Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/7LbwOI08eKBUnX8DQAXmBA6fa-g.roa
File: 7LbwOI08eKBUnX8DQAXmBA6fa-g.roa (raw, json)
Hash identifier: ba0Ksa/hGxEKpqW9pXMX7zimLai+KFsLubVDAw5cOgc=
Subject key identifier: EC:B6:F0:38:8D:3C:78:A0:54:9D:7F:03:40:05:E6:04:0E:9F:6B:E8
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01898D3BB46BC92D55EA6F0D1F47BEE9342A
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/7LbwOI08eKBUnX8DQAXmBA6fa-g.roa
Signing time: Tue 25 Jul 2023 13:27:27 +0000
ROA not before: Tue 25 Jul 2023 13:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.50.0/24 maxlen: 24
185.248.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:3b:b4:6b:c9:2d:55:ea:6f:0d:1f:47:be:e9:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jul 25 13:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecb6f0388d3c78a0549d7f034005e6040e9f6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:42:40:26:99:02:fe:1a:1c:b9:f2:95:60:
d2:86:cd:91:89:61:6a:69:46:ab:cf:2f:bc:4a:60:
84:00:d2:cd:74:c2:de:22:24:02:4e:bd:e9:98:77:
37:43:7a:a3:16:f4:31:cd:59:87:a4:88:3d:ab:c6:
a8:78:6b:70:3b:08:de:ef:72:31:0b:5c:ee:58:66:
4c:69:68:35:b6:65:60:b1:e8:b1:7b:98:f4:3e:89:
b9:3a:bf:74:6c:f4:ea:6f:5e:4f:d1:90:54:83:97:
a9:43:79:a7:0b:bf:13:4a:32:7d:40:45:69:7c:c3:
2b:80:cb:ec:09:62:82:de:fe:07:81:b1:0e:bb:6c:
fd:8e:47:72:1f:f4:95:d1:c3:61:6c:30:c7:4c:69:
ad:62:73:ce:61:a5:df:e9:3d:1c:0c:92:f1:1d:62:
d5:ee:a7:ac:e1:8e:16:7a:c6:c8:77:09:98:5c:0f:
b6:ba:78:90:fc:ff:f0:11:33:52:7c:de:ed:7b:d5:
90:e9:8d:58:d4:ab:4f:6f:9d:fb:a5:57:61:19:0a:
d3:14:ad:28:18:0b:ed:d2:50:36:12:d9:60:33:00:
72:e4:5e:84:f4:3e:25:1d:f3:52:e6:3d:8d:90:92:
94:11:bc:4f:70:0a:ec:cf:9f:f0:b6:1d:3d:00:37:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:F0:38:8D:3C:78:A0:54:9D:7F:03:40:05:E6:04:0E:9F:6B:E8
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/7LbwOI08eKBUnX8DQAXmBA6fa-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
74:0e:f6:d0:bf:f9:c1:e9:42:b4:7d:10:2f:5d:c1:e0:38:d5:
54:d2:a0:bf:78:58:42:b5:84:08:4d:a8:10:39:e1:2c:f8:9f:
1f:44:9e:ac:53:c8:86:cd:98:65:30:77:8d:d8:e3:da:11:ba:
33:ad:e8:fb:e1:36:49:e6:33:3a:7f:f1:70:c1:67:49:ee:b3:
98:38:94:2e:dd:b2:d4:8d:31:ac:5a:f3:a5:c4:99:68:6b:a8:
51:08:8f:33:0a:f3:2c:2e:17:8c:8a:a5:24:ff:0c:e8:1c:02:
a1:15:db:e0:46:95:1a:27:74:c8:6d:d9:88:b2:28:f8:a6:4e:
ea:d2:25:71:8e:90:53:b1:cf:61:41:84:a3:e7:98:0f:07:dd:
bf:83:a6:28:05:fb:e8:6c:45:59:bc:d6:e8:25:2e:b9:8d:5a:
47:56:34:a6:63:98:b1:95:db:f4:66:84:d6:bc:fe:01:93:89:
f9:05:61:8e:53:62:65:8b:84:59:73:e8:1c:91:82:6c:89:bf:
e9:9a:0c:34:c6:00:c7:db:fe:8b:fe:d7:ef:f6:bf:f8:f4:17:
8d:6c:a3:81:fc:59:de:62:e9:20:1b:87:1c:95:75:2b:bb:07:
69:1c:5a:e8:b8:86:4b:15:76:41:54:eb:04:fb:15:33:c7:fe:
e3:4e:d5:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmNO7RryS1V6m8NH0e+6TQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwNzI1MTMyNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2I2ZjAzODhkM2M3OGEwNTQ5ZDdmMDM0MDA1ZTYwNDBlOWY2YmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyVCQCaZAv4aHLnylWDShs2RiWFq
aUarzy+8SmCEANLNdMLeIiQCTr3pmHc3Q3qjFvQxzVmHpIg9q8aoeGtwOwje73Ix
C1zuWGZMaWg1tmVgseixe5j0Pom5Or90bPTqb15P0ZBUg5epQ3mnC78TSjJ9QEVp
fMMrgMvsCWKC3v4HgbEOu2z9jkdyH/SV0cNhbDDHTGmtYnPOYaXf6T0cDJLxHWLV
7qes4Y4WesbIdwmYXA+2uniQ/P/wETNSfN7te9WQ6Y1Y1KtPb537pVdhGQrTFK0o
GAvt0lA2EtlgMwBy5F6E9D4lHfNS5j2NkJKUEbxPcArsz5/wth09ADejcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOy28DiNPHigVJ1/A0AF5gQOn2voMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvN0xid09JMDhlS0JVblg4RFFBWG1CQTZmYS1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufgyMA0G
CSqGSIb3DQEBCwUAA4IBAQB0DvbQv/nB6UK0fRAvXcHgONVU0qC/eFhCtYQITagQ
OeEs+J8fRJ6sU8iGzZhlMHeN2OPaEbozrej74TZJ5jM6f/FwwWdJ7rOYOJQu3bLU
jTGsWvOlxJloa6hRCI8zCvMsLheMiqUk/wzoHAKhFdvgRpUaJ3TIbdmIsij4pk7q
0iVxjpBTsc9hQYSj55gPB92/g6YoBfvobEVZvNboJS65jVpHVjSmY5ixldv0ZoTW
vP4Bk4n5BWGOU2Jli4RZc+gckYJsib/pmgw0xgDH2/6L/tfv9r/49BeNbKOB/Fne
YukgG4cclXUruwdpHFrouIZLFXZBVOsE+xUzx/7jTtVf
-----END CERTIFICATE-----
Generated at Mon Oct 23 05:12:15 2023 by rpki-client on console-fra.rpki-client.org