a:af:
67:26:01:5f:bb:e9:48:6f:4d:35:ad:33:f8:32:8b:
25:6c:0d:f5:7b:fa:30:6d:12:6b:3f:c0:0c:84:0c:
9d:45:43:73:3a:08:dd:23:0f:9d:78:8a:1c:9b:f2:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:5A:BA:C4:1D:6E:FF:E7:87:0B:EC:68:C1:F9:D7:99:D8:95:97
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/xQRausQdbv_nhwvsaMH515nYlZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.212.0/22
185.67.76.0/22
Signature Algorithm: sha256WithRSAEncryption
93:74:62:81:02:23:23:ed:aa:c3:4a:22:85:4e:ad:4d:57:96:
00:20:80:53:5c:57:e9:19:7e:07:9b:0e:96:c0:e8:27:ab:b0:
aa:84:d9:e6:98:85:ed:e0:26:6a:d6:cf:7a:93:95:25:80:82:
9b:06:ce:d4:9d:c8:8e:81:17:ba:19:fa:32:df:43:0c:f4:22:
a7:b2:ea:81:01:d9:1b:21:8d:1e:48:f5:f0:c8:f6:99:16:89:
6e:a7:fb:09:c5:e2:1e:59:cb:bb:45:02:12:98:d5:c3:30:e0:
1e:b8:70:28:00:f7:7a:bf:a4:f0:1c:aa:bb:8b:e8:11:41:69:
ca:32:63:ad:24:03:f7:34:28:19:69:48:7b:f0:39:b4:77:98:
d9:ae:5c:0a:77:92:59:1b:99:c1:55:08:de:4f:15:38:a9:c5:
f4:e7:1e:29:73:64:6b:42:65:bd:1a:9c:88:d8:53:d5:6f:45:
51:11:7d:0d:02:7f:94:5d:7c:5c:bc:08:24:5e:cc:71:e8:7b:
72:3c:d5:c7:31:df:ab:35:56:a2:51:3c:09:fb:8a:e6:f3:e7:
4d:8a:bd:7b:64:78:da:82:46:51:96:13:d1:79:c8:55:f0:d8:
85:27:82:f3:ca:52:a3:85:5e:bd:06:ad:74:fa:3b:0a:9e:ee:
0c:6a:d8:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsSlktDFZeFkCh/cDFAZYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDFlMjIwYjYwMWI2N2ZlMzBjYmI3YjdjMWJmMjJmYmUy
MmZiNGYwHhcNMjMwMTAxMDc0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTA0NWFiYWM0MWQ2ZWZmZTc4NzBiZWM2OGMxZjlkNzk5ZDg5NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo8MA1dkrksM9FIAE2CrrdBIwEJE
thdgsjjIetQJQMi5xhuI8Ds8TnfHM2MCDo1jpN1ikf+4VGhfNt7cbMRUcLWdd+T2
gNUX4XWQVZsDq5FYyxL6nAWafKUR4luUqVYWmJiOZD0JdOeaeJnYRQN3CudCal4I
P9Yenk6zdTGnhHTxpJuDDmt4ISdav2DBRrUJEh7DDwitt/JsrbaEFYS4rFlKZpXZ
4MMa0Lv5qvoP5i8DEdLS8aAL3hXZSmmWFF4IDTLHacPO3bOEvPs5gAcYaq9nJgFf
u+lIb001rTP4MoslbA31e/owbRJrP8AMhAydRUNzOgjdIw+deIocm/LcUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUEWrrEHW7/54cL7GjB+deZ2JWXMB8GA1UdIwQY
MBaAFNnR4iC2AbZ/4wy7e3wb8i++IvtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzIt
YWYyN2Q3Y2ExYmY2LzEveFFSYXVzUWRidl9uaHd2c2FNSDUxNW5ZbFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzItYWYyN2Q3Y2ExYmY2
LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuS/UAwQC
uUNMMA0GCSqGSIb3DQEBCwUAA4IBAQCTdGKBAiMj7arDSiKFTq1NV5YAIIBTXFfp
GX4Hmw6WwOgnq7CqhNnmmIXt4CZq1s96k5UlgIKbBs7UnciOgRe6Gfoy30MM9CKn
suqBAdkbIY0eSPXwyPaZFolup/sJxeIeWcu7RQISmNXDMOAeuHAoAPd6v6TwHKq7
i+gRQWnKMmOtJAP3NCgZaUh78Dm0d5jZrlwKd5JZG5nBVQjeTxU4qcX05x4pc2Rr
QmW9GpyI2FPVb0VREX0NAn+UXXxcvAgkXsxx6HtyPNXHMd+rNVaiUTwJ+4rm8+dN
ir17ZHjagkZRlhPRechV8NiFJ4LzylKjhV69Bq10+jsKnu4MatgU
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:28 2024 by rpki-client on console-ams.rpki-client.org