Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/mow51nj5H1IBYlt6MMYJrF3DAG4.roa
File: mow51nj5H1IBYlt6MMYJrF3DAG4.roa (raw, json)
Hash identifier: aU0MDcbGO3bmmDh27yxRvYNRYgHq3rfN4SA4avoUfgA=
Subject key identifier: 9A:8C:39:D6:78:F9:1F:52:01:62:5B:7A:30:C6:09:AC:5D:C3:00:6E
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 01856FF979C5EE26900AD79838E6CAE8876C
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/mow51nj5H1IBYlt6MMYJrF3DAG4.roa
Signing time: Mon 02 Jan 2023 00:54:58 +0000
ROA not before: Mon 02 Jan 2023 00:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208059
IP address blocks: 46.149.109.0/24 maxlen: 24
2a10:200::/36 maxlen: 48
2a10:200:affe::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:79:c5:ee:26:90:0a:d7:98:38:e6:ca:e8:87:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Jan 2 00:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a8c39d678f91f5201625b7a30c609ac5dc3006e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:76:44:7b:50:cc:7e:42:ee:1f:3e:e0:26:
bb:1f:89:72:50:f8:ef:fb:57:23:bd:e4:d8:92:09:
ef:b7:cf:ed:1c:37:6c:3d:c1:1e:2f:7f:71:62:76:
06:06:33:6a:d6:4d:64:56:f8:52:97:cb:9d:61:7e:
0d:78:04:15:96:1a:e3:94:a4:98:82:c6:57:d0:c4:
62:72:af:fd:13:f7:b5:ab:0a:0b:47:b1:44:3a:ae:
a5:58:e7:a9:d7:77:9c:93:a9:98:7f:23:0a:66:68:
ff:24:27:26:ca:fc:36:f8:01:3e:fd:c2:a0:b3:75:
3c:21:bb:0b:f9:98:0b:55:91:cf:2a:60:8f:aa:66:
23:80:42:a1:e5:f7:4e:36:c1:74:98:3c:ea:ec:50:
ac:d9:05:3c:f8:be:7a:30:a5:42:f6:ed:25:0d:3a:
7b:59:c7:df:6d:14:64:a9:fc:32:0f:cb:a7:e4:74:
51:25:e9:7b:67:07:43:55:de:4d:f3:57:a5:8b:3d:
60:c0:da:4b:67:31:eb:60:c9:a4:1c:94:d5:5d:1d:
86:e4:30:d2:d0:59:be:7b:c4:23:f0:0f:0c:d7:e0:
d5:cd:36:59:c6:87:b2:bf:c0:5e:a8:9f:35:d8:27:
6a:f1:6f:ef:f1:2d:2c:41:4a:a4:10:a0:4f:42:0d:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:39:D6:78:F9:1F:52:01:62:5B:7A:30:C6:09:AC:5D:C3:00:6E
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/mow51nj5H1IBYlt6MMYJrF3DAG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.109.0/24
IPv6:
2a10:200::/36
2a10:200:affe::/48
Signature Algorithm: sha256WithRSAEncryption
02:d1:7a:71:0f:b4:16:72:b8:52:f2:0a:49:ba:17:e9:b1:e8:
78:9a:77:99:6c:6c:73:f5:c3:3b:8f:17:9e:33:80:99:fc:40:
e1:43:e0:9f:83:92:52:f1:2a:31:2c:4d:7e:07:54:28:17:4c:
ac:96:f3:ac:32:75:15:c1:5c:6d:d6:14:41:db:19:a2:e3:7f:
3f:5f:e5:8b:10:d7:42:63:40:57:e1:65:da:70:81:ac:a3:08:
56:04:4c:b2:b0:33:c5:fc:2a:2d:20:10:72:e2:8c:4c:d5:5d:
21:be:34:6d:94:6a:e2:eb:ad:06:86:f7:f5:f0:44:5b:31:e4:
13:4e:e7:b8:d9:25:45:f9:6a:34:09:3a:22:d2:7f:d0:de:12:
26:99:c3:37:8b:11:05:a9:d1:41:48:b2:65:43:8d:52:b7:2a:
e1:22:86:03:73:0c:9d:a6:08:60:33:d8:ec:fb:eb:18:24:37:
c0:a2:39:ca:d2:45:ad:62:41:d2:50:95:fb:06:55:ac:07:6e:
cb:47:67:c4:e4:27:b0:61:34:70:f1:75:57:4d:f3:90:7b:7a:
eb:8c:45:9b:a8:07:9d:f2:76:6e:21:5e:9b:c4:4a:60:8d:8b:
fc:29:00:f8:42:41:f3:b6:aa:b9:1c:60:57:5c:8a:9a:c9:5b:
36:42:0e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVv+XnF7iaQCteYOObK6IdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh
MzViYWIwHhcNMjMwMTAyMDA1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YThjMzlkNjc4ZjkxZjUyMDE2MjViN2EzMGM2MDlhYzVkYzMwMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiZ2RHtQzH5C7h8+4Ca7H4lyUPjv
+1cjveTYkgnvt8/tHDdsPcEeL39xYnYGBjNq1k1kVvhSl8udYX4NeAQVlhrjlKSY
gsZX0MRicq/9E/e1qwoLR7FEOq6lWOep13eck6mYfyMKZmj/JCcmyvw2+AE+/cKg
s3U8IbsL+ZgLVZHPKmCPqmYjgEKh5fdONsF0mDzq7FCs2QU8+L56MKVC9u0lDTp7
WcffbRRkqfwyD8un5HRRJel7ZwdDVd5N81eliz1gwNpLZzHrYMmkHJTVXR2G5DDS
0Fm+e8Qj8A8M1+DVzTZZxoeyv8BeqJ812Cdq8W/v8S0sQUqkEKBPQg1siwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqMOdZ4+R9SAWJbejDGCaxdwwBuMB8GA1UdIwQY
MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It
NDk1MDFhNzY5NGM0LzEvbW93NTFuajVIMUlCWWx0Nk1NWUpyRjNEQUc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0
LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQALpVtMBcE
AgACMBEDBgQqEAIAAAMHACoQAgCv/jANBgkqhkiG9w0BAQsFAAOCAQEAAtF6cQ+0
FnK4UvIKSboX6bHoeJp3mWxsc/XDO48XnjOAmfxA4UPgn4OSUvEqMSxNfgdUKBdM
rJbzrDJ1FcFcbdYUQdsZouN/P1/lixDXQmNAV+Fl2nCBrKMIVgRMsrAzxfwqLSAQ
cuKMTNVdIb40bZRq4uutBob39fBEWzHkE07nuNklRflqNAk6ItJ/0N4SJpnDN4sR
BanRQUiyZUONUrcq4SKGA3MMnaYIYDPY7PvrGCQ3wKI5ytJFrWJB0lCV+wZVrAdu
y0dnxOQnsGE0cPF1V03zkHt664xFm6gHnfJ2biFem8RKYI2L/CkA+EJB87aquRxg
V1yKmslbNkIOuQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:41 2024 by rpki-client on console.sobornost.net