Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/kIg9KY2xxXDWXs0I2DmdtRTQeyk.roa
File: kIg9KY2xxXDWXs0I2DmdtRTQeyk.roa (raw, json)
Hash identifier: DsxQa+ZPqMNEBvg4LSakGkPzijQi1yuYKsXYkKLMSMI=
Subject key identifier: 90:88:3D:29:8D:B1:C5:70:D6:5E:CD:08:D8:39:9D:B5:14:D0:7B:29
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 018867E55C5B66058AFA3AE25913E3AA658F
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/kIg9KY2xxXDWXs0I2DmdtRTQeyk.roa
Signing time: Mon 29 May 2023 14:24:24 +0000
ROA not before: Mon 29 May 2023 14:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.50.0/24 maxlen: 24
185.248.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:e5:5c:5b:66:05:8a:fa:3a:e2:59:13:e3:aa:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: May 29 14:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90883d298db1c570d65ecd08d8399db514d07b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:aa:82:79:74:fa:7c:e7:60:43:25:20:f9:
85:29:50:a4:d3:c0:03:41:a6:80:84:a3:f1:ef:06:
d2:80:6b:1c:9d:56:8e:56:37:71:cc:d0:22:35:5c:
f2:eb:39:cd:98:e5:5a:82:32:b0:3c:80:96:a3:38:
8d:c1:f4:da:d0:91:50:72:f7:59:66:e8:8b:dd:14:
b6:ec:ec:1b:83:2c:27:5d:75:f6:03:61:55:d1:5f:
47:27:fa:72:f3:6c:21:f4:63:bf:33:04:e1:4b:f1:
f0:84:54:63:b3:f7:12:ec:f3:b6:1f:35:5c:1f:e2:
6d:b1:a2:32:83:12:f0:cb:71:e8:c8:a4:7a:1b:9b:
5c:6b:e2:c6:82:66:01:ad:ad:50:14:a5:fb:bf:49:
5d:3b:ea:f4:4d:9c:fc:98:2d:21:40:05:07:a2:b8:
6d:58:89:47:d3:38:d6:9c:01:24:30:f0:b5:5d:2c:
a7:d2:a2:d0:df:05:11:62:e8:3d:ea:1e:f9:a3:f7:
6b:4f:40:97:bf:b8:09:a8:f4:d2:d3:c2:f5:ed:1c:
0f:3a:93:e5:ac:25:e0:83:b2:af:90:c3:4a:31:fb:
15:ef:fa:6e:45:40:19:08:74:7a:4f:d8:cd:f8:e7:
a5:96:90:ca:cd:99:cd:2d:34:34:30:e0:73:d0:b3:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:3D:29:8D:B1:C5:70:D6:5E:CD:08:D8:39:9D:B5:14:D0:7B:29
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/kIg9KY2xxXDWXs0I2DmdtRTQeyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
17:0c:a1:97:d7:d2:07:c9:45:da:eb:11:16:fd:37:9d:1a:4f:
e7:2c:70:48:f9:43:08:2e:79:7e:08:65:06:cb:2b:eb:59:48:
c6:08:20:1f:c5:d2:36:9c:d2:cf:7c:47:99:08:de:b0:fe:25:
df:51:63:b1:c1:6b:1b:16:73:c5:16:01:99:f9:8f:6a:bb:0a:
b2:0b:f6:d8:eb:28:2b:37:d6:68:6e:29:8b:64:36:c5:25:b6:
fa:1e:1e:57:a7:02:30:81:1c:96:0b:06:4b:c5:29:1e:57:37:
fb:71:f4:5c:6f:a9:4a:b2:18:98:7f:f6:1f:a6:84:2a:b0:f0:
d7:b4:1a:b8:eb:2c:1b:99:b1:d4:3b:91:70:ae:c1:bf:cb:51:
da:a2:2d:b2:da:dd:ae:63:79:d4:01:e8:6a:a6:cf:13:cb:d8:
74:e6:bf:60:c3:05:b3:97:7a:e5:31:1b:a5:d9:95:39:e7:fb:
26:93:af:4e:42:ec:8c:23:7e:dd:8b:69:4e:79:7f:57:09:5f:
81:68:93:c9:2d:dc:20:86:ab:31:34:d9:ae:80:7b:5d:02:0b:
87:ac:41:f7:81:65:1e:62:2b:b5:fc:c6:4f:55:66:1a:e2:12:
07:f0:c2:fd:0d:ad:e2:d5:5d:20:f6:88:01:8c:a8:b9:f4:70:
5c:89:8c:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhn5VxbZgWK+jriWRPjqmWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwNTI5MTQyNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDg4M2QyOThkYjFjNTcwZDY1ZWNkMDhkODM5OWRiNTE0ZDA3YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1peqgnl0+nznYEMlIPmFKVCk08AD
QaaAhKPx7wbSgGscnVaOVjdxzNAiNVzy6znNmOVagjKwPICWoziNwfTa0JFQcvdZ
ZuiL3RS27OwbgywnXXX2A2FV0V9HJ/py82wh9GO/MwThS/HwhFRjs/cS7PO2HzVc
H+JtsaIygxLwy3HoyKR6G5tca+LGgmYBra1QFKX7v0ldO+r0TZz8mC0hQAUHorht
WIlH0zjWnAEkMPC1XSyn0qLQ3wURYug96h75o/drT0CXv7gJqPTS08L17RwPOpPl
rCXgg7KvkMNKMfsV7/puRUAZCHR6T9jN+OellpDKzZnNLTQ0MOBz0LNkSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCIPSmNscVw1l7NCNg5nbUU0HspMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEva0lnOUtZMnh4WERXWHMwSTJEbWR0UlRRZXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufgyMA0G
CSqGSIb3DQEBCwUAA4IBAQAXDKGX19IHyUXa6xEW/TedGk/nLHBI+UMILnl+CGUG
yyvrWUjGCCAfxdI2nNLPfEeZCN6w/iXfUWOxwWsbFnPFFgGZ+Y9quwqyC/bY6ygr
N9ZobimLZDbFJbb6Hh5XpwIwgRyWCwZLxSkeVzf7cfRcb6lKshiYf/YfpoQqsPDX
tBq46ywbmbHUO5FwrsG/y1Haoi2y2t2uY3nUAehqps8Ty9h05r9gwwWzl3rlMRul
2ZU55/smk69OQuyMI37di2lOeX9XCV+BaJPJLdwghqsxNNmugHtdAguHrEH3gWUe
Yiu1/MZPVWYa4hIH8ML9Da3i1V0g9ogBjKi59HBciYxI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:15 2023 by rpki-client on console-fra.rpki-client.org