Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/0Sr6dFLj4bGNRZS4vPQuHUZHu4M.roa
File: 0Sr6dFLj4bGNRZS4vPQuHUZHu4M.roa (raw, json)
Hash identifier: PfD0pDWP05hia/EgLCXpgzDDSfZ2CRcvSz7dvlYtR/4=
Subject key identifier: D1:2A:FA:74:52:E3:E1:B1:8D:45:94:B8:BC:F4:2E:1D:46:47:BB:83
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 01857227E471ED25FB0451A121DD688B3E5C
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/0Sr6dFLj4bGNRZS4vPQuHUZHu4M.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 185.65.141.0/24 maxlen: 24
91.213.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e4:71:ed:25:fb:04:51:a1:21:dd:68:8b:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12afa7452e3e1b18d4594b8bcf42e1d4647bb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:a3:ab:46:1c:6c:03:8b:4b:c6:ba:f6:dd:
0d:39:ab:26:90:e1:d6:c7:68:c5:2a:0e:e5:92:7a:
b3:f9:d1:f8:3f:9b:e3:7b:3a:37:3b:4d:ae:7b:bb:
3c:09:0b:36:45:6c:28:8a:5a:9d:df:0d:4e:1a:74:
58:6e:c1:76:05:00:5e:5d:02:61:ee:90:d5:3c:85:
cc:6b:e4:a1:01:cc:18:1f:77:96:0c:94:41:8c:a5:
e5:72:9a:9d:ff:0d:8d:d9:11:d7:f4:f1:49:66:fa:
2b:8a:1e:0b:a6:c1:72:1d:bd:ca:19:03:ba:60:1e:
4f:de:48:50:b2:ad:f9:15:80:3d:ca:ec:7b:01:a1:
3a:2a:d6:3c:40:cc:e6:13:e5:49:3f:bd:7f:e7:25:
f2:6b:61:98:f5:74:0e:2c:fb:72:20:05:61:74:bb:
27:63:95:8d:58:89:b2:b7:7b:e2:6c:58:e6:3a:cc:
96:f9:e6:80:e2:f5:bf:78:b2:7b:58:67:d4:c8:3c:
1b:a1:95:99:e4:85:12:c0:2d:09:78:37:b9:29:72:
2f:08:f7:24:e7:ee:8b:4b:fa:36:8d:95:c5:ad:0b:
49:a7:38:7b:51:32:5f:05:df:fc:d8:58:d4:5e:0c:
b9:20:b8:23:8e:2e:64:01:43:49:c0:41:96:b0:8d:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:FA:74:52:E3:E1:B1:8D:45:94:B8:BC:F4:2E:1D:46:47:BB:83
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/0Sr6dFLj4bGNRZS4vPQuHUZHu4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.148.0/24
185.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3e:1f:10:c8:cd:de:ac:ba:f6:85:66:9e:63:d9:07:49:bb:
fc:d4:3e:65:5b:44:36:c3:eb:fa:88:86:b8:c5:11:c9:47:2c:
53:7c:a3:27:0f:41:20:61:de:ad:8f:e6:ab:4f:d7:64:46:b0:
11:99:de:30:6d:08:f4:8d:54:16:f6:58:d4:d7:f3:1a:12:1d:
ad:49:41:79:2c:11:58:62:43:d8:33:2d:46:6d:ce:45:cc:0d:
57:30:a7:64:b0:2d:a4:65:ca:7c:4a:49:49:f0:eb:65:b1:0d:
c8:c4:e4:e0:2a:09:c9:ab:88:10:41:e7:4d:40:98:28:24:93:
3e:26:ec:93:97:ee:81:f6:1d:e9:2b:81:53:ca:6d:e1:82:89:
2a:c0:1d:50:99:7e:f9:4a:b6:d0:31:31:5d:9d:47:72:97:6a:
b2:17:a6:02:12:d8:06:42:9c:5f:ba:35:79:ab:e7:3a:cc:28:
8c:20:58:46:4a:99:ff:5d:8f:25:8a:01:09:22:d7:f4:ab:d9:
12:a4:ab:31:b9:37:ed:e4:d0:6b:d8:cf:cb:05:e1:25:69:41:
82:82:25:2e:44:67:fd:5b:03:bb:4e:99:38:b6:fc:38:c4:2d:
26:f8:b1:fc:50:74:b7:d8:c6:78:75:45:9f:c7:f9:f6:6a:96:
41:5c:02:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyJ+Rx7SX7BFGhId1oiz5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjMwMTAyMTEwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTJhZmE3NDUyZTNlMWIxOGQ0NTk0YjhiY2Y0MmUxZDQ2NDdiYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTejq0YcbAOLS8a69t0NOasmkOHW
x2jFKg7lknqz+dH4P5vjezo3O02ue7s8CQs2RWwoilqd3w1OGnRYbsF2BQBeXQJh
7pDVPIXMa+ShAcwYH3eWDJRBjKXlcpqd/w2N2RHX9PFJZvorih4LpsFyHb3KGQO6
YB5P3khQsq35FYA9yux7AaE6KtY8QMzmE+VJP71/5yXya2GY9XQOLPtyIAVhdLsn
Y5WNWImyt3vibFjmOsyW+eaA4vW/eLJ7WGfUyDwboZWZ5IUSwC0JeDe5KXIvCPck
5+6LS/o2jZXFrQtJpzh7UTJfBd/82FjUXgy5ILgjji5kAUNJwEGWsI3DRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNEq+nRS4+GxjUWUuLz0Lh1GR7uDMB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvMFNyNmRGTGo0YkdOUlpTNHZQUXVIVVpIdTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WUAwQA
uUGNMA0GCSqGSIb3DQEBCwUAA4IBAQATPh8QyM3erLr2hWaeY9kHSbv81D5lW0Q2
w+v6iIa4xRHJRyxTfKMnD0EgYd6tj+arT9dkRrARmd4wbQj0jVQW9ljU1/MaEh2t
SUF5LBFYYkPYMy1Gbc5FzA1XMKdksC2kZcp8SklJ8OtlsQ3IxOTgKgnJq4gQQedN
QJgoJJM+JuyTl+6B9h3pK4FTym3hgokqwB1QmX75SrbQMTFdnUdyl2qyF6YCEtgG
QpxfujV5q+c6zCiMIFhGSpn/XY8ligEJItf0q9kSpKsxuTft5NBr2M/LBeElaUGC
giUuRGf9WwO7Tpk4tvw4xC0m+LH8UHS32MZ4dUWfx/n2apZBXALW
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:06 2024 by rpki-client on console-fra.rpki-client.org