Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ru1LBbIcfVpyQ2NMTjifhpncZlE.roa
File: ru1LBbIcfVpyQ2NMTjifhpncZlE.roa (raw, json)
Hash identifier: xZA5q7jYZKkFnhsMl7cQV5B46UAW1k0sxB2Br9uZB4w=
Subject key identifier: AE:ED:4B:05:B2:1C:7D:5A:72:43:63:4C:4E:38:9F:86:99:DC:66:51
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 0189D147EAA4C15425D0727066CF3885DE15
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ru1LBbIcfVpyQ2NMTjifhpncZlE.roa
Signing time: Mon 07 Aug 2023 18:34:58 +0000
ROA not before: Mon 07 Aug 2023 18:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61429
IP address blocks: 81.23.240.0/23 maxlen: 23
185.6.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:47:ea:a4:c1:54:25:d0:72:70:66:cf:38:85:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Aug 7 18:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeed4b05b21c7d5a7243634c4e389f8699dc6651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:fb:0b:57:28:a0:84:44:ac:f7:3c:42:d8:
43:ad:80:88:67:ee:63:9c:72:42:8b:15:34:48:e8:
ae:a5:e7:6b:5b:78:ee:f9:82:07:8e:a3:72:a8:09:
3c:ca:91:29:6b:fb:a2:e0:fd:5b:41:e2:e7:d6:3f:
f8:e0:4f:a9:ed:00:90:a8:ad:4a:f6:e5:04:e4:38:
30:70:fc:e6:ee:e9:92:e2:ca:e1:74:d1:af:ff:e4:
00:9a:72:5f:18:75:e3:81:d7:bc:df:23:ab:b2:ea:
76:ad:b6:04:a0:87:1c:33:fb:23:3e:a6:35:9d:08:
b0:f1:9b:d0:85:1b:96:88:18:a4:f5:12:73:ff:d5:
09:c2:f3:0f:5c:4c:d6:56:f3:b2:6c:77:29:e4:ec:
13:c4:11:f4:54:5e:70:e0:e7:49:91:44:64:7a:16:
d1:83:21:58:a5:80:9b:c6:a9:ea:8a:76:e1:47:3a:
0d:b6:45:80:b5:39:fc:7a:97:f5:3c:53:85:75:95:
78:61:7d:80:35:a1:5c:73:05:28:2f:b5:a6:dc:6c:
ee:aa:83:2d:9b:69:b6:fb:ab:eb:e5:b8:60:f4:70:
6e:cf:3d:8b:cf:2b:83:f0:16:66:5b:53:9d:51:f3:
7a:e3:a6:fd:8d:f3:2e:b2:67:8c:05:d0:94:5c:c2:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:4B:05:B2:1C:7D:5A:72:43:63:4C:4E:38:9F:86:99:DC:66:51
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ru1LBbIcfVpyQ2NMTjifhpncZlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.240.0/23
185.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
34:13:00:ee:3c:f8:26:22:cd:22:c3:5b:4b:5e:c3:d9:a5:ec:
47:5b:ad:58:fe:19:fd:38:83:9f:97:b0:7f:c3:f2:9e:8b:13:
ee:be:aa:9e:2a:46:44:f6:90:f9:1a:b5:e9:0c:83:f0:e4:a7:
52:14:d8:28:b6:97:62:0f:e1:9f:2c:f6:90:57:a1:21:fb:f6:
04:80:d1:d6:9b:9a:b7:86:1b:01:5d:93:c1:08:67:0a:c9:da:
74:84:b6:88:6e:61:d2:88:4c:05:7e:84:b3:73:d1:27:c7:5d:
32:4c:3b:4b:e4:8b:8c:f1:6b:03:cb:36:5f:51:cf:27:b0:a6:
4c:bf:da:e2:35:41:37:dd:47:ab:a1:5b:b6:45:ee:45:eb:dc:
fa:83:62:ef:08:6f:f4:f4:25:5b:01:cb:65:79:98:99:a1:69:
c9:32:08:44:e1:2f:44:ed:fa:cd:fd:43:c7:f7:eb:5c:a8:01:
5d:cb:17:a9:d4:f1:04:e0:f9:10:20:73:33:b5:f8:79:68:3d:
ab:eb:c5:12:04:d2:6e:2b:71:5d:a4:da:9d:1f:e2:f1:bd:ca:
ab:5b:e9:44:6d:00:d0:e8:48:67:ff:24:ca:c4:c8:f0:f5:e8:
b1:8f:6c:bb:9d:86:f9:dd:64:dd:95:f0:3e:e4:1c:24:dd:d2:
b5:d1:bc:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnRR+qkwVQl0HJwZs84hd4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjMwODA3MTgzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWVkNGIwNWIyMWM3ZDVhNzI0MzYzNGM0ZTM4OWY4Njk5ZGM2NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyv7C1cooIRErPc8QthDrYCIZ+5j
nHJCixU0SOiupedrW3ju+YIHjqNyqAk8ypEpa/ui4P1bQeLn1j/44E+p7QCQqK1K
9uUE5DgwcPzm7umS4srhdNGv/+QAmnJfGHXjgde83yOrsup2rbYEoIccM/sjPqY1
nQiw8ZvQhRuWiBik9RJz/9UJwvMPXEzWVvOybHcp5OwTxBH0VF5w4OdJkURkehbR
gyFYpYCbxqnqinbhRzoNtkWAtTn8epf1PFOFdZV4YX2ANaFccwUoL7Wm3GzuqoMt
m2m2+6vr5bhg9HBuzz2LzyuD8BZmW1OdUfN646b9jfMusmeMBdCUXMJ9UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7tSwWyHH1ackNjTE44n4aZ3GZRMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvcnUxTEJiSWNmVnB5UTJOTVRqaWZocG5jWmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBURfwAwQC
uQZsMA0GCSqGSIb3DQEBCwUAA4IBAQA0EwDuPPgmIs0iw1tLXsPZpexHW61Y/hn9
OIOfl7B/w/KeixPuvqqeKkZE9pD5GrXpDIPw5KdSFNgotpdiD+GfLPaQV6Eh+/YE
gNHWm5q3hhsBXZPBCGcKydp0hLaIbmHSiEwFfoSzc9Enx10yTDtL5IuM8WsDyzZf
Uc8nsKZMv9riNUE33UeroVu2Re5F69z6g2LvCG/09CVbActleZiZoWnJMghE4S9E
7frN/UPH9+tcqAFdyxep1PEE4PkQIHMztfh5aD2r68USBNJuK3FdpNqdH+Lxvcqr
W+lEbQDQ6Ehn/yTKxMjw9eixj2y7nYb53WTdlfA+5Bwk3dK10bwV
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:44 2024 by rpki-client on console-fra.rpki-client.org