Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/JDQDt7nr_NS8ew-HNQBSEDPGoAE.roa
File: JDQDt7nr_NS8ew-HNQBSEDPGoAE.roa (raw, json)
Hash identifier: v1z1V7NAfXUun47nd4oh6cYK5Hel3CjXp2FJdaHULNE=
Subject key identifier: 24:34:03:B7:B9:EB:FC:D4:BC:7B:0F:87:35:00:52:10:33:C6:A0:01
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 0187EBB423BEE265F3CDF44E17EFC02032CC
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/JDQDt7nr_NS8ew-HNQBSEDPGoAE.roa
Signing time: Fri 05 May 2023 11:37:43 +0000
ROA not before: Fri 05 May 2023 11:37:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43311
IP address blocks: 185.83.189.0/24 maxlen: 24
185.83.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:b4:23:be:e2:65:f3:cd:f4:4e:17:ef:c0:20:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: May 5 11:37:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243403b7b9ebfcd4bc7b0f873500521033c6a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:5a:cb:04:77:84:b2:2e:6a:df:51:09:fe:
be:32:03:a1:b0:8e:c4:b5:e7:0f:e1:b4:97:13:89:
a4:e2:c1:fc:c6:4c:8b:e6:89:e7:ee:ba:42:3b:0c:
32:f0:f6:49:80:1c:fb:9c:ed:c6:49:47:6a:6c:60:
69:51:80:76:ac:8d:98:4c:00:42:05:b8:16:e7:e9:
18:55:29:d1:49:d2:71:ca:92:84:77:90:9f:09:79:
10:b8:bc:91:ae:ba:52:d8:e7:0b:23:78:ef:da:08:
d7:f9:87:d0:c4:12:0b:63:9d:67:71:74:61:84:89:
0e:e3:ab:50:a3:82:25:68:88:d3:19:15:7f:1a:ab:
b5:0c:36:1a:5d:b7:36:83:0c:8c:59:ac:82:de:0f:
cf:84:97:84:a9:74:c5:a1:8b:1d:b0:c5:14:aa:4b:
95:77:8f:60:1b:65:39:de:e0:20:cb:25:aa:17:5a:
2a:10:ec:e4:b8:67:18:39:b7:21:3d:99:e2:c2:32:
51:ef:ce:84:03:75:aa:fd:4e:41:8b:09:45:27:e7:
02:e2:ad:25:c8:04:ad:44:29:cf:10:aa:43:f2:34:
4f:f4:a8:42:9a:20:16:8e:50:90:1f:fb:2e:6d:c8:
be:ca:8b:76:2a:08:f2:a9:34:ff:00:7a:06:2c:3b:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:03:B7:B9:EB:FC:D4:BC:7B:0F:87:35:00:52:10:33:C6:A0:01
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/JDQDt7nr_NS8ew-HNQBSEDPGoAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.189.0/24
185.83.191.0/24
Signature Algorithm: sha256WithRSAEncryption
20:77:4c:97:b8:a4:e9:c4:b2:2d:f1:f0:32:7d:15:6b:4f:2c:
4a:77:a0:dd:60:ff:fd:b1:29:0e:93:8c:ce:b1:e8:25:03:93:
ee:ea:de:70:8c:a5:a7:10:5f:53:99:27:8b:01:d4:e2:b4:ec:
2e:7a:d2:95:21:86:4a:36:fd:45:1d:d3:0a:c0:96:e8:54:af:
ea:ce:10:32:bf:b2:8e:32:7b:8f:74:60:a1:72:49:1a:7d:11:
6b:b1:35:c9:37:7a:74:31:1c:0d:59:db:42:4b:00:5d:64:88:
1d:d9:8d:1e:5e:b3:9a:46:98:87:39:eb:b0:a9:3a:ea:82:77:
60:b9:5b:69:ee:3e:af:b9:3f:26:dd:83:86:a7:0b:04:8b:9c:
4c:1a:9f:98:2b:a7:60:a6:00:23:37:ee:b0:51:13:a1:25:11:
4a:8a:e5:43:46:cd:d0:96:ce:06:1a:fb:5b:e9:12:fb:60:cf:
07:29:c5:ab:0e:41:1e:ab:49:dd:0d:f2:6a:da:6a:f6:8e:a7:
68:54:a8:f4:dd:4c:92:99:35:96:e5:3b:be:e4:16:d1:31:96:
5c:89:a7:28:5a:7d:01:6e:60:3e:9d:fc:78:90:fb:2d:e6:09:
01:91:a5:20:2e:7e:b6:85:8a:ef:6a:cc:16:c2:f2:56:c8:a1:
29:68:63:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfrtCO+4mXzzfROF+/AIDLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE3YzhhZTAxNTBlYjhjOTQ2ZDdiZjFlMDVjMDQyZGRm
NmEzZDQwHhcNMjMwNTA1MTEzNzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDM0MDNiN2I5ZWJmY2Q0YmM3YjBmODczNTAwNTIxMDMzYzZhMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVtaywR3hLIuat9RCf6+MgOhsI7E
tecP4bSXE4mk4sH8xkyL5onn7rpCOwwy8PZJgBz7nO3GSUdqbGBpUYB2rI2YTABC
BbgW5+kYVSnRSdJxypKEd5CfCXkQuLyRrrpS2OcLI3jv2gjX+YfQxBILY51ncXRh
hIkO46tQo4IlaIjTGRV/Gqu1DDYaXbc2gwyMWayC3g/PhJeEqXTFoYsdsMUUqkuV
d49gG2U53uAgyyWqF1oqEOzkuGcYObchPZniwjJR786EA3Wq/U5BiwlFJ+cC4q0l
yAStRCnPEKpD8jRP9KhCmiAWjlCQH/subci+yot2KgjyqTT/AHoGLDu/+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCQ0A7e56/zUvHsPhzUAUhAzxqABMB8GA1UdIwQY
MBaAFFDafIrgFQ64yUbXvx4FwELd9qPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5Nzgt
YjZmMWYwMzE3MjFlLzEvSkRRRHQ3bnJfTlM4ZXctSE5RQlNFRFBHb0FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5NzgtYjZmMWYwMzE3MjFl
LzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVO9AwQA
uVO/MA0GCSqGSIb3DQEBCwUAA4IBAQAgd0yXuKTpxLIt8fAyfRVrTyxKd6DdYP/9
sSkOk4zOseglA5Pu6t5wjKWnEF9TmSeLAdTitOwuetKVIYZKNv1FHdMKwJboVK/q
zhAyv7KOMnuPdGChckkafRFrsTXJN3p0MRwNWdtCSwBdZIgd2Y0eXrOaRpiHOeuw
qTrqgndguVtp7j6vuT8m3YOGpwsEi5xMGp+YK6dgpgAjN+6wUROhJRFKiuVDRs3Q
ls4GGvtb6RL7YM8HKcWrDkEeq0ndDfJq2mr2jqdoVKj03UySmTWW5Tu+5BbRMZZc
iacoWn0BbmA+nfx4kPst5gkBkaUgLn62hYrvaswWwvJWyKEpaGNp
-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:03 2024 by rpki-client on console.sobornost.net