Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/4W2kdRec7g9Tzer9uDtk-h2oNdU.roa
File: 4W2kdRec7g9Tzer9uDtk-h2oNdU.roa (raw, json)
Hash identifier: /t4JKWYQvO9mw89Rxs9Lrzt03A3sAJkXhkbNbXrwy/g=
Subject key identifier: E1:6D:A4:75:17:9C:EE:0F:53:CD:EA:FD:B8:3B:64:FA:1D:A8:35:D5
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 0185A6BBCFA35AC6D716304C19A5DDB95BA8
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/4W2kdRec7g9Tzer9uDtk-h2oNdU.roa
Signing time: Thu 12 Jan 2023 16:06:44 +0000
ROA not before: Thu 12 Jan 2023 16:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.207.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:bb:cf:a3:5a:c6:d7:16:30:4c:19:a5:dd:b9:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jan 12 16:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16da475179cee0f53cdeafdb83b64fa1da835d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:19:dc:21:31:5d:0c:da:06:a2:cd:00:16:
3f:78:d9:db:f9:52:f4:44:25:51:94:21:04:f6:78:
3e:d1:ba:09:18:1c:c8:40:99:37:2d:75:db:86:ac:
69:0d:52:2c:ba:d9:7d:19:a1:6d:f9:c3:a4:5f:3d:
e5:79:b2:98:0a:99:06:6d:0c:5f:68:db:85:c9:1d:
0c:e1:36:c3:a6:ca:b5:86:4e:51:97:db:62:5f:bd:
2d:44:23:c6:a5:f9:a6:33:fe:4a:95:1e:1b:84:05:
a1:95:7b:c7:93:29:34:d9:90:c0:05:51:9d:b6:79:
b9:b6:46:ee:69:f8:9b:a3:de:bf:7e:0f:f7:20:0e:
87:4e:67:82:5c:9e:19:02:af:b6:e3:cc:f0:21:1f:
e5:50:fc:d9:6a:cb:07:30:7a:6b:7a:62:b7:44:c4:
45:44:63:1a:b1:be:77:bb:6d:82:c0:cf:6b:0e:87:
24:ee:a7:53:83:79:9d:a6:6d:63:f2:b7:5a:12:db:
c0:63:9c:33:8c:ff:e2:d9:6f:f9:0e:31:bf:be:a7:
93:21:2c:b5:e7:5a:31:fb:f8:16:e5:71:16:7d:7c:
7b:f0:b9:d2:77:bf:a0:33:9d:ad:32:0b:26:ea:19:
8c:87:24:64:cf:83:89:b8:db:bb:49:ff:9c:ce:1f:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:A4:75:17:9C:EE:0F:53:CD:EA:FD:B8:3B:64:FA:1D:A8:35:D5
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/4W2kdRec7g9Tzer9uDtk-h2oNdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ca:10:23:bb:e0:bf:fb:60:a7:e2:8b:a3:ad:3f:13:6f:eb:
08:f6:e7:33:a7:54:c3:44:23:3c:85:92:72:63:24:04:eb:2a:
ed:e0:d1:0f:11:49:a3:57:3d:f1:f8:a7:cb:60:fe:ef:7e:b8:
87:90:74:ff:1f:9d:bb:1b:00:6c:27:b1:4e:96:8f:9e:03:ee:
f9:81:a9:a8:73:7c:9c:b2:95:dd:36:df:dc:f2:b8:eb:0a:cc:
ae:48:86:f7:21:e0:78:44:d9:b6:33:77:6d:59:9d:f8:f4:ae:
d5:39:1b:27:00:2b:04:7c:6a:83:02:97:a4:98:0d:43:36:b6:
10:5a:d9:09:b2:e0:66:a9:7a:89:dd:c6:86:0a:ba:29:ef:f0:
80:86:cd:4d:ee:55:7c:03:d4:18:16:3a:54:e7:59:e5:87:ee:
d2:e3:3b:5c:7e:7c:53:25:58:c2:0a:a4:04:0c:46:f4:33:5b:
34:5f:b6:df:dc:72:d0:b7:f3:6e:c5:ad:d6:86:2a:46:c4:08:
ae:72:4c:04:88:22:ed:69:08:a1:18:76:f1:7f:43:87:6d:f6:
dc:df:86:42:d9:d0:9a:ba:2d:86:6b:db:c3:3d:fa:be:38:d9:
78:45:0b:a6:ac:3e:bf:fc:ff:7c:b0:33:18:63:ae:a4:a5:5c:
94:a6:11:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWmu8+jWsbXFjBMGaXduVuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjMwMTEyMTYwNjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZkYTQ3NTE3OWNlZTBmNTNjZGVhZmRiODNiNjRmYTFkYTgzNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx8Z3CExXQzaBqLNABY/eNnb+VL0
RCVRlCEE9ng+0boJGBzIQJk3LXXbhqxpDVIsutl9GaFt+cOkXz3lebKYCpkGbQxf
aNuFyR0M4TbDpsq1hk5Rl9tiX70tRCPGpfmmM/5KlR4bhAWhlXvHkyk02ZDABVGd
tnm5tkbuafibo96/fg/3IA6HTmeCXJ4ZAq+248zwIR/lUPzZassHMHpremK3RMRF
RGMasb53u22CwM9rDock7qdTg3mdpm1j8rdaEtvAY5wzjP/i2W/5DjG/vqeTISy1
51ox+/gW5XEWfXx78LnSd7+gM52tMgsm6hmMhyRkz4OJuNu7Sf+czh9RuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFtpHUXnO4PU83q/bg7ZPodqDXVMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvNFcya2RSZWM3ZzlUemVyOXVEdGstaDJvTmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc+HMA0G
CSqGSIb3DQEBCwUAA4IBAQAgyhAju+C/+2Cn4oujrT8Tb+sI9uczp1TDRCM8hZJy
YyQE6yrt4NEPEUmjVz3x+KfLYP7vfriHkHT/H527GwBsJ7FOlo+eA+75gamoc3yc
spXdNt/c8rjrCsyuSIb3IeB4RNm2M3dtWZ349K7VORsnACsEfGqDApekmA1DNrYQ
WtkJsuBmqXqJ3caGCrop7/CAhs1N7lV8A9QYFjpU51nlh+7S4ztcfnxTJVjCCqQE
DEb0M1s0X7bf3HLQt/Nuxa3WhipGxAiuckwEiCLtaQihGHbxf0OHbfbc34ZC2dCa
ui2Ga9vDPfq+ONl4RQumrD6//P98sDMYY66kpVyUphHv
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net