Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/haXJtj8hDNNczxW938RVSPGXekE.roa
File: haXJtj8hDNNczxW938RVSPGXekE.roa (raw, json)
Hash identifier: 66Zub1YO5td/kqAKgtIy/mgrp+RY2GytF6saYsr+re8=
Subject key identifier: 85:A5:C9:B6:3F:21:0C:D3:5C:CF:15:BD:DF:C4:55:48:F1:97:7A:41
Certificate issuer: /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial: 0185715526A3A4B6CBD26B71849D88C8F727
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/haXJtj8hDNNczxW938RVSPGXekE.roa
Signing time: Mon 02 Jan 2023 07:14:43 +0000
ROA not before: Mon 02 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 185.201.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:26:a3:a4:b6:cb:d2:6b:71:84:9d:88:c8:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Validity
Not Before: Jan 2 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85a5c9b63f210cd35ccf15bddfc45548f1977a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:ff:91:87:d2:b2:67:f2:00:cc:0a:1c:06:
e3:5e:97:fa:c5:9b:c4:29:5d:c6:36:b7:c7:ee:26:
f0:f3:93:9e:c4:ba:18:93:b1:a4:3d:eb:58:11:c4:
9b:85:d5:df:90:e7:5c:2e:ab:47:bf:9d:cc:1b:f7:
15:ca:1f:8c:5a:19:af:3d:ab:a5:33:85:30:b0:ad:
d3:a9:e5:ca:89:19:9a:35:a9:47:61:12:67:ad:3d:
f5:63:d5:6a:83:17:46:56:6b:90:99:f5:3d:cf:58:
bf:52:ad:21:cc:d2:76:04:ef:1d:95:bb:3a:bf:34:
46:2b:df:cf:da:37:e4:44:f5:0a:2b:30:4e:7f:24:
5b:61:2a:0c:09:e3:de:75:ba:d9:1e:b5:c8:12:6d:
65:32:f4:1f:f0:24:35:80:c9:9b:73:a8:92:fb:de:
15:06:9f:f5:cf:f3:8b:6f:4b:8b:1a:fc:4a:d7:f8:
4e:96:ea:90:e6:c7:7a:34:39:e2:01:1f:dc:99:70:
22:de:cb:1d:c9:5b:99:68:85:81:1a:9c:6c:79:b2:
c5:81:17:c5:e9:7e:c1:cf:4e:64:35:5a:ec:7d:0f:
be:91:68:6e:bf:3d:7c:bc:5a:5d:cd:4c:68:4c:b1:
14:b9:c2:aa:4a:7d:ca:57:79:ba:8f:ca:d2:19:62:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:C9:B6:3F:21:0C:D3:5C:CF:15:BD:DF:C4:55:48:F1:97:7A:41
X509v3 Authority Key Identifier:
keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/haXJtj8hDNNczxW938RVSPGXekE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.244.0/22
Signature Algorithm: sha256WithRSAEncryption
80:c9:57:15:78:97:25:a8:48:46:8d:03:f9:4b:60:b7:97:62:
b5:de:21:b3:53:5b:dd:ad:7b:fc:4e:de:73:f4:43:ed:f0:12:
9b:fb:2c:7b:94:4c:4b:23:e7:dc:e5:64:e8:ff:1a:20:ba:cc:
1a:49:2d:bc:f5:b2:13:47:d0:55:28:20:07:8f:e9:90:ac:77:
ef:c3:73:18:01:ee:6a:f3:6c:54:a3:61:dd:5f:fa:5e:81:03:
b2:39:e1:62:21:88:ad:8a:88:e5:20:96:36:3c:0a:ec:73:40:
0b:5b:ba:e9:a9:7e:a5:ae:07:6b:97:17:e0:bc:13:1c:3e:eb:
71:dd:58:26:9a:93:cb:8e:5a:ba:0c:46:89:1a:4c:96:01:34:
87:a4:e9:07:f4:2b:9d:2f:1b:bd:95:32:61:de:7f:b8:ba:e0:
e8:03:34:56:f9:be:05:70:c4:62:99:a1:d5:e0:d2:96:b5:34:
92:1f:49:08:6a:b0:98:ba:5d:de:19:18:b1:66:34:2d:20:1a:
0c:ff:a9:a2:18:f1:c6:c4:d1:84:48:51:69:fa:2f:72:58:9d:
60:06:9f:a9:89:e9:69:1a:81:c9:ee:d4:59:94:cb:97:05:2f:
fb:9c:e4:c9:a9:16:60:f9:70:36:1d:66:8d:85:34:1a:58:13:
b0:2d:68:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxVSajpLbL0mtxhJ2IyPcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQzNGY4YzIwYTUwNzNlODYwODIxYzhjMDliZjc1Nzlh
MjZkMGIwHhcNMjMwMTAyMDcxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWE1YzliNjNmMjEwY2QzNWNjZjE1YmRkZmM0NTU0OGYxOTc3YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQD/kYfSsmfyAMwKHAbjXpf6xZvE
KV3GNrfH7ibw85OexLoYk7GkPetYEcSbhdXfkOdcLqtHv53MG/cVyh+MWhmvPaul
M4UwsK3TqeXKiRmaNalHYRJnrT31Y9VqgxdGVmuQmfU9z1i/Uq0hzNJ2BO8dlbs6
vzRGK9/P2jfkRPUKKzBOfyRbYSoMCePedbrZHrXIEm1lMvQf8CQ1gMmbc6iS+94V
Bp/1z/OLb0uLGvxK1/hOluqQ5sd6NDniAR/cmXAi3ssdyVuZaIWBGpxsebLFgRfF
6X7Bz05kNVrsfQ++kWhuvz18vFpdzUxoTLEUucKqSn3KV3m6j8rSGWIbtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWlybY/IQzTXM8Vvd/EVUjxl3pBMB8GA1UdIwQY
MBaAFEetNPjCClBz6GCCHIwJv3V5om0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTkt
MjU0MTNjMjYwZTQ1LzEvaGFYSnRqOGhETk5jenhXOTM4UlZTUEdYZWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTktMjU0MTNjMjYwZTQ1
LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucn0MA0G
CSqGSIb3DQEBCwUAA4IBAQCAyVcVeJclqEhGjQP5S2C3l2K13iGzU1vdrXv8Tt5z
9EPt8BKb+yx7lExLI+fc5WTo/xoguswaSS289bITR9BVKCAHj+mQrHfvw3MYAe5q
82xUo2HdX/pegQOyOeFiIYitiojlIJY2PArsc0ALW7rpqX6lrgdrlxfgvBMcPutx
3VgmmpPLjlq6DEaJGkyWATSHpOkH9CudLxu9lTJh3n+4uuDoAzRW+b4FcMRimaHV
4NKWtTSSH0kIarCYul3eGRixZjQtIBoM/6miGPHGxNGESFFp+i9yWJ1gBp+pielp
GoHJ7tRZlMuXBS/7nOTJqRZg+XA2HWaNhTQaWBOwLWha
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:10 2024 by rpki-client on console.sobornost.net