Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/c8ZxXckKO8DJwrvoEP6AF-deB4w.roa
File: c8ZxXckKO8DJwrvoEP6AF-deB4w.roa (raw, json)
Hash identifier: tNjE39z6+0+nC6Ne+HVuffBcbt569ZckfymnNKYPBEQ=
Subject key identifier: 73:C6:71:5D:C9:0A:3B:C0:C9:C2:BB:E8:10:FE:80:17:E7:5E:07:8C
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CB4BA01D78D185BF1BFDBF8CDA95CDB7B
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/c8ZxXckKO8DJwrvoEP6AF-deB4w.roa
Signing time: Fri 29 Dec 2023 08:38:58 +0000
ROA not before: Fri 29 Dec 2023 08:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210611
IP address blocks: 46.31.183.0/24 maxlen: 24
185.91.140.0/24 maxlen: 24
2a00:df80:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:ba:01:d7:8d:18:5b:f1:bf:db:f8:cd:a9:5c:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Dec 29 08:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c6715dc90a3bc0c9c2bbe810fe8017e75e078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:6e:80:76:3d:c7:2a:9c:6f:8e:f2:84:57:
c4:a5:64:ff:5e:dd:4f:46:d5:bc:77:c9:e2:d1:1e:
32:eb:ce:66:f7:52:c7:3c:a5:5f:99:db:8a:a7:b6:
35:b5:48:c2:01:9d:cd:a8:13:e3:4a:b2:b0:69:2e:
e6:e2:b4:a0:bd:2e:9f:ca:d9:5b:95:2c:7a:06:77:
86:23:c6:5f:57:85:8f:47:8e:1d:6d:83:de:f3:1e:
6d:eb:2c:93:53:2d:08:0a:c7:a5:e5:a1:c5:ea:0d:
0f:30:8a:f5:e8:04:b2:99:63:d3:07:a1:e6:2a:06:
e6:b0:91:31:f4:98:af:8f:ef:c6:e7:06:b5:f0:04:
a2:b6:95:e6:cc:90:c3:99:89:12:9c:d1:21:79:8c:
96:e2:db:99:d6:16:5c:6b:2d:a1:38:33:74:22:e4:
a2:1f:ba:15:15:4a:b6:c3:23:a6:85:ab:dc:ae:e6:
c8:32:26:98:9d:c2:94:53:2c:d9:1e:e0:46:70:f7:
da:fd:35:12:3a:f1:ec:8d:d5:23:13:15:b9:f9:81:
6a:c1:12:0a:cb:19:44:66:e2:35:45:69:62:77:9e:
49:30:03:3c:16:43:c3:57:f8:46:fc:4a:fc:ed:2c:
bc:72:c1:aa:cf:28:a3:7e:13:03:f8:ea:31:72:a3:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:71:5D:C9:0A:3B:C0:C9:C2:BB:E8:10:FE:80:17:E7:5E:07:8C
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/c8ZxXckKO8DJwrvoEP6AF-deB4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.183.0/24
185.91.140.0/24
IPv6:
2a00:df80:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
03:89:24:01:21:b5:22:3b:e4:01:19:b3:3d:c6:e3:75:0e:76:
ba:81:19:ce:71:24:69:b6:dc:89:09:69:5e:5b:af:45:c7:3d:
62:e0:b2:ac:29:be:c9:20:e5:44:1b:2b:54:4f:b8:a3:15:0a:
ce:f9:86:3a:a1:64:e9:b3:bf:e5:fd:e8:28:77:ac:af:bf:2e:
14:a8:6e:45:d4:76:ce:61:f2:74:f9:50:ba:07:19:14:02:cf:
9e:11:51:e5:06:ba:68:9f:22:8f:90:11:74:72:fc:d5:28:6d:
99:9a:d3:57:9c:a7:60:81:aa:85:33:e7:38:ce:11:be:0b:9a:
5a:43:d5:85:f9:4a:61:d5:8b:d0:51:75:99:08:1e:a8:2f:5b:
64:bf:bc:cd:4b:ab:ab:f8:a7:df:e2:51:45:ce:a3:51:2c:8e:
5f:52:e0:52:d1:0a:ea:78:6f:46:b8:d5:1e:99:2b:99:57:9f:
06:c2:8a:d7:1c:27:0e:56:27:92:a6:c3:9e:c7:11:52:3e:c2:
5f:ef:20:24:1d:44:b7:e0:ec:c2:09:ea:2b:6d:97:fd:cd:de:
8f:1a:b5:2a:bc:c0:0f:68:bf:d7:c3:c0:e0:ef:3b:c9:0e:8b:
cd:f6:2b:d3:e3:15:b1:c0:04:cf:59:0a:d1:04:47:65:2e:08:
c8:95:7a:c5
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYy0ugHXjRhb8b/b+M2pXNt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi
YmZmMjAwHhcNMjMxMjI5MDgzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2M2NzE1ZGM5MGEzYmMwYzljMmJiZTgxMGZlODAxN2U3NWUwNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVugHY9xyqcb47yhFfEpWT/Xt1P
RtW8d8ni0R4y685m91LHPKVfmduKp7Y1tUjCAZ3NqBPjSrKwaS7m4rSgvS6fytlb
lSx6BneGI8ZfV4WPR44dbYPe8x5t6yyTUy0ICsel5aHF6g0PMIr16ASymWPTB6Hm
KgbmsJEx9Jivj+/G5wa18ASitpXmzJDDmYkSnNEheYyW4tuZ1hZcay2hODN0IuSi
H7oVFUq2wyOmhavcrubIMiaYncKUUyzZHuBGcPfa/TUSOvHsjdUjExW5+YFqwRIK
yxlEZuI1RWlid55JMAM8FkPDV/hG/Er87Sy8csGqzyijfhMD+OoxcqNO9QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHPGcV3JCjvAycK76BD+gBfnXgeMMB8GA1UdIwQY
MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt
OGQ4MWZkYzZmMTcwLzEvYzhaeFhja0tPOERKd3J2b0VQNkFGLWRlQjR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw
LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALh+3AwQA
uVuMMA8EAgACMAkDBwAqAN+A//8wDQYJKoZIhvcNAQELBQADggEBAAOJJAEhtSI7
5AEZsz3G43UOdrqBGc5xJGm23IkJaV5br0XHPWLgsqwpvskg5UQbK1RPuKMVCs75
hjqhZOmzv+X96Ch3rK+/LhSobkXUds5h8nT5ULoHGRQCz54RUeUGumifIo+QEXRy
/NUobZma01ecp2CBqoUz5zjOEb4LmlpD1YX5SmHVi9BRdZkIHqgvW2S/vM1Lq6v4
p9/iUUXOo1Esjl9S4FLRCup4b0a41R6ZK5lXnwbCitccJw5WJ5Kmw57HEVI+wl/v
ICQdRLfg7MIJ6ittl/3N3o8atSq8wA9ov9fDwODvO8kOi832K9PjFbHABM9ZCtEE
R2UuCMiVesU=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:20 2024 by rpki-client on console.sobornost.net