Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/k7VsfCkAtAMEitmWcyzbrRBJttY.roa
File: k7VsfCkAtAMEitmWcyzbrRBJttY.roa (raw, json)
Hash identifier: 99JW387sab5iaHHcYvJamSvG3n3O4oP3HIoqnYZN6Rw=
Subject key identifier: 93:B5:6C:7C:29:00:B4:03:04:8A:D9:96:73:2C:DB:AD:10:49:B6:D6
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 01856D540EA436DD22D1A08FB1859CC86809
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/k7VsfCkAtAMEitmWcyzbrRBJttY.roa
Signing time: Sun 01 Jan 2023 12:35:03 +0000
ROA not before: Sun 01 Jan 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44071
IP address blocks: 185.167.190.0/24 maxlen: 24
185.167.189.0/24 maxlen: 24
185.167.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0e:a4:36:dd:22:d1:a0:8f:b1:85:9c:c8:68:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: Jan 1 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b56c7c2900b403048ad996732cdbad1049b6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:41:75:4e:df:f6:fe:10:1b:08:1c:61:93:
7d:6a:69:a4:1b:21:7a:9e:7f:15:e0:f9:2e:92:92:
c1:be:3b:92:d6:90:3a:45:08:c2:24:1a:84:cf:89:
6d:ae:90:2d:d2:4d:03:f9:8c:ee:bc:e3:77:85:d3:
99:13:91:0a:20:51:20:4c:8f:18:48:69:dc:09:8c:
35:6b:c4:1b:89:39:d4:4d:7c:8b:83:84:12:6c:34:
89:5b:1e:38:bd:37:78:71:01:e6:22:dd:6c:95:8f:
25:32:ba:9b:be:77:1b:0c:fd:d5:2a:54:6c:5b:74:
87:b7:55:5e:fa:bf:25:1d:98:b1:6a:07:d9:c6:fb:
16:82:b4:cf:27:19:ac:d5:0e:be:ee:63:b7:a1:c4:
8d:c4:b4:70:33:8e:60:8e:2c:c1:e5:8d:88:02:35:
93:c5:93:e0:e4:56:63:07:2b:be:51:68:b9:dc:63:
9a:0e:71:29:a5:43:cc:bc:f1:ca:11:4b:ec:69:fe:
49:aa:13:90:24:eb:08:8a:a0:5f:bc:df:8b:86:5d:
77:54:9b:2f:11:77:dc:8e:4c:4b:cf:69:b7:82:ca:
db:31:a8:f7:d7:04:cb:9f:97:55:7c:96:77:16:33:
7f:7f:9e:a8:f5:83:2b:6a:f4:04:2c:2c:25:86:30:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:6C:7C:29:00:B4:03:04:8A:D9:96:73:2C:DB:AD:10:49:B6:D6
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/k7VsfCkAtAMEitmWcyzbrRBJttY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.188.0-185.167.190.255
Signature Algorithm: sha256WithRSAEncryption
6b:ec:35:5d:ec:0b:60:4b:d2:3f:6b:b2:dd:54:e7:65:05:ce:
9d:4c:2d:1f:a3:4a:53:a7:09:4c:5b:41:dc:61:a5:22:99:b7:
b2:8a:36:fc:47:a5:e3:67:6f:a4:d8:1d:6f:df:09:bc:0f:54:
a1:66:10:c9:31:35:b5:d5:bb:8e:7c:85:6c:26:d2:50:2c:15:
df:e7:00:30:a9:2f:ef:99:b4:a3:c5:b1:51:47:68:5b:4b:34:
0b:d0:03:5b:98:cc:d6:cb:16:ed:11:4e:9e:75:02:3b:a4:ec:
45:cc:06:f4:f5:44:4f:83:27:37:ab:6f:ac:84:48:2f:6d:e7:
4c:6b:c6:c5:ef:a8:a4:ec:ed:d0:1a:f9:04:2d:9b:8d:82:47:
2e:f2:61:1d:b0:f2:16:7f:1f:45:9f:d6:ef:4e:e3:7a:ed:39:
88:1f:53:78:de:61:ca:9e:1f:89:f7:80:1c:2c:c1:d3:76:e5:
84:20:36:bd:e8:3f:f0:51:19:76:c3:a9:1a:0b:d1:43:f4:c6:
16:9c:ad:8d:cf:e1:6f:a1:d6:42:67:c1:95:af:7b:70:56:36:
b6:a2:0a:ce:22:f7:06:50:2b:b8:eb:ba:34:92:8e:b4:2b:da:
a9:38:7a:25:39:0b:f9:7c:3d:19:20:7b:d7:03:9f:63:67:f8:
53:3d:4d:3d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtVA6kNt0i0aCPsYWcyGgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzk5ZDQ0MzViYjg1ZmFlOTEwYWJlMzhlNjg1MzMyMDRk
ZmQ2MGIwHhcNMjMwMTAxMTIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2I1NmM3YzI5MDBiNDAzMDQ4YWQ5OTY3MzJjZGJhZDEwNDliNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwRBdU7f9v4QGwgcYZN9ammkGyF6
nn8V4PkukpLBvjuS1pA6RQjCJBqEz4ltrpAt0k0D+YzuvON3hdOZE5EKIFEgTI8Y
SGncCYw1a8QbiTnUTXyLg4QSbDSJWx44vTd4cQHmIt1slY8lMrqbvncbDP3VKlRs
W3SHt1Ve+r8lHZixagfZxvsWgrTPJxms1Q6+7mO3ocSNxLRwM45gjizB5Y2IAjWT
xZPg5FZjByu+UWi53GOaDnEppUPMvPHKEUvsaf5JqhOQJOsIiqBfvN+Lhl13VJsv
EXfcjkxLz2m3gsrbMaj31wTLn5dVfJZ3FjN/f56o9YMravQELCwlhjCNUQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJO1bHwpALQDBIrZlnMs260QSbbWMB8GA1UdIwQY
MBaAFFA5nUQ1u4X66RCr445oUzIE39YLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQt
MzRmZmRiNDQyMTEzLzEvazdWc2ZDa0F0QU1FaXRtV2N5emJyUkJKdHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQtMzRmZmRiNDQyMTEz
LzEvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5p7wD
BAC5p74wDQYJKoZIhvcNAQELBQADggEBAGvsNV3sC2BL0j9rst1U52UFzp1MLR+j
SlOnCUxbQdxhpSKZt7KKNvxHpeNnb6TYHW/fCbwPVKFmEMkxNbXVu458hWwm0lAs
Fd/nADCpL++ZtKPFsVFHaFtLNAvQA1uYzNbLFu0RTp51Ajuk7EXMBvT1RE+DJzer
b6yESC9t50xrxsXvqKTs7dAa+QQtm42CRy7yYR2w8hZ/H0Wf1u9O43rtOYgfU3je
YcqeH4n3gBwswdN25YQgNr3oP/BRGXbDqRoL0UP0xhacrY3P4W+h1kJnwZWve3BW
NraiCs4i9wZQK7jrujSSjrQr2qk4eiU5C/l8PRkge9cDn2Nn+FM9TT0=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:08 2024 by rpki-client on console-ams.rpki-client.org