Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/R5D93X1oDw9pPpQJl3s8PveqBC4.roa
File: R5D93X1oDw9pPpQJl3s8PveqBC4.roa (raw, json)
Hash identifier: +bUaIMLgd2i/sfnoDUBqIp1N0QYYsDJpEz4YXYgTqUc=
Subject key identifier: 47:90:FD:DD:7D:68:0F:0F:69:3E:94:09:97:7B:3C:3E:F7:AA:04:2E
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 018920FC4327F652B9E4B68E023630EFC10A
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/R5D93X1oDw9pPpQJl3s8PveqBC4.roa
Signing time: Tue 04 Jul 2023 12:59:10 +0000
ROA not before: Tue 04 Jul 2023 12:59:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.206.57.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:fc:43:27:f6:52:b9:e4:b6:8e:02:36:30:ef:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 4 12:59:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4790fddd7d680f0f693e9409977b3c3ef7aa042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:2a:f5:d5:25:ea:ad:39:ca:5a:bc:65:ac:
7e:8f:1a:37:a9:47:7c:5b:cf:76:2e:80:2c:59:fc:
de:73:46:a9:f3:7c:04:be:b8:09:86:df:19:b9:0d:
15:6e:0b:55:d8:c1:04:2e:c2:23:08:25:58:9e:43:
52:ec:7b:94:d9:9d:2e:5c:31:1f:0d:e9:14:d2:c8:
32:04:ef:38:98:dd:37:1b:14:22:7d:c5:82:34:c6:
7f:67:b0:04:55:be:9c:44:8f:44:f4:ee:23:e8:af:
66:3c:46:9a:c3:26:b4:bb:61:78:df:c7:c5:49:30:
b1:45:df:38:7d:09:93:ad:30:17:c8:78:33:6e:d8:
b0:da:cb:a6:0c:fc:53:c4:ec:e8:09:05:05:94:be:
62:36:72:09:36:b7:17:04:df:d2:54:07:08:46:44:
9d:e5:72:13:eb:5b:c7:5e:12:22:6d:b2:d7:eb:f4:
28:55:b7:a6:83:c1:ca:29:30:01:a9:44:cb:44:9a:
31:3f:85:4d:a3:d0:72:6d:4b:ae:c9:3c:75:ea:49:
43:4a:c8:36:a6:49:3f:e4:10:68:e8:7d:7b:bf:2f:
b2:80:c3:b6:d1:f2:ac:6f:7b:e2:2b:46:ad:9c:33:
83:25:52:51:47:cc:0c:a7:21:a0:01:98:cd:3c:1e:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:90:FD:DD:7D:68:0F:0F:69:3E:94:09:97:7B:3C:3E:F7:AA:04:2E
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/R5D93X1oDw9pPpQJl3s8PveqBC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:50:2a:64:52:12:ea:46:04:c3:02:67:e5:ec:e3:72:02:35:
06:56:7a:a7:79:72:13:5e:b8:02:24:48:53:0f:a8:de:89:d5:
38:bf:fb:97:3c:42:93:d9:4d:f7:70:ef:bc:d3:6c:9e:91:a1:
71:a5:f0:df:3a:20:b9:65:d5:09:6e:46:e9:07:ef:5b:7a:f0:
c4:1c:0b:0b:b4:20:08:c2:5c:4b:83:ad:95:b0:da:b3:76:8c:
14:68:6e:34:f6:c0:14:0f:b7:7e:92:ec:40:8c:e3:15:67:e8:
87:51:59:26:08:af:a1:e9:26:d8:82:95:1f:63:c9:3c:c9:9d:
89:b1:16:80:f6:23:28:90:e0:db:26:4d:d4:f4:1c:b7:13:57:
a6:43:21:84:f9:f0:94:72:0d:e6:0d:1b:c8:81:7b:a1:39:5e:
fb:3f:d8:9c:d6:48:d2:78:9e:d6:2b:9d:2c:4f:91:13:68:61:
f7:36:33:7d:c5:2c:a4:47:50:e7:ba:93:cd:38:5b:30:2b:4d:
c1:31:ab:df:bf:b3:d6:57:11:ae:36:a4:e4:21:bb:74:13:0e:
c0:99:98:4b:77:a5:6e:57:cb:63:b8:66:4b:c0:b6:ed:a5:76:
5d:d9:32:d9:3f:91:64:4c:f0:ea:a3:33:d4:4c:e0:87:b1:45:
e4:7a:55:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkg/EMn9lK55LaOAjYw78EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjMwNzA0MTI1OTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzkwZmRkZDdkNjgwZjBmNjkzZTk0MDk5NzdiM2MzZWY3YWEwNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bgq9dUl6q05ylq8Zax+jxo3qUd8
W892LoAsWfzec0ap83wEvrgJht8ZuQ0VbgtV2MEELsIjCCVYnkNS7HuU2Z0uXDEf
DekU0sgyBO84mN03GxQifcWCNMZ/Z7AEVb6cRI9E9O4j6K9mPEaawya0u2F438fF
STCxRd84fQmTrTAXyHgzbtiw2sumDPxTxOzoCQUFlL5iNnIJNrcXBN/SVAcIRkSd
5XIT61vHXhIibbLX6/QoVbemg8HKKTABqUTLRJoxP4VNo9BybUuuyTx16klDSsg2
pkk/5BBo6H17vy+ygMO20fKsb3viK0atnDODJVJRR8wMpyGgAZjNPB6vrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeQ/d19aA8PaT6UCZd7PD73qgQuMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvUjVEOTNYMW9EdzlwUHBRSmwzczhQdmVxQkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc44MA0G
CSqGSIb3DQEBCwUAA4IBAQCbUCpkUhLqRgTDAmfl7ONyAjUGVnqneXITXrgCJEhT
D6jeidU4v/uXPEKT2U33cO+802yekaFxpfDfOiC5ZdUJbkbpB+9bevDEHAsLtCAI
wlxLg62VsNqzdowUaG409sAUD7d+kuxAjOMVZ+iHUVkmCK+h6SbYgpUfY8k8yZ2J
sRaA9iMokODbJk3U9By3E1emQyGE+fCUcg3mDRvIgXuhOV77P9ic1kjSeJ7WK50s
T5ETaGH3NjN9xSykR1DnupPNOFswK03BMavfv7PWVxGuNqTkIbt0Ew7AmZhLd6Vu
V8tjuGZLwLbtpXZd2TLZP5FkTPDqozPUTOCHsUXkelUy
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org