Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/PkK08r_yFs5k3oLopfjNNHvH_dA.roa
File: PkK08r_yFs5k3oLopfjNNHvH_dA.roa (raw, json)
Hash identifier: 6+Bo10Vba3CtqK1CyBpy5VsQfLOWq6Mr7Wgrq+0YLas=
Subject key identifier: 3E:42:B4:F2:BF:F2:16:CE:64:DE:82:E8:A5:F8:CD:34:7B:C7:FD:D0
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01856FE7178107F631C572957A913F4B58D1
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/PkK08r_yFs5k3oLopfjNNHvH_dA.roa
Signing time: Mon 02 Jan 2023 00:34:53 +0000
ROA not before: Mon 02 Jan 2023 00:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198785
IP address blocks: 185.46.32.0/22 maxlen: 22
185.98.14.0/24 maxlen: 24
185.98.15.0/24 maxlen: 24
2a04:a7c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:17:81:07:f6:31:c5:72:95:7a:91:3f:4b:58:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jan 2 00:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e42b4f2bff216ce64de82e8a5f8cd347bc7fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:79:1b:ec:ef:98:73:09:71:c2:c9:76:ae:
51:04:9b:24:64:5b:fa:b2:69:fa:24:28:c8:e0:92:
05:f1:93:ae:c9:c2:c5:90:8d:f7:34:f3:f8:7c:1b:
95:84:91:87:c6:be:7a:a7:54:72:b2:d5:9b:2f:62:
e8:82:53:5b:3d:42:2c:da:f5:84:8c:f3:30:18:af:
2e:a6:bf:8f:93:a0:75:00:24:4b:b6:e9:bf:c8:9e:
c1:fb:4d:64:d5:2b:9d:0a:c2:a3:12:8f:30:c0:11:
5d:04:2d:74:2c:72:ae:b6:54:3c:fd:2c:05:e0:89:
c8:a8:c7:4f:b4:48:36:ec:1a:11:5b:9f:28:c9:35:
bc:46:28:2f:83:b5:2d:69:d0:cb:2f:5d:89:7e:f0:
4c:ea:3a:3e:b8:9f:b9:a4:5c:f9:a0:bb:74:1b:1f:
25:d0:2b:c5:00:44:59:ec:8c:39:8f:27:75:86:8d:
2e:27:dd:0c:84:8c:58:41:6d:4d:87:ee:76:cd:26:
e6:f4:15:7f:75:85:70:36:c5:26:4a:d9:f7:65:c2:
b2:73:62:59:96:cb:98:fd:4d:d2:2b:d7:5a:aa:58:
98:80:33:f4:bd:eb:8f:a0:54:e2:cc:46:9c:4b:1e:
40:2c:1f:31:e4:e0:ca:11:62:0e:26:f6:91:ea:6b:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:B4:F2:BF:F2:16:CE:64:DE:82:E8:A5:F8:CD:34:7B:C7:FD:D0
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/PkK08r_yFs5k3oLopfjNNHvH_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.32.0/22
185.98.14.0/23
IPv6:
2a04:a7c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:19:3f:e1:bd:c0:22:b6:fb:09:25:35:2c:d6:d8:43:3d:09:
45:0d:65:81:89:b8:05:92:f2:8b:53:ac:ae:b7:c9:dc:d9:20:
df:98:e7:91:71:66:a4:a7:e1:1b:9f:96:a2:d2:0e:b7:9b:af:
2b:10:49:e3:e2:cd:1c:24:c1:4e:84:f1:02:61:a1:bc:32:ca:
bd:8d:25:29:02:3e:e2:13:4f:41:c4:46:5e:5c:d7:b1:88:eb:
b0:86:88:81:e3:63:16:c4:d5:a4:33:d4:58:a8:fb:43:e9:bb:
09:fb:cd:ed:5f:2d:2c:18:e0:73:ea:bf:e9:53:71:84:29:6d:
a4:36:54:ae:80:0d:8d:28:59:c1:4f:0f:49:6a:e7:53:ef:2a:
12:b3:23:c2:89:fc:7c:e6:94:a4:57:14:c9:d8:e2:1d:85:d8:
ed:28:1c:fd:09:6e:94:d5:58:82:96:2a:b3:8b:48:08:dc:93:
12:02:6a:60:8f:d7:cc:de:80:c5:26:39:86:70:b4:7d:c4:7e:
d2:2e:b9:d7:8a:ba:3a:06:5f:c5:63:8c:80:27:a4:6e:70:8e:
71:27:ab:72:c0:0a:99:41:75:57:9d:61:bf:b0:b4:a9:2b:13:
08:1d:e3:9d:37:5f:d1:41:4a:93:6e:eb:80:c4:31:79:dc:e8:
12:85:b2:1c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVv5xeBB/YxxXKVepE/S1jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjMwMTAyMDAzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTQyYjRmMmJmZjIxNmNlNjRkZTgyZThhNWY4Y2QzNDdiYzdmZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmp5G+zvmHMJccLJdq5RBJskZFv6
smn6JCjI4JIF8ZOuycLFkI33NPP4fBuVhJGHxr56p1RystWbL2LoglNbPUIs2vWE
jPMwGK8upr+Pk6B1ACRLtum/yJ7B+01k1SudCsKjEo8wwBFdBC10LHKutlQ8/SwF
4InIqMdPtEg27BoRW58oyTW8Rigvg7UtadDLL12JfvBM6jo+uJ+5pFz5oLt0Gx8l
0CvFAERZ7Iw5jyd1ho0uJ90MhIxYQW1Nh+52zSbm9BV/dYVwNsUmStn3ZcKyc2JZ
lsuY/U3SK9daqliYgDP0veuPoFTizEacSx5ALB8x5ODKEWIOJvaR6mvrbQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD5CtPK/8hbOZN6C6KX4zTR7x/3QMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvUGtLMDhyX3lGczVrM29Mb3Bmak5OSHZIX2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuS4gAwQB
uWIOMA0EAgACMAcDBQAqBKfAMA0GCSqGSIb3DQEBCwUAA4IBAQCNGT/hvcAitvsJ
JTUs1thDPQlFDWWBibgFkvKLU6yut8nc2SDfmOeRcWakp+Ebn5ai0g63m68rEEnj
4s0cJMFOhPECYaG8Msq9jSUpAj7iE09BxEZeXNexiOuwhoiB42MWxNWkM9RYqPtD
6bsJ+83tXy0sGOBz6r/pU3GEKW2kNlSugA2NKFnBTw9JaudT7yoSsyPCifx85pSk
VxTJ2OIdhdjtKBz9CW6U1ViCliqzi0gI3JMSAmpgj9fM3oDFJjmGcLR9xH7SLrnX
iro6Bl/FY4yAJ6RucI5xJ6tywAqZQXVXnWG/sLSpKxMIHeOdN1/RQUqTbuuAxDF5
3OgShbIc
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:26 2024 by rpki-client on console-fra.rpki-client.org