Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/7DISm8vOA7iCjtnKR88rfOUB75w.roa
File: 7DISm8vOA7iCjtnKR88rfOUB75w.roa (raw, json)
Hash identifier: ibcvq7tDZiNsNNBKVmkNDInhiA2ZDxZXAz2O6I+B6vw=
Subject key identifier: EC:32:12:9B:CB:CE:03:B8:82:8E:D9:CA:47:CF:2B:7C:E5:01:EF:9C
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 0185720C5877E52369D7FC2348F34FF6481F
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/7DISm8vOA7iCjtnKR88rfOUB75w.roa
Signing time: Mon 02 Jan 2023 10:34:49 +0000
ROA not before: Mon 02 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205724
IP address blocks: 46.227.174.0/24 maxlen: 24
2a02:7a00:8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:58:77:e5:23:69:d7:fc:23:48:f3:4f:f6:48:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 2 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec32129bcbce03b8828ed9ca47cf2b7ce501ef9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:95:34:22:b2:f1:5c:25:ab:1b:21:4d:24:
c7:db:a4:37:32:4c:29:29:36:39:f9:86:51:63:40:
e2:b3:56:0d:08:57:fb:6f:6b:30:c8:8d:2e:f3:e3:
a3:79:76:d4:12:35:b4:ef:95:af:9c:44:4b:60:dc:
cc:de:1e:43:33:9d:5b:85:98:a9:84:90:4b:1d:f1:
60:0e:e3:73:69:a7:f1:b2:e7:89:b0:71:c3:9e:c4:
f8:8e:85:3f:8b:92:64:4e:31:62:a1:1a:27:8f:5e:
b7:30:24:52:8c:8b:3e:78:57:47:c9:40:8c:3e:5d:
fe:df:b1:df:3e:05:8b:2d:d9:4f:97:18:36:76:0b:
a1:ec:f5:59:37:5c:8e:3d:8b:e1:35:13:ad:9b:b3:
6b:68:d7:7c:21:e6:cc:20:19:4e:2e:a3:07:34:59:
82:45:62:d9:89:0d:2e:8a:41:aa:90:f2:b4:6e:38:
c4:8e:b8:b9:05:e2:ad:33:c9:1f:cb:92:80:3a:d3:
4c:08:f2:97:d7:81:36:f2:d0:5a:0c:5d:e9:60:e0:
34:64:08:91:b7:fd:31:ef:49:1a:3f:81:12:1f:50:
a1:6f:d2:10:31:a0:f7:79:02:a9:38:24:7b:af:12:
da:eb:cc:57:9c:de:99:7f:36:e5:0a:42:74:42:2f:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:12:9B:CB:CE:03:B8:82:8E:D9:CA:47:CF:2B:7C:E5:01:EF:9C
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/7DISm8vOA7iCjtnKR88rfOUB75w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.174.0/24
IPv6:
2a02:7a00:8::/48
Signature Algorithm: sha256WithRSAEncryption
60:b8:02:9f:bc:b6:c8:3e:ae:bd:35:f8:c6:2c:fa:85:d5:8d:
97:68:56:1e:67:8d:9a:f9:6a:45:fe:4a:1f:b4:04:91:20:13:
f3:6f:8f:b0:fb:86:8e:a6:c8:49:36:6f:f6:ef:5d:b5:60:64:
00:4f:6f:17:34:be:6e:3c:f1:34:f1:d4:6b:72:55:3d:a5:f0:
76:6f:e3:b6:fa:84:c1:47:d9:35:57:13:44:58:8a:18:02:1c:
23:0d:6e:57:8b:2b:da:3d:b1:88:c1:72:2c:cc:1c:db:10:c8:
37:42:bc:a7:7d:db:2d:e5:9e:0b:e3:9a:9c:a5:25:ac:00:45:
a5:0c:65:96:2c:2e:e2:cc:83:f9:cb:76:ef:de:63:0b:38:58:
cb:fc:1d:a1:05:5d:68:c8:b1:27:4a:86:7c:d8:3d:84:0d:60:
da:39:a4:55:2c:1a:6e:a8:27:26:99:69:6f:27:8e:85:15:28:
28:0a:d6:2a:ed:85:ed:30:bd:2a:91:c4:58:1a:7c:04:19:d7:
e2:97:89:9c:64:85:c3:b7:92:b1:42:8a:29:12:27:62:83:48:
69:0c:e6:3b:ea:b1:b6:70:22:0f:07:4e:64:64:ec:6f:02:f3:
c8:03:10:1f:86:ce:fc:5e:cf:57:9c:e6:a3:41:5a:d6:29:9d:
f1:e7:34:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVyDFh35SNp1/wjSPNP9kgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjMwMTAyMTAzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzMyMTI5YmNiY2UwM2I4ODI4ZWQ5Y2E0N2NmMmI3Y2U1MDFlZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhaVNCKy8VwlqxshTSTH26Q3Mkwp
KTY5+YZRY0Dis1YNCFf7b2swyI0u8+OjeXbUEjW075WvnERLYNzM3h5DM51bhZip
hJBLHfFgDuNzaafxsueJsHHDnsT4joU/i5JkTjFioRonj163MCRSjIs+eFdHyUCM
Pl3+37HfPgWLLdlPlxg2dguh7PVZN1yOPYvhNROtm7NraNd8IebMIBlOLqMHNFmC
RWLZiQ0uikGqkPK0bjjEjri5BeKtM8kfy5KAOtNMCPKX14E28tBaDF3pYOA0ZAiR
t/0x70kaP4ESH1Chb9IQMaD3eQKpOCR7rxLa68xXnN6ZfzblCkJ0Qi+G4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOwyEpvLzgO4go7ZykfPK3zlAe+cMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvN0RJU204dk9BN2lDanRuS1I4OHJmT1VCNzV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALuOuMA8E
AgACMAkDBwAqAnoAAAgwDQYJKoZIhvcNAQELBQADggEBAGC4Ap+8tsg+rr01+MYs
+oXVjZdoVh5njZr5akX+Sh+0BJEgE/Nvj7D7ho6myEk2b/bvXbVgZABPbxc0vm48
8TTx1GtyVT2l8HZv47b6hMFH2TVXE0RYihgCHCMNbleLK9o9sYjBcizMHNsQyDdC
vKd92y3lngvjmpylJawARaUMZZYsLuLMg/nLdu/eYws4WMv8HaEFXWjIsSdKhnzY
PYQNYNo5pFUsGm6oJyaZaW8njoUVKCgK1irthe0wvSqRxFgafAQZ1+KXiZxkhcO3
krFCiikSJ2KDSGkM5jvqsbZwIg8HTmRk7G8C88gDEB+Gzvxez1ec5qNBWtYpnfHn
NNQ=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:48 2024 by rpki-client on console.sobornost.net