Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/xgsQHLZ_DVE327TNYowcMJmKgY8.roa
File: xgsQHLZ_DVE327TNYowcMJmKgY8.roa (raw, json)
Hash identifier: wy6dZmzUJY1XH9aYwXqU14ih0Xwq+pjnK82TtYz64Ls=
Subject key identifier: C6:0B:10:1C:B6:7F:0D:51:37:DB:B4:CD:62:8C:1C:30:99:8A:81:8F
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0187A2E9784848589A1F300F6550731143BD
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/xgsQHLZ_DVE327TNYowcMJmKgY8.roa
Signing time: Fri 21 Apr 2023 08:23:42 +0000
ROA not before: Fri 21 Apr 2023 08:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.248.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:e9:78:48:48:58:9a:1f:30:0f:65:50:73:11:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Apr 21 08:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c60b101cb67f0d5137dbb4cd628c1c30998a818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:15:e3:16:75:2d:56:28:1a:cd:5d:06:f3:8f:
9e:dc:96:4b:83:46:d0:90:33:e7:3e:d1:f3:91:01:
a5:51:a1:08:75:7b:82:59:4e:03:65:be:de:b1:b8:
07:4d:2f:b8:7f:0a:9d:e3:47:89:a4:75:d4:d4:b6:
89:cd:ab:9e:0e:ef:39:b8:91:99:92:e9:6d:df:25:
b5:34:b8:47:54:9a:cb:84:0b:7c:4c:a5:f1:53:d4:
a3:36:fd:e5:42:c3:72:97:6e:c7:aa:8a:5b:ba:50:
bd:c3:b4:7f:9a:e7:26:44:f8:51:f0:be:f3:3e:e3:
a3:ab:31:88:34:a4:1c:c2:35:5c:44:ee:b6:6e:b7:
b9:6e:cf:ec:6e:4e:e1:a3:5e:11:fe:14:62:19:fb:
5b:2f:78:8f:b6:a0:95:2a:3e:f4:8d:31:c6:5b:c8:
c7:5b:81:71:55:6f:82:b3:53:8e:f5:35:e3:02:3c:
ab:80:ec:1b:10:5c:f6:bf:02:eb:32:cb:a0:e1:c5:
15:b2:80:6a:02:89:2a:22:03:96:21:f3:38:c8:52:
3f:ee:26:a8:10:a7:cb:c5:cc:f1:66:e3:54:4b:f8:
47:8b:98:1d:8a:86:18:31:c6:f7:1e:c8:6b:26:7c:
86:9c:0c:ee:45:41:3f:e0:14:cc:42:73:ca:9f:33:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:10:1C:B6:7F:0D:51:37:DB:B4:CD:62:8C:1C:30:99:8A:81:8F
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/xgsQHLZ_DVE327TNYowcMJmKgY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:28:21:d8:8c:3c:ca:47:57:20:80:04:81:a3:90:5a:f0:3f:
85:ed:5c:03:83:1c:d0:99:0b:08:0e:3a:2c:e1:e4:fc:88:85:
40:d9:41:e5:fc:59:ab:1f:bb:91:fb:ca:8c:67:6e:69:b6:f1:
38:a7:1b:e6:4a:16:e9:70:7f:02:40:68:97:8e:c9:f5:46:8d:
09:64:8a:fb:c0:45:0c:c2:cc:73:f8:2a:90:31:c0:9e:ce:51:
e1:f3:3f:60:57:3b:c6:f7:37:39:96:86:ab:46:e6:b0:12:7f:
3a:0b:f8:27:a4:1a:84:fa:90:03:ff:f7:b9:6c:5b:c3:39:a9:
33:1a:b0:59:6e:bc:1b:f1:0b:0c:bf:54:75:11:47:27:a1:d9:
46:86:90:7d:b8:67:52:56:22:1f:72:80:fd:1b:a8:28:79:6a:
00:f5:4b:03:8d:98:c9:4a:15:e6:34:76:3c:d2:7d:16:6c:ac:
61:52:49:a1:ea:fc:a1:83:de:b0:ea:6a:41:41:97:34:6d:80:
ae:34:35:55:2b:87:0d:7c:4f:8f:1b:48:21:d0:a6:28:c8:a0:
14:df:b1:02:02:a5:ba:cc:7e:e3:d9:b1:00:22:bf:41:35:6a:
d1:bb:df:48:29:f0:28:27:d1:38:0d:43:8b:c8:cc:0a:57:96:
d6:13:8f:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYei6XhISFiaHzAPZVBzEUO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwNDIxMDgyMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjBiMTAxY2I2N2YwZDUxMzdkYmI0Y2Q2MjhjMWMzMDk5OGE4MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhXjFnUtVigazV0G84+e3JZLg0bQ
kDPnPtHzkQGlUaEIdXuCWU4DZb7esbgHTS+4fwqd40eJpHXU1LaJzaueDu85uJGZ
kult3yW1NLhHVJrLhAt8TKXxU9SjNv3lQsNyl27HqopbulC9w7R/mucmRPhR8L7z
PuOjqzGINKQcwjVcRO62bre5bs/sbk7ho14R/hRiGftbL3iPtqCVKj70jTHGW8jH
W4FxVW+Cs1OO9TXjAjyrgOwbEFz2vwLrMsug4cUVsoBqAokqIgOWIfM4yFI/7iao
EKfLxczxZuNUS/hHi5gdioYYMcb3HshrJnyGnAzuRUE/4BTMQnPKnzP9XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYLEBy2fw1RN9u0zWKMHDCZioGPMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEveGdzUUhMWl9EVkUzMjdUTllvd2NNSm1LZ1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufgzMA0G
CSqGSIb3DQEBCwUAA4IBAQBsKCHYjDzKR1cggASBo5Ba8D+F7VwDgxzQmQsIDjos
4eT8iIVA2UHl/FmrH7uR+8qMZ25ptvE4pxvmShbpcH8CQGiXjsn1Ro0JZIr7wEUM
wsxz+CqQMcCezlHh8z9gVzvG9zc5loarRuawEn86C/gnpBqE+pAD//e5bFvDOakz
GrBZbrwb8QsMv1R1EUcnodlGhpB9uGdSViIfcoD9G6goeWoA9UsDjZjJShXmNHY8
0n0WbKxhUkmh6vyhg96w6mpBQZc0bYCuNDVVK4cNfE+PG0gh0KYoyKAU37ECAqW6
zH7j2bEAIr9BNWrRu99IKfAoJ9E4DUOLyMwKV5bWE4+5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:15 2023 by rpki-client on console-fra.rpki-client.org