Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/G8ZcD9y4efKL3wo3rQ38nZW62Sc.roa
File: G8ZcD9y4efKL3wo3rQ38nZW62Sc.roa (raw, json)
Hash identifier: yh+ynirn8muAgIO2b4kJwfsSTv7H+FeZj0Mj6WDuo0M=
Subject key identifier: 1B:C6:5C:0F:DC:B8:79:F2:8B:DF:0A:37:AD:0D:FC:9D:95:BA:D9:27
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 01856D81C7D601E1491E521F8071E20F2A80
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/G8ZcD9y4efKL3wo3rQ38nZW62Sc.roa
Signing time: Sun 01 Jan 2023 13:24:59 +0000
ROA not before: Sun 01 Jan 2023 13:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15969
IP address blocks: 185.7.170.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
46.227.240.0/23 maxlen: 23
46.227.246.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:c7:d6:01:e1:49:1e:52:1f:80:71:e2:0f:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 1 13:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc65c0fdcb879f28bdf0a37ad0dfc9d95bad927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:8b:da:0b:53:87:22:9d:98:43:17:35:5f:
a5:21:50:31:49:6a:f2:54:97:64:b6:23:0f:2b:4a:
96:75:14:91:bd:0e:1e:2e:7f:87:4c:21:15:61:f5:
38:0b:7e:49:e4:4c:7b:d6:ec:b0:ee:93:cd:5b:51:
fa:aa:e6:e0:60:72:c5:4f:61:ae:87:5d:67:6f:88:
d1:84:57:5f:8c:a7:d3:54:da:e0:f6:4b:d9:e3:3f:
bb:8f:49:36:4a:c4:b3:98:ba:56:79:1c:d4:96:28:
10:c6:2b:ce:d5:80:e5:ae:c0:5b:54:8e:88:a7:bf:
93:1e:25:7e:07:82:6c:aa:26:87:49:59:28:e5:ab:
30:e8:c8:de:d0:aa:b9:6a:93:f6:56:fe:27:5e:87:
09:d1:e2:c7:7a:94:45:96:a0:23:d9:11:d4:c8:6f:
79:f9:a3:9f:7b:e5:46:e2:01:29:94:99:24:d3:23:
36:d3:4f:bf:cb:67:c8:a4:c3:a4:9d:31:65:41:c1:
8c:49:4a:52:04:fc:67:64:ce:f2:bd:e4:cc:60:8c:
73:d7:29:85:14:24:25:f3:03:2e:1e:8b:9b:97:bf:
e7:91:37:71:92:2e:f5:8a:50:a7:76:c8:9a:7f:2a:
26:3a:ce:09:5e:a4:43:c0:82:59:c2:84:31:dd:18:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:5C:0F:DC:B8:79:F2:8B:DF:0A:37:AD:0D:FC:9D:95:BA:D9:27
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/G8ZcD9y4efKL3wo3rQ38nZW62Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.240.0/21
185.7.168.0/22
Signature Algorithm: sha256WithRSAEncryption
39:7a:cf:e1:5d:c4:6f:eb:6f:64:e8:6e:9f:14:02:f7:26:9d:
aa:30:ae:e4:fe:1c:e1:25:8a:f5:fa:d5:73:5d:0b:32:3d:88:
db:77:c5:da:db:f0:68:e5:c4:e0:45:4f:d1:86:2f:02:c7:b6:
da:e3:4e:59:19:5a:55:a1:8d:9c:65:d6:6e:9b:b5:f1:2f:d7:
1d:d0:6a:0a:95:99:60:3a:00:c8:60:ca:f5:77:3b:9c:4b:97:
9f:f0:e6:05:8f:23:58:7d:95:8e:40:71:c2:73:ec:d6:7c:3d:
4e:6c:2b:fe:32:34:07:c8:0a:65:d9:a5:2f:39:8e:d2:f0:26:
e5:11:91:c5:b2:cf:60:fd:5e:39:71:fb:7c:09:b4:5e:93:4d:
65:e5:5e:70:1b:a5:03:a1:36:5d:6a:94:60:f8:43:f3:91:6f:
89:b6:da:24:6b:26:59:c2:29:e1:7c:6e:ba:67:a3:a0:ad:75:
66:30:2d:e9:95:d4:2a:eb:08:1f:10:a4:ae:ed:c4:1c:bb:15:
9b:b3:05:9c:c0:56:29:af:f4:56:2d:98:ca:bf:0c:e7:dd:cc:
eb:68:9b:85:d8:5e:58:78:f0:8f:2b:13:d6:d7:43:b1:e5:39:
f8:26:ad:ca:68:4b:30:04:ad:f7:7d:4a:f7:a2:4d:b5:8b:e0:
fe:0a:d6:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtgcfWAeFJHlIfgHHiDyqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTI4MDZjMzRmNTc1ODM4OTlkYzUyZGNhNDA3ZTI1Y2Y5
ZDM2MjIwHhcNMjMwMTAxMTMyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmM2NWMwZmRjYjg3OWYyOGJkZjBhMzdhZDBkZmM5ZDk1YmFkOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhyL2gtThyKdmEMXNV+lIVAxSWry
VJdktiMPK0qWdRSRvQ4eLn+HTCEVYfU4C35J5Ex71uyw7pPNW1H6qubgYHLFT2Gu
h11nb4jRhFdfjKfTVNrg9kvZ4z+7j0k2SsSzmLpWeRzUligQxivO1YDlrsBbVI6I
p7+THiV+B4JsqiaHSVko5asw6Mje0Kq5apP2Vv4nXocJ0eLHepRFlqAj2RHUyG95
+aOfe+VG4gEplJkk0yM200+/y2fIpMOknTFlQcGMSUpSBPxnZM7yveTMYIxz1ymF
FCQl8wMuHoubl7/nkTdxki71ilCndsiafyomOs4JXqRDwIJZwoQx3RhhpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBvGXA/cuHnyi98KN60N/J2VutknMB8GA1UdIwQY
MBaAFBeSgGw09XWDiZ3FLcpAfiXPnTYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2Yt
N2VmMmQ3MGQ3MDhmLzEvRzhaY0Q5eTRlZktMM3dvM3JRMzhuWlc2MlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2YtN2VmMmQ3MGQ3MDhm
LzEvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLuPwAwQC
uQeoMA0GCSqGSIb3DQEBCwUAA4IBAQA5es/hXcRv629k6G6fFAL3Jp2qMK7k/hzh
JYr1+tVzXQsyPYjbd8Xa2/Bo5cTgRU/Rhi8Cx7ba405ZGVpVoY2cZdZum7XxL9cd
0GoKlZlgOgDIYMr1dzucS5ef8OYFjyNYfZWOQHHCc+zWfD1ObCv+MjQHyApl2aUv
OY7S8CblEZHFss9g/V45cft8CbRek01l5V5wG6UDoTZdapRg+EPzkW+JttokayZZ
winhfG66Z6OgrXVmMC3pldQq6wgfEKSu7cQcuxWbswWcwFYpr/RWLZjKvwzn3czr
aJuF2F5YePCPKxPW10Ox5Tn4Jq3KaEswBK33fUr3ok21i+D+Ctbi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-fra.rpki-client.org