Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/sh-_GqDx4Ry_Ukp_yopsb6FRaCI.roa
File: sh-_GqDx4Ry_Ukp_yopsb6FRaCI.roa (raw, json)
Hash identifier: tIOKFAF8FcYWvB5PfD+7jaXIExXOdHUPkbD8K/gH16U=
Subject key identifier: B2:1F:BF:1A:A0:F1:E1:1C:BF:52:4A:7F:CA:8A:6C:6F:A1:51:68:22
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01856EEFE5419A1D446202F01390041CDBF8
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/sh-_GqDx4Ry_Ukp_yopsb6FRaCI.roa
Signing time: Sun 01 Jan 2023 20:04:53 +0000
ROA not before: Sun 01 Jan 2023 20:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200854
IP address blocks: 185.93.179.0/24 maxlen: 24
185.93.178.0/24 maxlen: 24
185.93.177.0/24 maxlen: 24
185.93.176.0/22 maxlen: 22
185.93.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:e5:41:9a:1d:44:62:02:f0:13:90:04:1c:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Jan 1 20:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b21fbf1aa0f1e11cbf524a7fca8a6c6fa1516822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:4c:89:dc:c7:80:70:03:92:27:d1:1f:1f:
b0:09:a4:ff:11:9f:8a:f7:88:a9:7b:d7:14:c5:60:
bb:da:5d:3a:b9:e0:fa:43:3e:fd:89:9e:2c:0f:7d:
20:07:31:f3:17:65:20:d1:b7:01:ba:44:b2:69:da:
22:86:fb:9f:4c:49:66:4d:03:6c:64:34:6e:6e:98:
b7:1d:c4:e5:e5:bf:38:65:de:5f:42:3a:23:f2:94:
0a:7e:e6:03:7a:23:96:29:b2:f1:a5:25:38:21:2b:
10:f1:8c:9f:05:85:9c:6b:e9:b3:4d:2d:c4:50:17:
6a:55:f4:30:86:67:7a:58:8a:3a:f5:8c:f4:5e:13:
7f:f2:67:d7:d6:ad:10:5c:05:3d:bb:53:5c:f2:17:
ae:d5:eb:f5:58:1d:cb:b4:13:7b:65:7d:c6:42:08:
c0:1a:9b:4a:8e:65:9b:5a:e9:de:52:ba:75:2f:b1:
be:cf:8a:15:38:d7:dd:4b:a8:db:8d:a7:18:08:0a:
18:28:d7:69:a9:0c:50:cb:41:79:be:ba:2d:ac:5a:
15:0d:71:99:71:52:09:e2:98:f6:92:14:80:9b:58:
97:2d:c7:6d:69:0e:73:0f:2b:32:05:6a:53:91:b4:
8b:ae:c6:99:51:eb:14:46:be:6b:82:b0:e4:c6:01:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:BF:1A:A0:F1:E1:1C:BF:52:4A:7F:CA:8A:6C:6F:A1:51:68:22
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/sh-_GqDx4Ry_Ukp_yopsb6FRaCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.176.0/22
Signature Algorithm: sha256WithRSAEncryption
71:fd:65:cc:c8:31:30:55:38:bb:28:1c:9a:00:86:04:29:78:
c2:22:b0:16:26:b1:dc:5e:f8:40:a3:ab:5b:8f:6e:c6:ee:7d:
0e:d4:2c:18:51:ed:ed:01:1f:51:31:7a:65:80:e9:f6:b6:fc:
4f:e5:31:e6:33:bf:26:57:90:19:b3:ac:25:d8:63:7b:0c:65:
2c:50:3b:f2:c0:73:71:7f:fb:b8:65:b3:09:45:e8:30:28:b8:
8f:db:5e:b9:82:dd:0a:4e:a7:81:0e:6f:6f:90:27:7f:44:ef:
7c:0c:57:7d:3d:2c:6d:6a:5d:d2:43:f6:26:ad:32:fd:06:30:
b3:ff:3a:e0:fa:3c:51:db:a1:31:1b:98:7c:ae:8e:5a:a0:da:
1f:ee:61:7c:74:4a:54:b1:b9:0e:c9:e0:df:10:c3:06:64:05:
03:0a:04:96:17:60:f7:74:57:c0:dd:da:ad:12:fd:9a:c8:7d:
18:27:7a:27:86:b7:4d:83:e8:4c:f1:91:e0:d6:ba:3d:c7:83:
cc:79:f1:de:78:0f:f6:c2:06:c1:98:1f:83:7e:24:a3:21:8c:
df:7d:8c:45:0f:52:a0:96:4e:b2:7a:09:78:36:37:27:31:1e:
f1:85:82:fd:91:18:a4:4e:f1:03:c6:d1:db:40:30:4c:80:30:
02:87:c8:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu7+VBmh1EYgLwE5AEHNv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjMwMTAxMjAwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjFmYmYxYWEwZjFlMTFjYmY1MjRhN2ZjYThhNmM2ZmExNTE2ODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHpMidzHgHADkifRHx+wCaT/EZ+K
94ipe9cUxWC72l06ueD6Qz79iZ4sD30gBzHzF2Ug0bcBukSyadoihvufTElmTQNs
ZDRubpi3HcTl5b84Zd5fQjoj8pQKfuYDeiOWKbLxpSU4ISsQ8YyfBYWca+mzTS3E
UBdqVfQwhmd6WIo69Yz0XhN/8mfX1q0QXAU9u1Nc8heu1ev1WB3LtBN7ZX3GQgjA
GptKjmWbWuneUrp1L7G+z4oVONfdS6jbjacYCAoYKNdpqQxQy0F5vrotrFoVDXGZ
cVIJ4pj2khSAm1iXLcdtaQ5zDysyBWpTkbSLrsaZUesURr5rgrDkxgGkMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIfvxqg8eEcv1JKf8qKbG+hUWgiMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvc2gtX0dxRHg0UnlfVWtwX3lvcHNiNkZSYUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV2wMA0G
CSqGSIb3DQEBCwUAA4IBAQBx/WXMyDEwVTi7KByaAIYEKXjCIrAWJrHcXvhAo6tb
j27G7n0O1CwYUe3tAR9RMXplgOn2tvxP5THmM78mV5AZs6wl2GN7DGUsUDvywHNx
f/u4ZbMJRegwKLiP2165gt0KTqeBDm9vkCd/RO98DFd9PSxtal3SQ/YmrTL9BjCz
/zrg+jxR26ExG5h8ro5aoNof7mF8dEpUsbkOyeDfEMMGZAUDCgSWF2D3dFfA3dqt
Ev2ayH0YJ3onhrdNg+hM8ZHg1ro9x4PMefHeeA/2wgbBmB+DfiSjIYzffYxFD1Kg
lk6yegl4NjcnMR7xhYL9kRikTvEDxtHbQDBMgDACh8j/
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:10 2024 by rpki-client on console.sobornost.net