Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DgY-n4MDXFxduQtSkqRu8-XK1yo.roa
File: DgY-n4MDXFxduQtSkqRu8-XK1yo.roa (raw, json)
Hash identifier: vkUij3ZmJkZfofDRuqYbq5MZhMb3B77Mx6tBB9n2XQw=
Subject key identifier: 0E:06:3E:9F:83:03:5C:5C:5D:B9:0B:52:92:A4:6E:F3:E5:CA:D7:2A
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0186A1371E03E210611EFD27AE554B3F968B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DgY-n4MDXFxduQtSkqRu8-XK1yo.roa
Signing time: Thu 02 Mar 2023 07:26:29 +0000
ROA not before: Thu 02 Mar 2023 07:26:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:37:1e:03:e2:10:61:1e:fd:27:ae:55:4b:3f:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 2 07:26:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e063e9f83035c5c5db90b5292a46ef3e5cad72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:d7:30:59:be:23:26:44:7e:5f:1b:6e:f3:
47:05:ac:10:aa:39:48:68:b5:02:f2:0d:54:73:31:
04:6f:ac:0b:95:7e:72:0f:85:d4:88:76:8f:e7:74:
c0:c0:61:f4:96:74:37:7a:ce:e7:a8:3e:28:31:27:
96:04:db:80:78:78:dc:d6:22:d7:a6:6c:75:89:02:
46:39:f2:1c:76:70:41:18:4c:d9:c9:f2:87:73:59:
cd:76:da:61:66:c0:77:59:a2:f7:f6:e2:ab:b7:55:
31:5a:c7:d6:34:bc:2d:4a:f1:a4:51:00:62:9a:ff:
de:5b:27:d7:12:0a:c1:94:0e:12:bb:d5:21:d4:a6:
06:37:68:d1:9e:b2:35:d2:00:6b:2c:6c:b5:48:43:
05:64:4f:3e:0a:b7:49:c8:41:dc:ab:15:ca:da:ba:
c1:f4:09:01:bb:b4:d1:9e:dd:f7:33:e0:85:56:fa:
ed:ad:4a:9c:c9:7e:82:c1:42:66:ab:66:4b:35:1b:
f6:0e:71:34:f4:11:dc:da:e9:83:08:b8:64:72:6e:
0b:ac:9a:2f:24:41:0a:64:e4:76:10:f6:ff:2e:35:
a2:f4:e6:d2:66:e5:2f:74:c5:83:1d:ca:c0:27:4a:
fd:58:49:d9:b7:04:8d:01:62:58:c4:37:42:cc:26:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:3E:9F:83:03:5C:5C:5D:B9:0B:52:92:A4:6E:F3:E5:CA:D7:2A
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DgY-n4MDXFxduQtSkqRu8-XK1yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:2a:d2:98:44:1f:c5:54:2d:c8:4b:8e:3e:86:97:50:63:23:
0e:29:94:7b:8b:aa:c4:c2:20:ec:8e:44:4d:0e:65:cc:21:ea:
99:5a:3d:ce:fc:75:43:d0:8e:2d:8d:b4:3a:8b:18:5e:cd:a9:
25:6f:6b:8d:38:99:d4:cd:53:62:08:e5:93:ed:d4:e2:06:59:
f2:0c:e9:bb:b8:ad:f6:85:85:a6:28:85:17:8a:4f:89:9b:00:
a2:3c:51:30:29:49:72:d3:9c:c6:2c:be:c7:76:f9:8e:af:86:
1f:f6:e5:79:2e:8d:56:a0:b7:e7:48:52:4a:83:7c:d3:57:81:
b1:23:5e:77:5e:b0:2f:c6:94:7d:f5:9a:25:43:31:2a:3a:9b:
6d:07:01:a7:dc:59:6b:67:2b:fb:48:e3:ad:08:9c:ef:4e:6a:
6a:76:19:52:f6:26:56:34:26:d6:e8:76:8d:d1:26:f4:1a:a4:
1d:45:85:14:36:dc:77:da:c4:ec:77:81:1f:48:87:c1:4d:29:
2c:db:ad:f4:43:a1:e3:b8:15:cf:f0:5b:6e:0f:43:8b:66:fd:
35:0d:c7:c1:8b:92:81:d5:6f:8b:ce:6b:9c:a0:d1:ba:cb:d7:
9d:21:d8:26:44:a2:ae:40:04:af:b8:66:aa:a2:36:e5:80:81:
f3:0d:db:89
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYahNx4D4hBhHv0nrlVLP5aLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMzAyMDcyNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTA2M2U5ZjgzMDM1YzVjNWRiOTBiNTI5MmE0NmVmM2U1Y2FkNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUjXMFm+IyZEfl8bbvNHBawQqjlI
aLUC8g1UczEEb6wLlX5yD4XUiHaP53TAwGH0lnQ3es7nqD4oMSeWBNuAeHjc1iLX
pmx1iQJGOfIcdnBBGEzZyfKHc1nNdtphZsB3WaL39uKrt1UxWsfWNLwtSvGkUQBi
mv/eWyfXEgrBlA4Su9Uh1KYGN2jRnrI10gBrLGy1SEMFZE8+CrdJyEHcqxXK2rrB
9AkBu7TRnt33M+CFVvrtrUqcyX6CwUJmq2ZLNRv2DnE09BHc2umDCLhkcm4LrJov
JEEKZOR2EPb/LjWi9ObSZuUvdMWDHcrAJ0r9WEnZtwSNAWJYxDdCzCayuQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFA4GPp+DA1xcXbkLUpKkbvPlytcqMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvRGdZLW40TURYRnhkdVF0U2txUnU4LVhLMXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBuRoiAwQC
uXysAwQAudfnAwQCufMwMA0GCSqGSIb3DQEBCwUAA4IBAQDUKtKYRB/FVC3IS44+
hpdQYyMOKZR7i6rEwiDsjkRNDmXMIeqZWj3O/HVD0I4tjbQ6ixhezaklb2uNOJnU
zVNiCOWT7dTiBlnyDOm7uK32hYWmKIUXik+JmwCiPFEwKUly05zGLL7HdvmOr4Yf
9uV5Lo1WoLfnSFJKg3zTV4GxI153XrAvxpR99ZolQzEqOpttBwGn3FlrZyv7SOOt
CJzvTmpqdhlS9iZWNCbW6HaN0Sb0GqQdRYUUNtx32sTsd4EfSIfBTSks2630Q6Hj
uBXP8FtuD0OLZv01DcfBi5KB1W+LzmucoNG6y9edIdgmRKKuQASvuGaqojblgIHz
DduJ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org