Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/8N_BeB1K0e4Puj75QJYOjUvjzF4.roa
File: 8N_BeB1K0e4Puj75QJYOjUvjzF4.roa (raw, json)
Hash identifier: AlYpbrGZpA9Q0c8BoAd5WCjurSQzQKOzmFmV3zQQnNo=
Subject key identifier: F0:DF:C1:78:1D:4A:D1:EE:0F:BA:3E:F9:40:96:0E:8D:4B:E3:CC:5E
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 018654E1D8F92F92D8E54D2BAC32FC2B44F8
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/8N_BeB1K0e4Puj75QJYOjUvjzF4.roa
Signing time: Wed 15 Feb 2023 11:42:12 +0000
ROA not before: Wed 15 Feb 2023 11:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49402
IP address blocks: 193.169.48.0/23 maxlen: 23
185.56.221.0/24 maxlen: 24
185.56.222.0/24 maxlen: 24
185.56.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:e1:d8:f9:2f:92:d8:e5:4d:2b:ac:32:fc:2b:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Feb 15 11:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0dfc1781d4ad1ee0fba3ef940960e8d4be3cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:1d:15:80:c5:de:2f:5f:85:1d:c7:0f:47:
d3:a1:3e:93:44:66:9e:f7:12:ea:d4:f4:a1:fc:69:
45:1e:bd:64:5f:b2:19:1e:fa:53:31:f4:1d:3b:58:
6b:f0:81:52:44:52:5d:e5:12:d5:df:45:5a:80:20:
e3:be:a2:13:1e:2f:2d:ef:25:13:00:ac:3d:35:5e:
8f:72:83:74:88:4a:ce:e2:3c:fd:09:f7:52:87:fa:
95:43:30:83:b1:82:d4:d4:82:2a:9e:c4:03:9f:2a:
6c:b9:5c:9d:30:ec:1f:21:38:54:ae:79:c2:63:3c:
ac:a5:dd:b5:fd:70:a0:d1:5a:94:ea:93:b1:d0:e3:
f3:63:59:8d:30:9a:3b:ef:05:c5:ba:8b:27:e8:be:
fb:80:ed:e7:ae:51:8b:06:9e:6e:de:fa:6f:90:39:
45:19:f2:6a:98:f7:de:2d:dc:ad:5c:09:f5:15:2f:
bc:ca:8e:5f:73:6a:6d:75:0e:bc:fa:6d:5b:72:60:
47:5e:a5:1e:4d:32:11:ad:7e:1c:04:ad:0e:46:b8:
a5:71:36:be:0a:59:d8:d6:9d:92:48:2e:51:df:72:
bf:eb:45:55:f0:ae:b5:4f:fa:67:96:16:0e:ba:3d:
79:a9:12:4c:a0:aa:d6:6b:40:31:f5:4f:fe:0c:74:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:C1:78:1D:4A:D1:EE:0F:BA:3E:F9:40:96:0E:8D:4B:E3:CC:5E
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/8N_BeB1K0e4Puj75QJYOjUvjzF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.220.0-185.56.222.255
193.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b3:a7:2d:19:55:de:f1:d8:56:48:41:21:1d:50:9d:94:79:
20:b4:f0:8f:e3:6c:5a:67:2c:79:61:bc:ed:f1:7c:ec:75:cd:
05:24:10:47:ef:8d:ea:64:31:8e:67:52:73:ff:f2:30:77:09:
eb:6b:51:cd:29:bc:8f:d5:3a:ce:0f:99:49:ad:1a:9f:e0:cf:
d7:ec:87:ee:5c:2b:85:74:cc:42:21:fb:45:1c:c8:3c:91:ae:
7a:28:19:fc:7e:28:d7:8d:50:4f:fc:e4:8a:a8:73:d5:81:69:
54:3d:dd:26:dc:ab:33:4d:d3:a5:2e:12:8c:2a:4a:8a:86:06:
68:8f:df:ff:b9:9b:98:54:df:53:37:9b:b0:a9:ff:71:10:3e:
b7:f9:c1:e1:f5:56:f8:98:62:52:66:3b:0c:62:28:8c:88:60:
a9:87:5c:f6:db:11:67:17:e1:12:86:f9:0c:ae:64:44:5e:27:
b6:65:76:3e:51:c7:11:bb:34:25:3b:1b:0d:4b:1e:2a:52:4e:
15:56:e9:36:23:02:1a:f3:bb:a6:8e:96:78:36:94:4f:7a:48:
66:94:e5:1f:86:33:bb:fc:30:2a:e1:2c:55:f6:ea:cf:dc:64:
41:d9:bb:67:92:50:4d:44:18:26:a5:76:d3:5b:92:97:c2:1c:
76:1d:64:53
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYZU4dj5L5LY5U0rrDL8K0T4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YWY2YTA2MDUwZTRjYTI2YjJmZGQxM2E3YzBhZDE0NmNk
MjZkYzgwHhcNMjMwMjE1MTE0MjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGRmYzE3ODFkNGFkMWVlMGZiYTNlZjk0MDk2MGU4ZDRiZTNjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvAdFYDF3i9fhR3HD0fToT6TRGae
9xLq1PSh/GlFHr1kX7IZHvpTMfQdO1hr8IFSRFJd5RLV30VagCDjvqITHi8t7yUT
AKw9NV6PcoN0iErO4jz9CfdSh/qVQzCDsYLU1IIqnsQDnypsuVydMOwfIThUrnnC
Yzyspd21/XCg0VqU6pOx0OPzY1mNMJo77wXFuosn6L77gO3nrlGLBp5u3vpvkDlF
GfJqmPfeLdytXAn1FS+8yo5fc2ptdQ68+m1bcmBHXqUeTTIRrX4cBK0ORrilcTa+
ClnY1p2SSC5R33K/60VV8K61T/pnlhYOuj15qRJMoKrWa0Ax9U/+DHRVjwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPDfwXgdStHuD7o++UCWDo1L48xeMB8GA1UdIwQY
MBaAFBivagYFDkyiay/dE6fArRRs0m3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMt
MDM5NmU4N2Y1MjAyLzEvOE5fQmVCMUswZTRQdWo3NVFKWU9qVXZqekY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMtMDM5NmU4N2Y1MjAy
LzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5ONwD
BAC5ON4DBAHBqTAwDQYJKoZIhvcNAQELBQADggEBABSzpy0ZVd7x2FZIQSEdUJ2U
eSC08I/jbFpnLHlhvO3xfOx1zQUkEEfvjepkMY5nUnP/8jB3CetrUc0pvI/VOs4P
mUmtGp/gz9fsh+5cK4V0zEIh+0UcyDyRrnooGfx+KNeNUE/85Iqoc9WBaVQ93Sbc
qzNN06UuEowqSoqGBmiP3/+5m5hU31M3m7Cp/3EQPrf5weH1VviYYlJmOwxiKIyI
YKmHXPbbEWcX4RKG+QyuZEReJ7Zldj5RxxG7NCU7Gw1LHipSThVW6TYjAhrzu6aO
lng2lE96SGaU5R+GM7v8MCrhLFX26s/cZEHZu2eSUE1EGCaldtNbkpfCHHYdZFM=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:03 2024 by rpki-client on console-fra.rpki-client.org