Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/3D_qcVL2bSnwXgWo1hZkQJc07AM.roa
File: 3D_qcVL2bSnwXgWo1hZkQJc07AM.roa (raw, json)
Hash identifier: Gm8mVGbi02U1cNk12orGKixgxnUv3Au/5UIUmy+/jYs=
Subject key identifier: DC:3F:EA:71:52:F6:6D:29:F0:5E:05:A8:D6:16:64:40:97:34:EC:03
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 01856D540E48D356214159CDB3C06B5DE148
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/3D_qcVL2bSnwXgWo1hZkQJc07AM.roa
Signing time: Sun 01 Jan 2023 12:35:03 +0000
ROA not before: Sun 01 Jan 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9714
IP address blocks: 185.167.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0e:48:d3:56:21:41:59:cd:b3:c0:6b:5d:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: Jan 1 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc3fea7152f66d29f05e05a8d61664409734ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:d2:15:e1:d4:f4:d3:36:df:92:45:75:c4:
44:f6:bb:82:2b:f5:6b:18:04:f0:89:ac:36:52:74:
19:77:bc:e5:99:96:9f:7f:a3:a6:b2:26:16:7a:0c:
68:04:20:91:d8:23:71:9e:cf:d0:f6:f2:94:1a:28:
94:66:3e:52:ce:1c:8b:2b:f3:96:d4:22:3d:31:7a:
06:c5:2a:7d:7c:8a:ad:5f:bd:30:3d:b1:b7:e3:25:
31:f6:b0:ed:4a:9d:b9:e4:55:12:42:c8:5c:3d:72:
7f:b3:32:76:56:cc:99:0f:7f:b2:09:72:e9:d0:d3:
50:9e:6e:e2:e6:49:77:f5:ad:84:6e:e8:69:92:d8:
02:61:5b:2d:4d:6d:2f:89:1c:bf:a8:22:cb:b0:17:
87:a4:39:4b:61:0e:14:fc:d6:96:3a:e1:59:63:b4:
b7:06:dd:71:a4:59:89:50:38:87:8b:51:e2:9d:20:
1c:48:43:9e:d3:24:ff:33:c1:74:dd:b9:31:81:cf:
08:55:f5:eb:9b:0f:65:24:0c:d3:71:b2:ba:a9:17:
55:61:da:1a:89:52:f9:2a:6f:9e:b6:b1:66:f2:09:
64:45:38:6f:97:85:8d:dc:e0:39:e3:0e:70:07:a8:
b2:cd:8c:a8:ad:50:9b:60:c3:86:45:3b:d9:8a:c9:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:EA:71:52:F6:6D:29:F0:5E:05:A8:D6:16:64:40:97:34:EC:03
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/3D_qcVL2bSnwXgWo1hZkQJc07AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.191.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f9:d8:d8:16:c3:f4:23:ba:ba:eb:cf:f6:c3:83:c3:ab:de:
06:e9:c4:b6:4d:bd:b4:29:5c:01:aa:5d:92:8d:9b:8a:34:25:
cb:1e:f1:26:94:8c:aa:d6:d4:22:0f:eb:d0:c6:60:5a:36:e6:
f6:dc:ad:3d:e8:de:58:ac:ec:ba:96:10:b9:63:0a:5c:36:7a:
9f:aa:47:e9:5c:da:81:7a:74:2a:aa:4b:ff:3d:80:b3:f1:37:
50:4d:65:8b:b1:ef:78:a1:8b:f5:97:0d:38:e8:52:17:ec:90:
de:02:8f:31:89:99:1c:82:d8:f8:70:e8:d3:b6:92:89:61:3b:
de:4e:6c:39:ed:1e:25:ad:21:ee:f0:37:59:26:a2:3b:87:15:
93:e3:09:61:23:7a:23:e6:c8:01:f5:df:c4:c8:3a:9c:07:2c:
cf:a1:33:a6:c5:1f:6b:70:10:1a:7f:3c:76:54:7f:42:ad:ce:
7f:7e:0a:ac:55:cd:b4:f0:06:d5:0a:ab:39:cb:5e:92:c4:1c:
b9:df:fc:38:dd:e5:fe:d9:13:99:6d:57:e9:07:95:ab:ba:c9:
67:be:9a:9c:49:75:e6:91:7b:d3:0e:c1:33:56:3b:2c:9a:cb:
a0:98:a7:62:84:d8:54:0a:d2:0b:35:ac:39:5f:96:94:f6:61:
86:6c:9a:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtVA5I01YhQVnNs8BrXeFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzk5ZDQ0MzViYjg1ZmFlOTEwYWJlMzhlNjg1MzMyMDRk
ZmQ2MGIwHhcNMjMwMTAxMTIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzNmZWE3MTUyZjY2ZDI5ZjA1ZTA1YThkNjE2NjQ0MDk3MzRlYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktjSFeHU9NM235JFdcRE9ruCK/Vr
GATwiaw2UnQZd7zlmZaff6OmsiYWegxoBCCR2CNxns/Q9vKUGiiUZj5SzhyLK/OW
1CI9MXoGxSp9fIqtX70wPbG34yUx9rDtSp255FUSQshcPXJ/szJ2VsyZD3+yCXLp
0NNQnm7i5kl39a2EbuhpktgCYVstTW0viRy/qCLLsBeHpDlLYQ4U/NaWOuFZY7S3
Bt1xpFmJUDiHi1HinSAcSEOe0yT/M8F03bkxgc8IVfXrmw9lJAzTcbK6qRdVYdoa
iVL5Km+etrFm8glkRThvl4WN3OA54w5wB6iyzYyorVCbYMOGRTvZisnC3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNw/6nFS9m0p8F4FqNYWZECXNOwDMB8GA1UdIwQY
MBaAFFA5nUQ1u4X66RCr445oUzIE39YLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQt
MzRmZmRiNDQyMTEzLzEvM0RfcWNWTDJiU253WGdXbzFoWmtRSmMwN0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQtMzRmZmRiNDQyMTEz
LzEvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuae/MA0G
CSqGSIb3DQEBCwUAA4IBAQCX+djYFsP0I7q668/2w4PDq94G6cS2Tb20KVwBql2S
jZuKNCXLHvEmlIyq1tQiD+vQxmBaNub23K096N5YrOy6lhC5YwpcNnqfqkfpXNqB
enQqqkv/PYCz8TdQTWWLse94oYv1lw046FIX7JDeAo8xiZkcgtj4cOjTtpKJYTve
Tmw57R4lrSHu8DdZJqI7hxWT4wlhI3oj5sgB9d/EyDqcByzPoTOmxR9rcBAafzx2
VH9Crc5/fgqsVc208AbVCqs5y16SxBy53/w43eX+2ROZbVfpB5WruslnvpqcSXXm
kXvTDsEzVjssmsugmKdihNhUCtILNaw5X5aU9mGGbJoy
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:07 2024 by rpki-client on console-ams.rpki-client.org