Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/CbV47YJsbsMLeqeScdtSJg4sygg.roa
File: CbV47YJsbsMLeqeScdtSJg4sygg.roa (raw, json)
Hash identifier: DTt8zmhnQ3U/5nUm/ZXH1BG6Mn30MDoKW4OhadNyoOk=
Subject key identifier: 09:B5:78:ED:82:6C:6E:C3:0B:7A:A7:92:71:DB:52:26:0E:2C:CA:08
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 01856F2FD196472DC034A6E5BE0FFF30E3F5
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/CbV47YJsbsMLeqeScdtSJg4sygg.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49621
IP address blocks: 185.105.200.0/22 maxlen: 22
188.64.48.0/21 maxlen: 21
2a03:8f00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d1:96:47:2d:c0:34:a6:e5:be:0f:ff:30:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b578ed826c6ec30b7aa79271db52260e2cca08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:a8:b7:4c:90:7b:c5:00:50:00:8e:aa:b2:
5f:22:3f:e7:6b:8e:47:5c:de:0f:68:9e:3c:d3:e0:
02:26:37:18:60:0d:d5:6b:38:e5:35:6a:9d:31:8c:
b9:e9:2f:db:39:76:9a:b1:16:51:fc:89:04:d5:e1:
04:0b:94:d0:a3:b9:cf:53:0d:61:ce:38:e9:14:aa:
af:f8:a3:31:bb:67:fb:6a:cb:ef:ec:19:5b:0c:4c:
11:73:f1:04:ca:c7:c0:a8:bb:37:90:9b:78:40:45:
59:b3:d1:d9:7f:0f:62:50:4f:4b:a8:2f:43:98:24:
75:4d:53:24:a1:c6:d5:49:38:48:95:d1:cb:c6:61:
3b:5e:5e:1e:bd:04:24:11:ea:2e:3e:0a:d1:74:4e:
13:86:15:bc:b9:b2:a9:bb:08:52:78:f3:4b:a5:ad:
07:6f:8c:7c:b3:46:6f:aa:f4:e5:a4:22:ec:a7:a2:
a3:8d:85:68:70:d4:ab:97:6f:8c:30:f5:94:a2:95:
0d:97:5d:3b:90:c5:d1:3f:a8:23:0f:d7:dd:77:d2:
44:db:9b:ab:b4:81:fb:f8:39:f5:0a:24:c2:0d:76:
e2:49:bc:56:92:05:84:6c:14:3a:04:a7:c2:bc:2d:
28:b0:0e:ba:56:0d:06:f1:5b:9f:5f:d2:ba:fc:c2:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:78:ED:82:6C:6E:C3:0B:7A:A7:92:71:DB:52:26:0E:2C:CA:08
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/CbV47YJsbsMLeqeScdtSJg4sygg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.200.0/22
188.64.48.0/21
IPv6:
2a03:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:3d:40:7c:ef:17:56:ca:ae:30:08:a8:10:fd:85:55:8b:ad:
62:8a:d8:a7:fb:f8:31:aa:77:ee:ea:ea:d9:90:3b:1e:04:b4:
ed:2c:a5:c1:92:e0:7c:1c:89:5b:7d:ba:fc:3e:ca:1c:12:aa:
6b:a2:a9:e9:f5:e9:63:4a:9a:0f:76:2e:3b:77:38:66:43:75:
f9:1c:0b:f6:27:db:47:3b:32:88:c2:db:99:8d:ed:76:e3:f7:
5f:a3:5b:89:e9:c6:4e:f0:ab:70:b5:7c:87:89:d6:d2:7b:75:
f7:eb:c0:47:16:83:a2:3c:19:be:22:20:f9:c8:3d:38:49:53:
9f:15:1b:d0:46:21:37:e8:bf:7b:1c:39:dd:26:13:a5:36:41:
4f:77:c9:4e:64:fa:b6:0b:b4:b4:3b:c8:2c:26:ea:37:11:9a:
08:56:66:a8:70:de:14:4a:e3:cb:b5:07:15:af:ae:bc:9b:17:
97:ac:1d:c6:03:13:39:24:3a:53:31:5d:04:1a:0a:52:66:5b:
21:c7:97:94:9d:ba:e8:cc:d8:a5:36:ae:c1:7c:c2:4b:eb:40:
17:93:42:32:f9:aa:76:eb:e8:c3:14:46:4e:3f:49:85:ab:b1:
27:ef:be:ca:f0:6a:7d:71:34:c3:af:3c:d9:e2:71:3d:6c:09:
e6:14:ea:f9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvL9GWRy3ANKblvg//MOP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3
N2E0ODYwHhcNMjMwMTAxMjExNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI1NzhlZDgyNmM2ZWMzMGI3YWE3OTI3MWRiNTIyNjBlMmNjYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaot0yQe8UAUACOqrJfIj/na45H
XN4PaJ480+ACJjcYYA3VazjlNWqdMYy56S/bOXaasRZR/IkE1eEEC5TQo7nPUw1h
zjjpFKqv+KMxu2f7asvv7BlbDEwRc/EEysfAqLs3kJt4QEVZs9HZfw9iUE9LqC9D
mCR1TVMkocbVSThIldHLxmE7Xl4evQQkEeouPgrRdE4ThhW8ubKpuwhSePNLpa0H
b4x8s0ZvqvTlpCLsp6KjjYVocNSrl2+MMPWUopUNl107kMXRP6gjD9fdd9JE25ur
tIH7+Dn1CiTCDXbiSbxWkgWEbBQ6BKfCvC0osA66Vg0G8VufX9K6/MLhIQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAm1eO2CbG7DC3qnknHbUiYOLMoIMB8GA1UdIwQY
MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt
Zjk1MTI0OTllMDVjLzEvQ2JWNDdZSnNic01MZXFlU2NkdFNKZzRzeWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj
LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWnIAwQD
vEAwMA0EAgACMAcDBQMqA48AMA0GCSqGSIb3DQEBCwUAA4IBAQBfPUB87xdWyq4w
CKgQ/YVVi61iitin+/gxqnfu6urZkDseBLTtLKXBkuB8HIlbfbr8PsocEqproqnp
9eljSpoPdi47dzhmQ3X5HAv2J9tHOzKIwtuZje124/dfo1uJ6cZO8KtwtXyHidbS
e3X368BHFoOiPBm+IiD5yD04SVOfFRvQRiE36L97HDndJhOlNkFPd8lOZPq2C7S0
O8gsJuo3EZoIVmaocN4USuPLtQcVr668mxeXrB3GAxM5JDpTMV0EGgpSZlshx5eU
nbrozNilNq7BfMJL60AXk0Iy+ap26+jDFEZOP0mFq7En777K8Gp9cTTDrzzZ4nE9
bAnmFOr5
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:29 2024 by rpki-client on console-ams.rpki-client.org