Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/gm46JliFHtKXQuTNmCk8ioWZR2I.roa
File: gm46JliFHtKXQuTNmCk8ioWZR2I.roa (raw, json)
Hash identifier: i/bgpZ/+Ffp7DBC74WGBFEXMHs6PGFPGzfZi+HLc/iM=
Subject key identifier: 82:6E:3A:26:58:85:1E:D2:97:42:E4:CD:98:29:3C:8A:85:99:47:62
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 018C53C9757F10252168DAF5EAFBA240ED55
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/gm46JliFHtKXQuTNmCk8ioWZR2I.roa
Signing time: Sun 10 Dec 2023 12:52:40 +0000
ROA not before: Sun 10 Dec 2023 12:52:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200697
IP address blocks: 185.136.241.0/24 maxlen: 24
185.136.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:c9:75:7f:10:25:21:68:da:f5:ea:fb:a2:40:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Dec 10 12:52:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826e3a2658851ed29742e4cd98293c8a85994762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:80:45:fc:f1:f7:50:7a:bb:f8:6a:4e:4c:
97:88:12:ca:8e:92:d7:52:1f:53:85:29:be:de:87:
70:c7:af:cf:d9:f7:35:a0:24:90:0a:f1:b1:5e:96:
7c:b1:90:27:60:7a:b7:02:83:ff:d4:22:a4:12:fd:
81:c1:db:01:36:57:06:a5:f2:9d:b5:c8:cf:24:98:
b0:7a:ce:d9:50:28:fb:69:66:96:6b:f4:69:32:09:
67:63:f9:99:0c:1a:18:a6:30:0b:0e:df:32:10:c2:
ab:49:a6:0a:c2:f0:b2:82:88:0d:c6:04:2a:b2:d8:
e5:4f:92:d0:f7:71:d3:40:f9:c0:71:89:66:8b:88:
12:51:13:cd:92:91:c5:79:8f:be:c5:93:c6:ae:f2:
3a:25:54:b6:61:b5:a4:c9:bd:e3:d6:05:89:7b:0e:
88:75:05:34:0f:72:64:bb:2e:df:1d:27:7b:8a:f7:
72:d9:8e:a9:18:d4:56:a7:69:9d:93:8b:cb:17:cd:
86:88:6a:8a:a1:d3:a3:3b:bd:f4:6a:24:ba:b1:3c:
7a:51:64:fb:44:7f:ef:2b:d3:ee:5a:bf:9c:0b:fc:
5b:42:fb:8b:1d:c7:fe:a5:7e:81:8b:2c:87:dd:be:
c7:9c:f3:df:a5:b2:31:a9:af:36:21:3a:ed:3d:60:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:3A:26:58:85:1E:D2:97:42:E4:CD:98:29:3C:8A:85:99:47:62
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/gm46JliFHtKXQuTNmCk8ioWZR2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.241.0-185.136.242.255
Signature Algorithm: sha256WithRSAEncryption
5c:c2:9b:c3:de:ef:35:99:16:31:03:55:e5:9f:e3:8e:39:3d:
a6:df:58:a3:65:9c:a2:20:70:ee:68:8e:22:12:5c:b7:b4:6b:
93:aa:61:72:46:1f:9d:3e:d7:b9:e2:84:68:59:3b:28:58:3c:
cc:f9:01:ce:49:0f:d9:87:89:f8:20:a1:e6:e3:ab:ee:4c:86:
89:fd:40:03:f3:ce:27:8f:f1:68:35:72:3e:47:78:71:5c:36:
c0:06:48:1b:c8:1a:30:ae:3b:d8:4e:74:1e:f4:f9:3e:f7:4d:
71:57:62:fa:fe:be:38:95:f1:1b:4c:bb:5a:dd:1c:9d:ea:85:
0f:c2:fe:f0:df:33:b6:09:59:5c:45:22:0a:b0:5f:a8:4a:a4:
1f:a4:d1:94:fd:53:ac:a2:10:63:c1:56:27:6e:65:7c:60:35:
64:27:8c:08:b6:e9:1d:13:d9:0e:05:11:d2:fe:19:d6:90:cd:
3c:23:65:75:bc:e5:64:44:c4:27:9b:01:57:19:66:e5:58:e7:
eb:a1:cd:7e:5a:0e:ee:b7:d0:ca:2a:24:ae:c0:8a:2a:fa:55:
61:8a:e5:30:a3:6c:cb:bc:f8:a0:68:67:6e:21:b3:2d:01:a3:
04:65:f3:49:02:dc:ad:6d:6c:19:6a:84:8a:ae:f7:a3:3a:bf:
b9:35:5f:41
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYxTyXV/ECUhaNr16vuiQO1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMWNkMWIzYzg3NzI5NTZmYTg1NTM1YTg0NjRiNGNhMTk2
NjNhZGUwHhcNMjMxMjEwMTI1MjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjZlM2EyNjU4ODUxZWQyOTc0MmU0Y2Q5ODI5M2M4YTg1OTk0NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3qARfzx91B6u/hqTkyXiBLKjpLX
Uh9ThSm+3odwx6/P2fc1oCSQCvGxXpZ8sZAnYHq3AoP/1CKkEv2BwdsBNlcGpfKd
tcjPJJiwes7ZUCj7aWaWa/RpMglnY/mZDBoYpjALDt8yEMKrSaYKwvCygogNxgQq
stjlT5LQ93HTQPnAcYlmi4gSURPNkpHFeY++xZPGrvI6JVS2YbWkyb3j1gWJew6I
dQU0D3Jkuy7fHSd7ivdy2Y6pGNRWp2mdk4vLF82GiGqKodOjO730aiS6sTx6UWT7
RH/vK9PuWr+cC/xbQvuLHcf+pX6BiyyH3b7HnPPfpbIxqa82ITrtPWCbAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIJuOiZYhR7Sl0LkzZgpPIqFmUdiMB8GA1UdIwQY
MBaAFJwc0bPIdylW+oVTWoRktMoZZjreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJ6UnM4aDNLVmI2aFZOYWhHUzB5aGxtT3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wNmVhYjAtNmM2ZS00Yzk1LWJiZGMt
OTE2MDQ3MDYyYTIyLzEvZ200NkpsaUZIdEtYUXVUTm1Dazhpb1daUjJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wNmVhYjAtNmM2ZS00Yzk1LWJiZGMtOTE2MDQ3MDYyYTIy
LzEvbkJ6UnM4aDNLVmI2aFZOYWhHUzB5aGxtT3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5iPED
BAC5iPIwDQYJKoZIhvcNAQELBQADggEBAFzCm8Pe7zWZFjEDVeWf4445PabfWKNl
nKIgcO5ojiISXLe0a5OqYXJGH50+17nihGhZOyhYPMz5Ac5JD9mHifggoebjq+5M
hon9QAPzzieP8Wg1cj5HeHFcNsAGSBvIGjCuO9hOdB70+T73TXFXYvr+vjiV8RtM
u1rdHJ3qhQ/C/vDfM7YJWVxFIgqwX6hKpB+k0ZT9U6yiEGPBViduZXxgNWQnjAi2
6R0T2Q4FEdL+GdaQzTwjZXW85WRExCebAVcZZuVY5+uhzX5aDu630MoqJK7Aiir6
VWGK5TCjbMu8+KBoZ24hsy0BowRl80kC3K1tbBlqhIqu96M6v7k1X0E=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:44 2024 by rpki-client on console-fra.rpki-client.org