Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/R8shqsJZdhFvkEroMVZkkpajA4Y.roa
File: R8shqsJZdhFvkEroMVZkkpajA4Y.roa (raw, json)
Hash identifier: J0P6fYX0fjjR4NOCeaqUxUwaoFUIy2+MMQn/yjwmUOM=
Subject key identifier: 47:CB:21:AA:C2:59:76:11:6F:90:4A:E8:31:56:64:92:96:A3:03:86
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 01856C25E0ADEB6EC79727F5F4BEF4792916
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/R8shqsJZdhFvkEroMVZkkpajA4Y.roa
Signing time: Sun 01 Jan 2023 07:04:59 +0000
ROA not before: Sun 01 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41847
IP address blocks: 185.187.56.0/22 maxlen: 24
2a0b:9780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e0:ad:eb:6e:c7:97:27:f5:f4:be:f4:79:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Jan 1 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47cb21aac25976116f904ae83156649296a30386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:f9:d0:07:24:6d:44:17:7f:ab:35:b2:d8:
91:de:90:af:d9:3f:50:77:9a:0f:af:d4:9a:10:f5:
f9:2e:76:d5:f3:a4:6e:85:e2:30:dd:57:b2:eb:82:
b0:d8:4f:7e:c2:38:db:ae:44:64:43:53:d1:2b:58:
99:4b:b7:f6:02:6f:f3:55:cc:d2:b6:1e:89:71:1e:
dc:44:26:0e:9f:64:c9:6e:8d:d8:30:bd:d7:68:5f:
c9:7d:b3:35:c4:54:1c:ee:6a:fc:c2:42:cf:86:f4:
aa:fc:77:f5:8f:27:2a:7e:e3:61:36:f7:19:7a:c3:
3d:21:a0:04:8a:f5:0c:0c:db:4a:b4:4d:ba:ac:69:
a8:62:d1:ee:76:bd:58:6f:16:14:57:31:20:a9:30:
1b:7e:24:58:38:9f:14:8e:2b:2d:eb:f9:2f:36:19:
0e:6b:5d:99:03:82:8d:dd:5d:c6:db:4e:a7:90:06:
24:0e:fb:0e:da:6d:1c:76:99:6a:b8:a5:32:a9:65:
96:03:63:4e:97:f0:de:18:d8:be:e4:b7:fe:4b:c7:
01:0b:c2:67:37:7f:22:09:2c:21:5d:95:50:f8:4c:
63:df:46:6e:70:61:89:ca:04:32:03:86:72:7d:97:
0a:43:e3:9e:38:fe:e9:ff:6b:16:c7:de:ac:5b:7e:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:21:AA:C2:59:76:11:6F:90:4A:E8:31:56:64:92:96:A3:03:86
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/R8shqsJZdhFvkEroMVZkkpajA4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.56.0/22
IPv6:
2a0b:9780::/29
Signature Algorithm: sha256WithRSAEncryption
aa:b0:56:96:7f:01:fa:65:bf:5d:19:8a:9c:54:13:f2:99:9d:
8d:c9:e6:b0:c7:13:a0:ac:a0:0b:a3:2d:77:c8:ad:70:c8:b0:
dc:4c:a4:c4:c2:52:5b:b3:ba:3e:91:42:a6:13:73:91:da:24:
e8:07:f2:b4:15:9c:39:42:90:6b:fc:52:d3:fa:cf:b1:ac:df:
2f:e9:94:2d:4a:10:1a:23:cc:61:d3:c3:18:35:72:c4:05:e3:
d3:0c:65:43:04:4a:e5:09:7a:6a:33:4d:bc:9b:de:9d:19:b5:
79:88:1e:d3:ec:4c:6e:7e:71:76:6c:90:fe:99:06:2d:f4:24:
9a:04:a1:9b:99:11:0b:d0:d7:cc:1a:3b:ec:c8:c4:e7:ed:07:
da:5d:56:58:3f:24:d7:74:90:4a:37:25:db:f9:d6:b1:eb:8f:
bd:6a:f7:f8:8c:78:f7:20:03:79:31:ff:dd:c6:c2:73:38:e8:
d2:54:4f:f8:ba:1a:b1:22:68:a1:fc:a1:a8:45:28:e2:98:40:
03:e2:29:37:c7:56:ff:68:1a:dd:9d:80:1a:61:24:53:e0:32:
c3:52:9f:41:42:05:7c:61:24:d4:3d:6b:44:a4:1f:5c:a6:97:
60:c8:c3:a6:1e:a9:ef:65:c8:ad:01:1c:04:03:d4:34:ea:c5:
93:ee:c3:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsJeCt627Hlyf19L70eSkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmU0MDdhNmI5OWMwZjA1MjkzMmNjNzc3ZmYwZGU5YjNh
MTk3NGUwHhcNMjMwMTAxMDcwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2NiMjFhYWMyNTk3NjExNmY5MDRhZTgzMTU2NjQ5Mjk2YTMwMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT750AckbUQXf6s1stiR3pCv2T9Q
d5oPr9SaEPX5LnbV86RuheIw3Vey64Kw2E9+wjjbrkRkQ1PRK1iZS7f2Am/zVczS
th6JcR7cRCYOn2TJbo3YML3XaF/JfbM1xFQc7mr8wkLPhvSq/Hf1jycqfuNhNvcZ
esM9IaAEivUMDNtKtE26rGmoYtHudr1YbxYUVzEgqTAbfiRYOJ8Ujist6/kvNhkO
a12ZA4KN3V3G206nkAYkDvsO2m0cdplquKUyqWWWA2NOl/DeGNi+5Lf+S8cBC8Jn
N38iCSwhXZVQ+Exj30ZucGGJygQyA4ZyfZcKQ+OeOP7p/2sWx96sW37cWwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEfLIarCWXYRb5BK6DFWZJKWowOGMB8GA1UdIwQY
MBaAFGVuQHprmcDwUpMsx3f/DemzoZdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYt
YzAxNWE5ZDRmOGVmLzEvUjhzaHFzSlpkaEZ2a0Vyb01WWmtrcGFqQTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYtYzAxNWE5ZDRmOGVm
LzEvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubs4MA0E
AgACMAcDBQMqC5eAMA0GCSqGSIb3DQEBCwUAA4IBAQCqsFaWfwH6Zb9dGYqcVBPy
mZ2NyeawxxOgrKALoy13yK1wyLDcTKTEwlJbs7o+kUKmE3OR2iToB/K0FZw5QpBr
/FLT+s+xrN8v6ZQtShAaI8xh08MYNXLEBePTDGVDBErlCXpqM028m96dGbV5iB7T
7ExufnF2bJD+mQYt9CSaBKGbmREL0NfMGjvsyMTn7QfaXVZYPyTXdJBKNyXb+dax
64+9avf4jHj3IAN5Mf/dxsJzOOjSVE/4uhqxImih/KGoRSjimEAD4ik3x1b/aBrd
nYAaYSRT4DLDUp9BQgV8YSTUPWtEpB9cppdgyMOmHqnvZcitARwEA9Q06sWT7sNe
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:19 2024 by rpki-client on console-ams.rpki-client.org