Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DO_7yG5TZkwpnJDfCXjZzgcQj14.roa
File: DO_7yG5TZkwpnJDfCXjZzgcQj14.roa (raw, json)
Hash identifier: HPFUOXBu2CJ1BP7SxTNlb4PmFTuLzMkD0NSEMEujtnI=
Subject key identifier: 0C:EF:FB:C8:6E:53:66:4C:29:9C:90:DF:09:78:D9:CE:07:10:8F:5E
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018571D7CA2359171BEB31F564800EAABFEA
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DO_7yG5TZkwpnJDfCXjZzgcQj14.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49176
IP address blocks: 185.117.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ca:23:59:17:1b:eb:31:f5:64:80:0e:aa:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ceffbc86e53664c299c90df0978d9ce07108f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:f9:c1:00:bb:3b:cd:31:aa:f9:df:44:da:
c8:a9:7d:bb:9a:ba:88:1a:f5:97:c5:11:4b:ef:67:
84:42:fb:17:cf:bd:ad:4f:37:7b:8d:20:1e:2d:10:
f2:f4:ec:d3:9e:8c:b2:da:d8:4b:66:ba:e7:ae:df:
2b:c0:6a:69:6f:7c:8a:25:8f:be:50:f3:cb:58:20:
fb:54:56:fd:47:bf:43:eb:03:e0:de:8a:43:65:f3:
fa:f7:82:62:56:9b:7a:b2:65:9a:38:6c:f7:fc:24:
17:08:6a:61:8b:3c:17:88:bd:4c:25:7c:2f:62:4c:
a2:dc:46:2d:5d:75:94:a6:e6:60:50:1a:7f:84:51:
93:77:3c:7d:81:0b:f4:6d:ef:cf:19:8c:39:63:08:
14:fa:ec:86:16:54:e7:89:dc:93:c3:48:f4:cc:34:
cf:19:89:f3:96:a8:cc:32:f6:4d:e3:d5:11:d7:be:
ca:07:ed:0a:5b:1f:31:27:a7:f6:20:5a:de:a9:70:
3b:d4:62:a1:72:b1:a3:59:cf:04:42:ea:82:7b:da:
f0:81:d4:97:77:fe:e6:bd:31:59:1f:a1:38:46:39:
e6:75:07:a6:12:05:21:8e:c6:e0:a5:3f:a5:64:07:
0d:ee:71:ef:a8:4a:94:c2:d6:bf:a6:fc:99:bf:62:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:FB:C8:6E:53:66:4C:29:9C:90:DF:09:78:D9:CE:07:10:8F:5E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DO_7yG5TZkwpnJDfCXjZzgcQj14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
17:21:94:7d:6e:3b:5e:21:b0:48:bf:c9:1d:dc:50:11:01:4c:
1c:73:4f:f4:05:e2:a5:3c:3e:5c:7f:7b:a3:d0:f0:ba:1b:bd:
54:87:04:54:07:70:c2:e5:fe:cb:d3:1c:50:12:84:9f:f2:fd:
f7:af:ef:91:32:5f:68:e7:2b:26:fb:a3:72:fc:09:3d:6b:c4:
c9:eb:01:e3:94:45:f8:59:86:82:eb:44:1d:1a:ce:fa:e8:8c:
c7:56:83:d6:e9:10:b3:b5:08:52:76:5b:cc:e0:93:4b:59:fc:
de:7d:82:7f:59:c8:91:7c:fd:a4:38:8f:ea:1c:18:c8:d9:eb:
15:cf:7d:06:55:41:74:46:ce:4d:8a:82:39:8f:90:8d:c5:a9:
b8:ea:7d:00:bf:16:a5:18:9f:3a:89:44:49:5c:88:53:8e:d7:
9d:11:0b:bc:0f:96:d8:b6:ab:5a:24:5c:2e:d4:22:23:cf:43:
ab:26:09:4b:cd:99:9b:3d:4c:e4:2a:fa:f1:79:71:f5:c6:1b:
2f:57:54:b4:f3:b5:48:c8:4a:54:c2:d8:70:bc:01:f8:f1:06:
1d:48:cb:cd:a3:98:af:f1:92:4a:e5:99:99:9e:ed:66:19:2f:
7e:ae:69:34:14:f7:06:1b:33:db:65:43:bc:90:44:89:4d:9a:
cc:03:ae:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx18ojWRcb6zH1ZIAOqr/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2VmZmJjODZlNTM2NjRjMjk5YzkwZGYwOTc4ZDljZTA3MTA4ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr75wQC7O80xqvnfRNrIqX27mrqI
GvWXxRFL72eEQvsXz72tTzd7jSAeLRDy9OzTnoyy2thLZrrnrt8rwGppb3yKJY++
UPPLWCD7VFb9R79D6wPg3opDZfP694JiVpt6smWaOGz3/CQXCGphizwXiL1MJXwv
Ykyi3EYtXXWUpuZgUBp/hFGTdzx9gQv0be/PGYw5YwgU+uyGFlTnidyTw0j0zDTP
GYnzlqjMMvZN49UR177KB+0KWx8xJ6f2IFreqXA71GKhcrGjWc8EQuqCe9rwgdSX
d/7mvTFZH6E4RjnmdQemEgUhjsbgpT+lZAcN7nHvqEqUwta/pvyZv2L8CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzv+8huU2ZMKZyQ3wl42c4HEI9eMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvRE9fN3lHNVRaa3dwbkpEZkNYalp6Z2NRajE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXVRMA0G
CSqGSIb3DQEBCwUAA4IBAQAXIZR9bjteIbBIv8kd3FARAUwcc0/0BeKlPD5cf3uj
0PC6G71UhwRUB3DC5f7L0xxQEoSf8v33r++RMl9o5ysm+6Ny/Ak9a8TJ6wHjlEX4
WYaC60QdGs766IzHVoPW6RCztQhSdlvM4JNLWfzefYJ/WciRfP2kOI/qHBjI2esV
z30GVUF0Rs5NioI5j5CNxam46n0AvxalGJ86iURJXIhTjtedEQu8D5bYtqtaJFwu
1CIjz0OrJglLzZmbPUzkKvrxeXH1xhsvV1S087VIyEpUwthwvAH48QYdSMvNo5iv
8ZJK5ZmZnu1mGS9+rmk0FPcGGzPbZUO8kESJTZrMA67D
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:14 2024 by rpki-client on console-ams.rpki-client.org