Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/0atMsE1ixHVNkAhJFZSnqxPo6XI.roa
File: 0atMsE1ixHVNkAhJFZSnqxPo6XI.roa (raw, json)
Hash identifier: TBLsqHwzpPO5QgaRCguKxpGlOLYlhqohfazsI3SszsU=
Subject key identifier: D1:AB:4C:B0:4D:62:C4:75:4D:90:08:49:15:94:A7:AB:13:E8:E9:72
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01856FF040DE085DB5C61F27D2EC7147CF1B
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/0atMsE1ixHVNkAhJFZSnqxPo6XI.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212641
IP address blocks: 185.179.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:40:de:08:5d:b5:c6:1f:27:d2:ec:71:47:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ab4cb04d62c4754d9008491594a7ab13e8e972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:5a:a5:38:59:f3:a7:fb:41:38:e6:61:21:
e0:23:74:19:9f:c3:d7:55:70:4a:c7:77:8e:a9:bd:
21:a7:78:1b:c7:ed:00:3f:c3:a2:de:1e:20:33:a8:
29:4d:d4:bf:78:ec:d6:a8:73:a3:ef:aa:71:12:b1:
ab:e2:90:89:d0:cd:be:59:55:69:ff:42:83:7f:1c:
d1:3b:af:73:c5:1d:14:8a:94:cc:9c:7c:11:85:22:
91:b0:7e:d4:94:8f:54:e3:8c:c3:40:5e:3e:5c:73:
fd:c0:7d:18:91:5c:f6:39:0e:b7:cb:81:ad:79:8e:
75:79:52:dd:5a:a9:12:4c:8d:e7:1d:66:7d:90:e6:
c1:ca:5e:c0:8f:cf:d3:0a:bc:4e:61:f5:b9:7b:a2:
15:2e:4b:db:eb:b4:0e:16:92:0c:9c:b2:68:78:49:
ef:17:34:7e:8b:df:cf:4b:02:fc:ac:31:c0:b6:01:
b8:92:0f:18:06:04:d3:f3:01:35:a2:18:10:95:8a:
48:1f:5c:8b:b9:b9:24:7d:85:f7:72:fe:58:79:51:
6a:fb:b9:3e:cd:51:5d:8e:f0:15:63:43:5d:c1:6c:
3c:e2:16:3b:dd:a1:58:c8:2b:11:1d:50:28:09:7b:
2b:3c:6b:f3:af:a7:ec:0f:ba:2f:f4:fd:cc:21:df:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:4C:B0:4D:62:C4:75:4D:90:08:49:15:94:A7:AB:13:E8:E9:72
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/0atMsE1ixHVNkAhJFZSnqxPo6XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.214.0/24
Signature Algorithm: sha256WithRSAEncryption
66:98:81:a8:19:31:45:8f:c1:d2:18:ef:91:f8:6c:26:b3:00:
d1:a0:34:e7:47:40:25:32:75:87:70:f4:a1:21:54:86:8d:70:
3f:c3:e5:12:1d:1a:9e:df:ad:c2:88:e1:c3:b0:0b:db:ef:22:
28:14:37:12:c6:8d:2f:e0:75:5e:f9:d5:38:15:54:a6:15:8d:
ed:52:68:1f:14:11:bc:18:d6:2b:87:f4:f4:9b:97:e8:24:7f:
58:36:bd:b0:72:7c:40:b8:54:ba:05:1b:be:b4:66:56:fc:58:
ad:0e:1d:4a:66:86:0a:54:8a:20:d3:b9:f2:ae:e7:56:b6:f1:
ac:6d:3f:61:8b:79:cb:61:c3:57:ea:c0:35:0e:0f:36:2c:60:
e5:f4:31:12:cf:e1:03:86:50:a6:a6:30:83:dd:af:7b:de:29:
c2:4a:c1:35:70:67:57:d5:30:cd:51:7f:02:64:a9:9f:69:e4:
55:55:e2:18:68:85:98:d0:a1:a5:c7:d2:61:8b:b7:0a:09:11:
ab:1e:1a:db:28:3e:ff:a0:01:9c:27:d2:e9:c7:f5:f1:2d:96:
17:98:79:ae:83:96:28:cf:c7:46:28:fe:23:78:3d:8e:a2:2c:
9e:09:95:a9:ff:9a:b2:8f:02:ab:e6:09:bb:14:2c:0b:d7:f1:
48:e1:30:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8EDeCF21xh8n0uxxR88bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzIxMDc4ZjM1OWQ3OTkwMjc2ZGFiYjBmOGMzMDA3MGU2
ODU5NjMwHhcNMjMwMTAyMDA0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWFiNGNiMDRkNjJjNDc1NGQ5MDA4NDkxNTk0YTdhYjEzZThlOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOxapThZ86f7QTjmYSHgI3QZn8PX
VXBKx3eOqb0hp3gbx+0AP8Oi3h4gM6gpTdS/eOzWqHOj76pxErGr4pCJ0M2+WVVp
/0KDfxzRO69zxR0UipTMnHwRhSKRsH7UlI9U44zDQF4+XHP9wH0YkVz2OQ63y4Gt
eY51eVLdWqkSTI3nHWZ9kObByl7Aj8/TCrxOYfW5e6IVLkvb67QOFpIMnLJoeEnv
FzR+i9/PSwL8rDHAtgG4kg8YBgTT8wE1ohgQlYpIH1yLubkkfYX3cv5YeVFq+7k+
zVFdjvAVY0NdwWw84hY73aFYyCsRHVAoCXsrPGvzr6fsD7ov9P3MId92vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGrTLBNYsR1TZAISRWUp6sT6OlyMB8GA1UdIwQY
MBaAFCcyEHjzWdeZAnbauw+MMAcOaFljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQt
YzM0MzFkMzIwNDA2LzEvMGF0TXNFMWl4SFZOa0FoSkZaU25xeFBvNlhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQtYzM0MzFkMzIwNDA2
LzEvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubPWMA0G
CSqGSIb3DQEBCwUAA4IBAQBmmIGoGTFFj8HSGO+R+GwmswDRoDTnR0AlMnWHcPSh
IVSGjXA/w+USHRqe363CiOHDsAvb7yIoFDcSxo0v4HVe+dU4FVSmFY3tUmgfFBG8
GNYrh/T0m5foJH9YNr2wcnxAuFS6BRu+tGZW/FitDh1KZoYKVIog07nyrudWtvGs
bT9hi3nLYcNX6sA1Dg82LGDl9DESz+EDhlCmpjCD3a973inCSsE1cGdX1TDNUX8C
ZKmfaeRVVeIYaIWY0KGlx9Jhi7cKCRGrHhrbKD7/oAGcJ9Lpx/XxLZYXmHmug5Yo
z8dGKP4jeD2OoiyeCZWp/5qyjwKr5gm7FCwL1/FI4TAP
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:57 2024 by rpki-client on console-fra.rpki-client.org