Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1Szb0xANmBA809sM_Cz8-JcSM1E.roa
File: 1Szb0xANmBA809sM_Cz8-JcSM1E.roa (raw, json)
Hash identifier: 0flABqphUStexkZ+m9yz1j2dQakqYUWfa5GVWNDeQuo=
Subject key identifier: D5:2C:DB:D3:10:0D:98:10:3C:D3:DB:0C:FC:2C:FC:F8:97:12:33:51
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018CC4923509A5C3EF1DC4DD409B0E6BF8C8
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1Szb0xANmBA809sM_Cz8-JcSM1E.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 185.52.50.0/24 maxlen: 24
185.52.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 14:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:35:09:a5:c3:ef:1d:c4:dd:40:9b:0e:6b:f8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52cdbd3100d98103cd3db0cfc2cfcf897123351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:84:3c:d9:0b:ca:bc:9d:f2:c3:58:d5:69:
7e:5c:9e:07:91:5d:42:28:6f:12:91:6c:fa:53:30:
1c:40:7e:7a:2e:b8:85:62:ac:e0:99:03:11:f3:48:
a4:90:0f:88:ee:d8:fd:39:8f:a9:2f:25:94:6f:1e:
69:31:6e:cc:05:41:23:0d:5e:a8:32:27:e5:f1:6f:
b0:06:0a:6f:d6:2c:1e:85:ea:19:72:04:06:fc:d7:
6e:a3:ae:63:a3:f1:f0:64:c5:0d:20:3e:60:f3:18:
6c:6e:4b:80:01:cd:f5:ed:2e:9f:74:b2:07:82:59:
a3:30:f0:4c:7c:ba:06:6b:7e:18:b1:2e:cb:60:b2:
28:bc:9f:3f:6e:43:c1:5c:21:23:79:7b:f1:84:fc:
6e:02:b3:e5:69:17:b9:28:11:9d:b9:1f:96:b8:54:
33:10:3b:a6:13:2f:98:41:de:fb:fc:f5:37:3d:d4:
61:48:04:84:c8:51:82:6f:65:2e:60:16:4c:cc:9d:
4e:44:63:ea:44:97:b1:a8:66:9b:0f:9b:dd:7e:57:
94:2b:5f:01:8d:ab:9b:00:76:e6:c9:77:3b:78:2e:
fa:40:58:92:79:3b:98:d9:86:83:47:63:cd:86:c1:
ad:6e:d8:42:24:13:72:9d:33:5f:44:1d:39:37:c9:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:DB:D3:10:0D:98:10:3C:D3:DB:0C:FC:2C:FC:F8:97:12:33:51
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1Szb0xANmBA809sM_Cz8-JcSM1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.50.0/23
Signature Algorithm: sha256WithRSAEncryption
71:7b:48:66:f5:6e:1b:61:66:cd:ee:c2:20:ef:db:74:c2:cd:
8b:ff:b6:19:ac:00:4c:b1:25:83:d6:05:77:be:6d:3f:83:79:
b1:e7:61:22:43:e8:dc:ec:75:9e:6f:b1:e3:63:43:81:bc:ef:
22:22:36:f1:05:3b:be:fc:00:a6:f3:c1:1a:25:fb:33:ab:de:
88:5a:8d:14:4f:7a:6f:e0:73:5a:b5:98:cc:73:36:ce:ac:90:
1b:40:f4:5f:f3:59:39:1d:b8:00:0c:10:3e:77:10:62:78:c0:
f0:4f:73:9a:32:d3:0e:96:79:7d:40:72:71:7d:97:71:76:b1:
2f:6c:32:48:73:fd:26:f3:89:22:99:57:71:14:12:0c:78:90:
7d:ef:22:25:e1:47:f2:cf:ca:69:08:18:c9:61:44:60:1c:06:
83:68:44:e1:a2:18:06:de:54:c2:eb:d6:68:08:b4:97:c1:94:
93:8a:aa:35:dd:21:eb:7a:81:4a:e0:06:ff:af:ab:5e:d8:8b:
f4:d2:2f:f2:e0:9a:1d:31:09:dc:c2:cc:5d:18:af:b5:3d:65:
28:a6:0e:e2:81:4e:b2:32:3a:f8:be:86:fd:dd:e8:fb:62:16:
6d:7a:8e:58:45:a0:9d:48:b6:c0:50:b3:d0:4b:be:0b:5f:3e:
1a:31:38:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkjUJpcPvHcTdQJsOa/jIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjQwMTAxMTAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTJjZGJkMzEwMGQ5ODEwM2NkM2RiMGNmYzJjZmNmODk3MTIzMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndOEPNkLyryd8sNY1Wl+XJ4HkV1C
KG8SkWz6UzAcQH56LriFYqzgmQMR80ikkA+I7tj9OY+pLyWUbx5pMW7MBUEjDV6o
Mifl8W+wBgpv1iweheoZcgQG/Nduo65jo/HwZMUNID5g8xhsbkuAAc317S6fdLIH
glmjMPBMfLoGa34YsS7LYLIovJ8/bkPBXCEjeXvxhPxuArPlaRe5KBGduR+WuFQz
EDumEy+YQd77/PU3PdRhSASEyFGCb2UuYBZMzJ1ORGPqRJexqGabD5vdfleUK18B
jaubAHbmyXc7eC76QFiSeTuY2YaDR2PNhsGtbthCJBNynTNfRB05N8npVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUs29MQDZgQPNPbDPws/PiXEjNRMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvMVN6YjB4QU5tQkE4MDlzTV9DejgtSmNTTTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTQyMA0G
CSqGSIb3DQEBCwUAA4IBAQBxe0hm9W4bYWbN7sIg79t0ws2L/7YZrABMsSWD1gV3
vm0/g3mx52EiQ+jc7HWeb7HjY0OBvO8iIjbxBTu+/ACm88EaJfszq96IWo0UT3pv
4HNatZjMczbOrJAbQPRf81k5HbgADBA+dxBieMDwT3OaMtMOlnl9QHJxfZdxdrEv
bDJIc/0m84kimVdxFBIMeJB97yIl4Ufyz8ppCBjJYURgHAaDaEThohgG3lTC69Zo
CLSXwZSTiqo13SHreoFK4Ab/r6te2Iv00i/y4JodMQncwsxdGK+1PWUopg7igU6y
Mjr4vob93ej7YhZteo5YRaCdSLbAULPQS74LXz4aMTi+
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:22 2024 by rpki-client on console.sobornost.net