Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/naq_cWIfQ4SZtcVGcbFZ3td4hX8.roa
File: naq_cWIfQ4SZtcVGcbFZ3td4hX8.roa (raw, json)
Hash identifier: /nwnllS3rck99JrfDnijMCZ7uRIbKYRxNCMqsfHBg1E=
Subject key identifier: 9D:AA:BF:71:62:1F:43:84:99:B5:C5:46:71:B1:59:DE:D7:78:85:7F
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0188943382D16F59AFC24CF2C1CF3972A10D
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/naq_cWIfQ4SZtcVGcbFZ3td4hX8.roa
Signing time: Wed 07 Jun 2023 04:53:03 +0000
ROA not before: Wed 07 Jun 2023 04:53:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.248.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:33:82:d1:6f:59:af:c2:4c:f2:c1:cf:39:72:a1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jun 7 04:53:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9daabf71621f438499b5c54671b159ded778857f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:94:f7:bd:96:25:63:1c:1f:8a:00:10:7b:
a5:bb:ef:a3:e8:42:c7:8f:1f:9c:34:4a:b7:a7:12:
98:97:20:d0:6f:64:6c:f0:99:a0:ef:8f:ef:a3:2e:
dd:65:96:a2:9f:f7:f2:52:02:37:fa:ee:d5:67:49:
61:9c:73:0a:7d:e2:a2:bc:ca:55:d0:66:9e:ef:f5:
df:7a:72:01:57:39:85:cd:99:dc:12:22:6c:bb:ed:
c0:ba:ea:46:d1:2b:0c:e6:7e:a4:e4:3f:21:12:7d:
c2:ac:64:0c:ec:3b:97:28:0c:c5:bc:44:bc:50:f4:
e0:2f:b9:f5:12:fe:c5:9c:50:26:3c:86:f9:7f:81:
81:aa:bd:36:76:e6:4e:79:e2:69:50:8a:9f:cd:cb:
d1:26:9b:ef:0a:88:c7:1e:f7:d0:06:70:56:84:11:
5b:14:5d:9c:d5:94:9e:14:8c:81:ec:07:97:8c:89:
f1:7c:77:ac:90:c4:e0:61:9c:cf:ba:1c:b3:21:2e:
0e:90:cb:b8:c3:6d:cc:9b:d3:f7:05:c0:a9:22:5e:
64:74:c6:b4:59:16:42:8e:bc:43:79:bd:ab:14:a0:
16:ee:65:29:20:41:82:f2:fc:7f:a3:18:7f:69:c0:
46:7d:31:3b:53:64:a3:88:65:ae:78:08:82:b7:3e:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:BF:71:62:1F:43:84:99:B5:C5:46:71:B1:59:DE:D7:78:85:7F
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/naq_cWIfQ4SZtcVGcbFZ3td4hX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e1:ad:10:6c:ce:f6:24:f3:00:f9:b6:5b:13:da:94:1a:04:
4e:c9:2c:b0:23:3c:3e:8a:64:b3:35:ac:24:01:3b:f0:33:57:
5e:c3:c3:b7:3a:aa:62:bd:aa:7a:e0:db:7d:82:f0:96:5f:cc:
b9:aa:2f:2a:e0:8f:7f:47:77:f4:54:74:19:2f:b1:21:e1:1f:
f6:b2:09:88:c5:ff:b7:e1:d6:ad:af:de:21:a1:26:25:67:da:
b4:6a:c1:3b:ec:e4:04:fd:12:99:cb:01:09:3a:75:13:3e:5e:
8a:f9:3c:a0:db:35:1d:3b:ba:5e:4d:54:9c:36:fc:07:b9:59:
1a:5e:10:d2:f4:78:13:bf:ee:d2:3b:ee:7e:95:28:9e:ea:ef:
71:72:c3:d6:dc:1d:6e:d4:e8:00:c9:38:05:1c:ea:52:65:3c:
78:09:8d:69:ef:e3:54:55:14:ca:ac:80:7c:b1:2f:e7:1c:36:
a8:6d:d4:4d:77:bb:b0:ed:04:89:cc:b8:81:ab:9b:42:88:cc:
b8:9f:1e:4f:b7:64:cd:41:f4:d4:e3:cd:5e:1a:2a:33:57:30:
2d:23:f0:89:92:12:af:7d:78:be:bb:7d:6d:5f:50:24:7b:4e:
a2:97:26:82:ee:4c:96:f7:67:67:97:c9:6c:b1:a5:6f:5a:1a:
da:ae:e9:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiUM4LRb1mvwkzywc85cqENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwNjA3MDQ1MzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGFhYmY3MTYyMWY0Mzg0OTliNWM1NDY3MWIxNTlkZWQ3Nzg4NTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjWU972WJWMcH4oAEHulu++j6ELH
jx+cNEq3pxKYlyDQb2Rs8Jmg74/voy7dZZain/fyUgI3+u7VZ0lhnHMKfeKivMpV
0Gae7/XfenIBVzmFzZncEiJsu+3AuupG0SsM5n6k5D8hEn3CrGQM7DuXKAzFvES8
UPTgL7n1Ev7FnFAmPIb5f4GBqr02duZOeeJpUIqfzcvRJpvvCojHHvfQBnBWhBFb
FF2c1ZSeFIyB7AeXjInxfHeskMTgYZzPuhyzIS4OkMu4w23Mm9P3BcCpIl5kdMa0
WRZCjrxDeb2rFKAW7mUpIEGC8vx/oxh/acBGfTE7U2SjiGWueAiCtz5qoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2qv3FiH0OEmbXFRnGxWd7XeIV/MB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvbmFxX2NXSWZRNFNadGNWR2NiRlozdGQ0aFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufgzMA0G
CSqGSIb3DQEBCwUAA4IBAQAr4a0QbM72JPMA+bZbE9qUGgROySywIzw+imSzNawk
ATvwM1dew8O3Oqpivap64Nt9gvCWX8y5qi8q4I9/R3f0VHQZL7Eh4R/2sgmIxf+3
4datr94hoSYlZ9q0asE77OQE/RKZywEJOnUTPl6K+Tyg2zUdO7peTVScNvwHuVka
XhDS9HgTv+7SO+5+lSie6u9xcsPW3B1u1OgAyTgFHOpSZTx4CY1p7+NUVRTKrIB8
sS/nHDaobdRNd7uw7QSJzLiBq5tCiMy4nx5Pt2TNQfTU481eGiozVzAtI/CJkhKv
fXi+u31tX1Ake06ilyaC7kyW92dnl8lssaVvWhrarum1
-----END CERTIFICATE-----
Generated at Tue Jul 25 14:04:42 2023 by rpki-client on console-fra.rpki-client.org