Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/LOprcw4CKG4TN8Kd50O4mRDqQWI.roa
File: LOprcw4CKG4TN8Kd50O4mRDqQWI.roa (raw, json)
Hash identifier: sYMEgXrApuT4JaVi3Smpr42N2Zk7zSQ+1v5XEQk+H+o=
Subject key identifier: 2C:EA:6B:73:0E:02:28:6E:13:37:C2:9D:E7:43:B8:99:10:EA:41:62
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 01857094E111842454EA7F2AEBBEA638B5A3
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/LOprcw4CKG4TN8Kd50O4mRDqQWI.roa
Signing time: Mon 02 Jan 2023 03:44:43 +0000
ROA not before: Mon 02 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199082
IP address blocks: 185.115.169.0/24 maxlen: 24
185.115.171.0/24 maxlen: 24
185.115.168.0/24 maxlen: 24
185.23.129.0/24 maxlen: 24
185.23.130.0/24 maxlen: 24
185.23.131.0/24 maxlen: 24
185.23.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e1:11:84:24:54:ea:7f:2a:eb:be:a6:38:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Jan 2 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cea6b730e02286e1337c29de743b89910ea4162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:b6:3d:9a:9b:ec:89:a6:6b:87:d6:91:1c:
25:e1:7b:05:39:72:f7:47:20:1e:c2:05:ab:35:0b:
2d:6d:10:43:dd:fa:d7:db:e2:c1:11:39:df:a6:24:
f3:9a:2a:e6:7a:67:ed:00:f3:7c:a1:19:df:e3:51:
85:4b:b8:96:b6:84:4b:84:06:8f:e0:37:a9:9e:f4:
dc:af:26:00:81:3e:75:31:67:d2:b9:50:7c:01:ea:
e5:fb:06:85:62:5f:19:be:9f:e1:b3:80:e2:38:5a:
9a:f3:43:44:d5:87:a0:79:3c:9f:d4:28:18:85:0d:
43:03:f3:86:a7:67:82:2e:37:58:a3:b9:41:1c:d3:
80:2c:22:3a:85:4d:55:0c:70:22:6d:00:e2:c7:2d:
46:42:85:7c:90:ac:9d:98:e1:e4:a7:4c:05:1c:87:
3e:0d:70:df:7c:25:42:6c:69:a9:73:e0:7e:49:ab:
03:20:24:4b:3e:b5:4c:38:a0:41:ab:91:36:5f:4e:
cd:34:9a:f7:df:e7:09:01:f8:66:bd:8f:ea:ac:39:
2a:e3:77:f7:4f:a4:43:67:9f:c5:35:87:8c:ec:f4:
d9:3c:7c:38:a2:2e:0f:17:6f:e8:86:ca:d0:2b:93:
4b:a2:1c:76:65:68:22:16:0b:6a:10:ad:6d:d8:84:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:6B:73:0E:02:28:6E:13:37:C2:9D:E7:43:B8:99:10:EA:41:62
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/LOprcw4CKG4TN8Kd50O4mRDqQWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.128.0/22
185.115.168.0/23
185.115.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d2:54:db:2b:91:42:6f:9a:92:cc:57:ad:79:87:73:3f:0e:
7a:d6:45:b3:d7:24:37:47:9a:08:06:89:f3:88:86:0b:f1:4a:
8d:6c:65:11:ff:a4:95:c5:48:96:b5:f3:c9:6b:9e:ab:ec:15:
51:b2:9c:40:d1:76:87:a3:dd:3b:c6:a4:99:3d:02:8b:bb:96:
4f:42:9a:de:d9:4b:52:85:99:f1:3c:98:a8:1c:a6:dd:1b:ed:
54:4e:30:83:98:78:e2:ac:7c:da:47:b3:b8:66:49:4d:28:2c:
42:d9:20:1e:89:db:7b:91:2f:ca:f7:f5:ea:f5:16:de:82:ba:
b3:69:a4:be:8b:0f:5d:b0:d6:3a:79:7b:e5:9a:25:01:0e:7f:
2b:f3:0d:58:ec:99:37:7f:2b:8f:5f:7f:f1:1c:60:89:4f:e6:
43:bf:88:c7:19:a1:a1:6e:23:a5:57:98:a4:9f:00:63:09:de:
22:20:de:03:53:5b:4e:4d:94:d9:0e:1b:eb:fb:4c:9e:ad:b4:
a9:28:eb:01:ee:e3:8b:6a:c5:ba:1c:b4:ce:80:fd:00:ad:5b:
d1:58:30:5e:3e:b4:5d:5a:5a:c7:f3:ad:da:6c:7a:61:56:67:
3d:09:4d:2a:2f:33:44:80:f3:05:28:a0:63:65:62:67:bd:02:
fd:7c:7a:be
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwlOERhCRU6n8q676mOLWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2
YTU2MTEwHhcNMjMwMTAyMDM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VhNmI3MzBlMDIyODZlMTMzN2MyOWRlNzQzYjg5OTEwZWE0MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktG2PZqb7Imma4fWkRwl4XsFOXL3
RyAewgWrNQstbRBD3frX2+LBETnfpiTzmirmemftAPN8oRnf41GFS7iWtoRLhAaP
4DepnvTcryYAgT51MWfSuVB8Aerl+waFYl8Zvp/hs4DiOFqa80NE1YegeTyf1CgY
hQ1DA/OGp2eCLjdYo7lBHNOALCI6hU1VDHAibQDixy1GQoV8kKydmOHkp0wFHIc+
DXDffCVCbGmpc+B+SasDICRLPrVMOKBBq5E2X07NNJr33+cJAfhmvY/qrDkq43f3
T6RDZ5/FNYeM7PTZPHw4oi4PF2/ohsrQK5NLohx2ZWgiFgtqEK1t2IRW9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCzqa3MOAihuEzfCnedDuJkQ6kFiMB8GA1UdIwQY
MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt
YjhjMzZlY2VkYWQ4LzEvTE9wcmN3NENLRzRUTjhLZDUwTzRtUkRxUVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4
LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuReAAwQB
uXOoAwQAuXOrMA0GCSqGSIb3DQEBCwUAA4IBAQAr0lTbK5FCb5qSzFeteYdzPw56
1kWz1yQ3R5oIBonziIYL8UqNbGUR/6SVxUiWtfPJa56r7BVRspxA0XaHo907xqSZ
PQKLu5ZPQpre2UtShZnxPJioHKbdG+1UTjCDmHjirHzaR7O4ZklNKCxC2SAeidt7
kS/K9/Xq9RbegrqzaaS+iw9dsNY6eXvlmiUBDn8r8w1Y7Jk3fyuPX3/xHGCJT+ZD
v4jHGaGhbiOlV5iknwBjCd4iIN4DU1tOTZTZDhvr+0yerbSpKOsB7uOLasW6HLTO
gP0ArVvRWDBePrRdWlrH863abHphVmc9CU0qLzNEgPMFKKBjZWJnvQL9fHq+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:10 2023 by rpki-client on console-fra.rpki-client.org