Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/3BeK6xqMRe4brQK1t-Uc_GdFlWk.roa
File: 3BeK6xqMRe4brQK1t-Uc_GdFlWk.roa (raw, json)
Hash identifier: y+9NcTXxE9yYprCJ1dxmtAJxAYmbCqSkpqX1Fd7bfmE=
Subject key identifier: DC:17:8A:EB:1A:8C:45:EE:1B:AD:02:B5:B7:E5:1C:FC:67:45:95:69
Certificate issuer: /CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Certificate serial: 01856D419DB3357B1393E0466E22C2F0478B
Authority key identifier: 48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/3BeK6xqMRe4brQK1t-Uc_GdFlWk.roa
Signing time: Sun 01 Jan 2023 12:14:54 +0000
ROA not before: Sun 01 Jan 2023 12:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.179.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:9d:b3:35:7b:13:93:e0:46:6e:22:c2:f0:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Validity
Not Before: Jan 1 12:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc178aeb1a8c45ee1bad02b5b7e51cfc67459569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:35:bb:b7:ee:53:d4:5a:05:f3:1f:49:75:
96:e2:c2:86:a5:ae:aa:19:15:50:24:72:f8:b6:9e:
f3:78:fb:f3:6c:76:f6:42:82:72:06:1c:2d:d2:8c:
6c:d5:99:24:1e:e8:69:e3:51:95:2e:27:2b:3f:89:
ab:3f:b3:11:e2:e1:f7:2b:78:c4:8d:8b:c8:e6:91:
3e:13:ce:d1:f2:1b:f9:c4:93:b3:98:bd:50:37:06:
16:e9:17:e5:4e:d7:76:af:f3:62:a3:81:51:27:8f:
2d:34:26:6c:46:2c:46:6e:f5:3d:93:40:bd:cf:8e:
f0:76:ba:3c:b3:d4:d4:4b:ba:20:9d:bb:ff:62:52:
35:a7:6a:63:b3:a7:57:06:b1:b2:f4:3a:ba:7f:02:
0f:55:ac:25:25:97:b9:2f:1b:34:d2:06:49:70:55:
2d:11:38:f4:0f:11:b0:89:47:0e:1b:70:9a:b2:85:
97:c8:80:5f:05:c5:fe:30:3c:46:8f:55:c2:33:f2:
60:26:8f:28:b2:aa:d3:f6:53:23:74:95:64:a5:56:
14:d5:c2:f3:13:d0:44:f3:ff:c4:e9:d2:bb:e6:f5:
0f:1b:36:b7:9e:fb:ff:77:54:1d:00:60:16:0b:7f:
74:0d:ef:8c:df:9e:c8:3e:d5:43:98:e1:4c:92:02:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:8A:EB:1A:8C:45:EE:1B:AD:02:B5:B7:E5:1C:FC:67:45:95:69
X509v3 Authority Key Identifier:
keyid:48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/3BeK6xqMRe4brQK1t-Uc_GdFlWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/SAvxwTbs_9MS_Dm6PIKv-TneJPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:57:c1:8f:18:ad:97:43:1f:ce:ca:7f:8d:df:c3:66:f7:2a:
15:e5:74:c4:c2:ef:d2:f8:ac:61:9b:14:23:c2:e5:cd:b2:d3:
1c:ab:7e:0e:27:f6:4c:ef:b2:ac:d1:83:6f:de:34:07:18:1e:
0a:e0:65:52:09:2b:b6:8a:b1:c0:52:fd:d5:e9:ff:65:bb:2b:
65:21:84:c7:8f:6a:a9:f7:11:0b:ab:dd:b9:a3:66:97:e1:84:
cf:75:29:e8:1b:cc:6f:f0:75:9e:00:c7:72:c2:7e:40:cf:19:
f9:a2:fd:99:0f:95:b3:48:e7:eb:ff:21:fe:30:23:9c:0a:0e:
72:02:37:a4:a2:84:7c:4c:39:8a:ea:85:1e:dd:65:39:1c:83:
b1:64:1a:4a:f0:34:a1:59:ff:8a:04:b8:19:bf:ee:14:49:bf:
96:b3:ac:26:d3:d0:62:ed:06:97:53:23:a5:c4:12:ea:94:48:
a3:43:aa:72:67:68:e1:fa:f0:21:33:7a:0a:f3:2e:d6:8b:b4:
ea:e1:fc:3c:7d:09:31:f6:fa:3b:b8:01:4d:3d:01:ce:9f:61:
e3:6b:05:ae:d3:61:81:ea:77:b4:98:b3:c1:7f:e4:9f:e5:7c:
83:29:da:78:99:4d:cb:7b:95:54:6e:ef:83:35:4f:ff:ee:44:
42:1e:dc:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtQZ2zNXsTk+BGbiLC8EeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGJmMWMxMzZlY2ZmZDMxMmZjMzliYTNjODJhZmY5Mzlk
ZTI0ZjkwHhcNMjMwMTAxMTIxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzE3OGFlYjFhOGM0NWVlMWJhZDAyYjViN2U1MWNmYzY3NDU5NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsM1u7fuU9RaBfMfSXWW4sKGpa6q
GRVQJHL4tp7zePvzbHb2QoJyBhwt0oxs1ZkkHuhp41GVLicrP4mrP7MR4uH3K3jE
jYvI5pE+E87R8hv5xJOzmL1QNwYW6RflTtd2r/Nio4FRJ48tNCZsRixGbvU9k0C9
z47wdro8s9TUS7ognbv/YlI1p2pjs6dXBrGy9Dq6fwIPVawlJZe5Lxs00gZJcFUt
ETj0DxGwiUcOG3CasoWXyIBfBcX+MDxGj1XCM/JgJo8osqrT9lMjdJVkpVYU1cLz
E9BE8//E6dK75vUPGza3nvv/d1QdAGAWC390De+M357IPtVDmOFMkgJm+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwXiusajEXuG60CtbflHPxnRZVpMB8GA1UdIwQY
MBaAFEgL8cE27P/TEvw5ujyCr/k53iT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0F2eHdUYnNfOU1TX0RtNlBJS3YtVG5lSlBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xOGJkYTAtYTg4NS00ZWI0LWEwMGIt
NWJlMjQ1MTQ5MGYxLzEvM0JlSzZ4cU1SZTRiclFLMXQtVWNfR2RGbFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xOGJkYTAtYTg4NS00ZWI0LWEwMGItNWJlMjQ1MTQ5MGYx
LzEvU0F2eHdUYnNfOU1TX0RtNlBJS3YtVG5lSlBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNbMA0G
CSqGSIb3DQEBCwUAA4IBAQA6V8GPGK2XQx/Oyn+N38Nm9yoV5XTEwu/S+KxhmxQj
wuXNstMcq34OJ/ZM77Ks0YNv3jQHGB4K4GVSCSu2irHAUv3V6f9luytlIYTHj2qp
9xELq925o2aX4YTPdSnoG8xv8HWeAMdywn5Azxn5ov2ZD5WzSOfr/yH+MCOcCg5y
AjekooR8TDmK6oUe3WU5HIOxZBpK8DShWf+KBLgZv+4USb+Ws6wm09Bi7QaXUyOl
xBLqlEijQ6pyZ2jh+vAhM3oK8y7Wi7Tq4fw8fQkx9vo7uAFNPQHOn2HjawWu02GB
6ne0mLPBf+Sf5XyDKdp4mU3Le5VUbu+DNU//7kRCHtzb
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org