Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/s1dRqF05qVAkgiNwdDUOxA_ekuc.roa
File: s1dRqF05qVAkgiNwdDUOxA_ekuc.roa (raw, json)
Hash identifier: T3cLwo+W1JDCMp//XO6JlNsYLYXQhecJ/MpLHab6glY=
Subject key identifier: B3:57:51:A8:5D:39:A9:50:24:82:23:70:74:35:0E:C4:0F:DE:92:E7
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01856B8A1045C6AD9B15ABB312F74B559D9A
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/s1dRqF05qVAkgiNwdDUOxA_ekuc.roa
Signing time: Sun 01 Jan 2023 04:14:48 +0000
ROA not before: Sun 01 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206734
IP address blocks: 185.36.98.0/24 maxlen: 24
185.36.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:10:45:c6:ad:9b:15:ab:b3:12:f7:4b:55:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 1 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b35751a85d39a9502482237074350ec40fde92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:83:1b:29:36:48:87:20:7b:79:60:58:dc:
4a:d1:23:29:c5:b8:4a:92:5b:6d:3a:c8:13:1b:7b:
2e:55:14:2b:b2:27:d8:da:52:57:fc:e0:8b:9e:31:
85:23:ce:66:03:3f:79:99:8a:15:87:ef:38:01:03:
a5:63:55:cf:d2:07:9b:47:92:61:13:08:a0:ed:07:
45:eb:17:ad:4c:11:11:ed:b5:ec:c6:c3:dc:d5:df:
b0:2b:04:b8:13:ad:65:8f:26:3d:a4:35:6f:70:21:
62:b4:8a:5d:6d:f6:e4:3e:35:23:d2:4c:3d:64:61:
1c:c8:00:b0:09:7e:36:10:14:f5:d0:cc:6f:a3:be:
ac:a8:53:a7:fd:ae:92:a6:33:15:f5:49:05:f9:03:
ed:e3:d4:07:e6:fb:ca:1a:90:2e:29:2c:05:b6:c6:
c9:95:fd:50:09:a5:40:34:16:58:80:c8:11:e8:26:
2d:8c:a1:fc:6a:62:94:ab:a7:bd:36:36:e1:68:07:
1c:6d:fd:4b:22:0d:64:0c:45:42:3f:71:88:9a:9a:
bf:33:8c:51:3f:c5:e9:3b:79:f5:5f:65:08:1a:4c:
0a:eb:cc:90:c5:4b:22:8a:c6:c8:51:86:62:98:a8:
49:5c:fc:c6:aa:44:11:ee:13:69:06:db:05:4a:ee:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:51:A8:5D:39:A9:50:24:82:23:70:74:35:0E:C4:0F:DE:92:E7
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/s1dRqF05qVAkgiNwdDUOxA_ekuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.96.0/24
185.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5e:bd:f9:df:57:ce:81:72:79:cb:02:9c:22:c3:2d:d5:4a:
53:07:40:e8:4f:fd:e4:da:59:1f:23:de:6a:da:e0:64:0d:92:
34:9b:65:af:f9:28:2c:ff:aa:67:c7:90:67:bb:d1:af:db:b9:
e9:71:07:e3:ba:6a:60:3f:03:c7:94:16:b8:47:b5:86:f7:f1:
0a:49:d8:6a:f6:bc:18:46:3e:60:61:47:94:10:a7:6e:3a:5c:
2a:75:d9:4b:06:eb:ab:93:31:fe:0e:71:79:1e:08:2e:19:84:
26:c2:f6:96:6f:0f:a0:54:ec:8a:b6:7b:41:bb:11:3b:27:e4:
5d:70:9c:87:4e:ca:43:0c:ce:a0:1f:a2:21:66:39:90:03:8e:
0b:b1:56:1d:97:55:ab:07:3a:a7:2b:59:b3:e0:51:5a:a7:e5:
3d:60:e4:b0:5a:61:7e:36:3f:a7:f9:bf:e4:7b:48:e7:65:24:
36:fc:79:2a:56:3f:44:5a:24:0b:3a:f1:63:91:2e:cd:4b:c6:
4a:15:60:c8:99:1a:b7:7e:37:e4:6f:91:25:46:93:f5:f6:5c:
7c:12:f6:8c:ca:15:8d:f8:62:15:d6:61:ec:82:64:66:34:f7:
a0:23:fc:75:26:fc:a2:48:f1:70:e1:9c:12:09:60:db:ed:98:
36:1a:9f:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrihBFxq2bFauzEvdLVZ2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew
YTNlYzYwHhcNMjMwMTAxMDQxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzU3NTFhODVkMzlhOTUwMjQ4MjIzNzA3NDM1MGVjNDBmZGU5MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9eDGyk2SIcge3lgWNxK0SMpxbhK
klttOsgTG3suVRQrsifY2lJX/OCLnjGFI85mAz95mYoVh+84AQOlY1XP0gebR5Jh
Ewig7QdF6xetTBER7bXsxsPc1d+wKwS4E61ljyY9pDVvcCFitIpdbfbkPjUj0kw9
ZGEcyACwCX42EBT10Mxvo76sqFOn/a6SpjMV9UkF+QPt49QH5vvKGpAuKSwFtsbJ
lf1QCaVANBZYgMgR6CYtjKH8amKUq6e9NjbhaAccbf1LIg1kDEVCP3GImpq/M4xR
P8XpO3n1X2UIGkwK68yQxUsiisbIUYZimKhJXPzGqkQR7hNpBtsFSu6uDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLNXUahdOalQJIIjcHQ1DsQP3pLnMB8GA1UdIwQY
MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt
NjcxYmVlMmJjYzA0LzEvczFkUnFGMDVxVkFrZ2lOd2REVU94QV9la3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0
LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSRgAwQA
uSRiMA0GCSqGSIb3DQEBCwUAA4IBAQBhXr3531fOgXJ5ywKcIsMt1UpTB0DoT/3k
2lkfI95q2uBkDZI0m2Wv+Sgs/6pnx5Bnu9Gv27npcQfjumpgPwPHlBa4R7WG9/EK
Sdhq9rwYRj5gYUeUEKduOlwqddlLBuurkzH+DnF5HgguGYQmwvaWbw+gVOyKtntB
uxE7J+RdcJyHTspDDM6gH6IhZjmQA44LsVYdl1WrBzqnK1mz4FFap+U9YOSwWmF+
Nj+n+b/ke0jnZSQ2/HkqVj9EWiQLOvFjkS7NS8ZKFWDImRq3fjfkb5ElRpP19lx8
EvaMyhWN+GIV1mHsgmRmNPegI/x1JvyiSPFw4ZwSCWDb7Zg2Gp8d
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:50 2024 by rpki-client on console-ams.rpki-client.org