Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/LDeEpU4RF6MZqWIqPBFx3tWYKUA.roa
File: LDeEpU4RF6MZqWIqPBFx3tWYKUA.roa (raw, json)
Hash identifier: BuLkv59smoecTnHggkiucBGkCq1hugYf99+HFs2aKEQ=
Subject key identifier: 2C:37:84:A5:4E:11:17:A3:19:A9:62:2A:3C:11:71:DE:D5:98:29:40
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 01856D4AC94E59DD41C6E5C5165AE05382D6
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/LDeEpU4RF6MZqWIqPBFx3tWYKUA.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213362
IP address blocks: 185.163.49.0/24 maxlen: 24
2a10:5100::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c9:4e:59:dd:41:c6:e5:c5:16:5a:e0:53:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c3784a54e1117a319a9622a3c1171ded5982940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:ec:43:54:bc:de:b7:e2:ae:68:1f:fd:11:
13:7d:35:bb:6a:8d:ad:3e:a3:76:9e:50:04:f0:f1:
e8:de:c7:b1:3a:5d:6a:df:dd:08:1d:a3:54:43:82:
38:7c:b1:4d:65:71:08:5c:90:06:a6:83:4f:02:bb:
5c:e9:fe:24:25:e0:d8:a8:d0:de:e1:b7:c1:35:2c:
cc:68:88:20:f9:4d:ad:ad:11:d4:bc:47:61:98:46:
42:3a:e3:b3:36:21:8d:d0:d1:bc:c4:7f:22:ab:b5:
87:10:83:4e:5c:51:a9:d9:d3:d5:27:96:fa:3d:38:
f1:e3:dd:3a:07:33:90:11:d4:56:43:91:d8:7e:fb:
cd:a0:22:d2:4e:f2:3c:7f:37:d1:7c:79:30:ae:b4:
b1:e5:6e:c2:6b:30:57:1a:fa:9e:4c:01:4d:53:4f:
db:c3:bd:2b:3d:38:6e:2d:35:df:f5:5b:89:e6:0b:
2e:b5:00:79:9c:71:99:d3:4d:c6:13:5a:34:98:f5:
a3:e7:e8:71:c9:9c:eb:e2:f5:83:4a:67:ff:3e:21:
80:ee:2a:1a:76:89:41:f2:12:3d:5f:6a:d7:fe:b7:
e1:84:e9:c8:42:37:96:2e:45:c0:d3:8f:56:5a:5c:
8c:03:62:44:35:df:26:c2:b4:43:22:3b:47:ae:d1:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:84:A5:4E:11:17:A3:19:A9:62:2A:3C:11:71:DE:D5:98:29:40
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/LDeEpU4RF6MZqWIqPBFx3tWYKUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.49.0/24
IPv6:
2a10:5100::/29
Signature Algorithm: sha256WithRSAEncryption
67:db:90:05:23:74:fc:1a:07:5b:00:29:94:98:fa:98:85:e7:
38:cc:8d:82:49:03:ae:92:96:20:ef:b6:9b:4a:0a:b8:17:16:
20:50:4f:f4:39:86:a5:d2:e2:00:4f:af:c4:80:74:b9:e9:96:
67:07:41:b2:a8:fc:3b:2b:7e:fd:d4:52:81:57:0e:e0:75:b7:
8b:c1:41:bf:7f:d9:2a:b6:1d:a1:84:9f:e9:94:01:c7:26:80:
49:e3:26:bc:70:48:9d:8f:3d:62:d9:7f:1c:db:c6:61:9c:86:
e3:87:e1:af:a9:bb:06:ad:e6:1d:f3:09:98:32:f4:ba:d2:da:
18:42:a7:75:4a:65:c5:e7:16:91:8f:9f:b0:78:00:84:01:83:
ec:4d:61:e3:2c:01:64:ea:5a:05:0d:48:30:0e:25:53:6b:dd:
d2:67:8e:e1:9f:c4:73:e5:c9:1a:b7:5c:76:51:3f:38:1b:0a:
05:2f:0f:df:dc:a4:62:bf:29:1a:7b:a7:23:37:d5:db:7d:78:
28:12:f8:f2:7c:96:69:26:ad:90:a0:59:b8:2b:b0:73:4d:1c:
01:66:b0:61:5a:c0:2d:b2:c2:f4:3b:1d:97:9c:db:3c:46:68:
ac:34:7c:64:9c:47:88:62:f4:17:9c:3d:ae:68:f3:18:fb:26:
fb:bc:a9:c4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtSslOWd1BxuXFFlrgU4LWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5
NDg5M2YwHhcNMjMwMTAxMTIyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzM3ODRhNTRlMTExN2EzMTlhOTYyMmEzYzExNzFkZWQ1OTgyOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTrsQ1S83rfirmgf/RETfTW7ao2t
PqN2nlAE8PHo3sexOl1q390IHaNUQ4I4fLFNZXEIXJAGpoNPArtc6f4kJeDYqNDe
4bfBNSzMaIgg+U2trRHUvEdhmEZCOuOzNiGN0NG8xH8iq7WHEINOXFGp2dPVJ5b6
PTjx4906BzOQEdRWQ5HYfvvNoCLSTvI8fzfRfHkwrrSx5W7CazBXGvqeTAFNU0/b
w70rPThuLTXf9VuJ5gsutQB5nHGZ003GE1o0mPWj5+hxyZzr4vWDSmf/PiGA7ioa
dolB8hI9X2rX/rfhhOnIQjeWLkXA049WWlyMA2JENd8mwrRDIjtHrtHcrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCw3hKVOERejGaliKjwRcd7VmClAMB8GA1UdIwQY
MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt
YmUyYjNlYWI0ZDc0LzEvTERlRXBVNFJGNk1acVdJcVBCRngzdFdZS1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0
LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuaMxMA0E
AgACMAcDBQMqEFEAMA0GCSqGSIb3DQEBCwUAA4IBAQBn25AFI3T8GgdbACmUmPqY
hec4zI2CSQOukpYg77abSgq4FxYgUE/0OYal0uIAT6/EgHS56ZZnB0GyqPw7K379
1FKBVw7gdbeLwUG/f9kqth2hhJ/plAHHJoBJ4ya8cEidjz1i2X8c28ZhnIbjh+Gv
qbsGreYd8wmYMvS60toYQqd1SmXF5xaRj5+weACEAYPsTWHjLAFk6loFDUgwDiVT
a93SZ47hn8Rz5ckat1x2UT84GwoFLw/f3KRivykae6cjN9XbfXgoEvjyfJZpJq2Q
oFm4K7BzTRwBZrBhWsAtssL0Ox2XnNs8RmisNHxknEeIYvQXnD2uaPMY+yb7vKnE
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:53 2024 by rpki-client on console.sobornost.net