Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/HovDMBkqBHrOS-6_zpLilbqoYNw.roa
File: HovDMBkqBHrOS-6_zpLilbqoYNw.roa (raw, json)
Hash identifier: Bl5cswY8UM4yY5SjcVABrfwzYP5IFZ3BHyyk01MU45A=
Subject key identifier: 1E:8B:C3:30:19:2A:04:7A:CE:4B:EE:BF:CE:92:E2:95:BA:A8:60:DC
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 018571D7C5C14E5CB8FCE8E41076C899A858
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/HovDMBkqBHrOS-6_zpLilbqoYNw.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49127
IP address blocks: 185.85.208.0/22 maxlen: 24
2a0d:9c80::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c5:c1:4e:5c:b8:fc:e8:e4:10:76:c8:99:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e8bc330192a047ace4beebfce92e295baa860dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:ff:a9:b6:b2:9f:cb:b1:82:f5:b7:6c:3c:
4a:a2:74:40:9c:c6:57:a0:67:db:2d:10:ac:30:89:
8f:da:79:f3:77:fa:2f:f6:7c:5b:45:48:55:56:50:
4b:6c:ae:5d:d3:c3:df:80:b4:31:b4:83:8f:3a:c7:
2c:63:f1:b5:51:83:29:74:36:5e:1f:92:71:59:2f:
c7:94:99:1d:d0:b4:14:8d:f9:29:68:b5:9b:35:65:
38:45:11:13:f5:bc:64:f6:d7:05:26:5d:1d:5e:be:
b6:29:5a:ee:50:ac:d6:6b:f0:5f:e5:b1:ee:bf:e4:
f8:1e:dd:e4:31:c5:d6:a7:22:79:ec:d2:9a:77:9b:
18:89:98:09:08:0b:26:0a:1e:2e:b1:98:4f:20:45:
e2:6d:6c:9f:23:50:f5:26:4d:02:32:c1:64:29:38:
23:3b:3f:ca:b7:ca:ea:71:c6:52:e3:51:16:d2:cb:
78:ee:d9:a1:89:d6:3e:c2:d6:8f:37:48:86:42:8e:
73:42:6a:2c:8e:88:43:36:04:d4:56:58:9b:b4:8c:
f8:c4:e2:cb:bd:4f:45:68:15:42:ee:8d:44:7b:75:
95:7e:cc:16:9f:63:39:bd:50:0a:79:99:ac:6f:b8:
76:4f:19:42:1b:8a:78:5c:d7:03:9d:78:e7:80:c2:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:C3:30:19:2A:04:7A:CE:4B:EE:BF:CE:92:E2:95:BA:A8:60:DC
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/HovDMBkqBHrOS-6_zpLilbqoYNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.208.0/22
IPv6:
2a0d:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
60:b1:56:ed:c2:8d:63:ed:bc:87:3c:78:fd:38:5b:29:cf:29:
7d:34:91:69:bd:ca:1a:6a:d4:2d:a0:c9:f7:16:82:0a:1c:77:
0e:4a:b8:55:c2:3d:e6:1a:3a:43:08:ee:57:67:1d:0f:19:0a:
73:bd:6d:95:25:10:d3:54:4b:fc:91:2b:c9:c1:6f:a8:f7:27:
eb:2d:d5:e8:ea:55:33:e5:9b:fd:0e:49:4f:31:f5:39:1b:51:
30:15:1c:6c:cc:40:00:1a:d9:77:d3:12:51:e7:26:9d:ba:73:
8a:f2:b9:f0:1d:5c:4f:79:2d:01:6c:90:d6:00:ce:ac:43:4b:
f2:05:d9:58:3c:cb:ea:9b:ea:f0:dd:84:db:fb:4f:ec:c1:91:
56:09:99:54:c9:66:0b:a2:60:da:b2:ae:f0:9f:bf:16:8b:aa:
df:11:27:d4:3d:43:83:31:a3:93:d8:14:83:72:65:8a:ae:08:
18:bb:ee:c2:6b:09:55:e8:7a:3d:fb:7b:10:8e:ad:fb:48:25:
5a:05:ff:aa:5f:01:22:61:a9:1a:0c:f7:12:23:46:60:d6:86:
68:09:97:2d:cb:f8:86:75:f7:8b:8c:17:34:74:40:0b:ea:ee:
b4:59:38:fc:79:bf:26:ff:8b:2e:4c:96:64:d9:c4:ae:1e:cd:
79:8e:eb:80
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVx18XBTly4/OjkEHbImahYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj
ZWYyMGQwHhcNMjMwMTAyMDkzNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZThiYzMzMDE5MmEwNDdhY2U0YmVlYmZjZTkyZTI5NWJhYTg2MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPf/qbayn8uxgvW3bDxKonRAnMZX
oGfbLRCsMImP2nnzd/ov9nxbRUhVVlBLbK5d08PfgLQxtIOPOscsY/G1UYMpdDZe
H5JxWS/HlJkd0LQUjfkpaLWbNWU4RRET9bxk9tcFJl0dXr62KVruUKzWa/Bf5bHu
v+T4Ht3kMcXWpyJ57NKad5sYiZgJCAsmCh4usZhPIEXibWyfI1D1Jk0CMsFkKTgj
Oz/Kt8rqccZS41EW0st47tmhidY+wtaPN0iGQo5zQmosjohDNgTUVlibtIz4xOLL
vU9FaBVC7o1Ee3WVfswWn2M5vVAKeZmsb7h2TxlCG4p4XNcDnXjngMJ0yQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB6LwzAZKgR6zkvuv86S4pW6qGDcMB8GA1UdIwQY
MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt
OWU5MWZjYTc4ZjQ3LzEvSG92RE1Ca3FCSHJPUy02X3pwTGlsYnFvWU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3
LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVXQMA0E
AgACMAcDBQMqDZyAMA0GCSqGSIb3DQEBCwUAA4IBAQBgsVbtwo1j7byHPHj9OFsp
zyl9NJFpvcoaatQtoMn3FoIKHHcOSrhVwj3mGjpDCO5XZx0PGQpzvW2VJRDTVEv8
kSvJwW+o9yfrLdXo6lUz5Zv9DklPMfU5G1EwFRxszEAAGtl30xJR5yadunOK8rnw
HVxPeS0BbJDWAM6sQ0vyBdlYPMvqm+rw3YTb+0/swZFWCZlUyWYLomDasq7wn78W
i6rfESfUPUODMaOT2BSDcmWKrggYu+7CawlV6Ho9+3sQjq37SCVaBf+qXwEiYaka
DPcSI0Zg1oZoCZcty/iGdfeLjBc0dEAL6u60WTj8eb8m/4suTJZk2cSuHs15juuA
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:43 2024 by rpki-client on console.sobornost.net