Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/eRCqDjnXWdt-mwxCbuQ7jJyAffQ.roa
File: eRCqDjnXWdt-mwxCbuQ7jJyAffQ.roa (raw, json)
Hash identifier: m9dyCU+xcYy4Zn8hlk5hms6g1RrF9N7ZsJldJC2eJ1Y=
Subject key identifier: 79:10:AA:0E:39:D7:59:DB:7E:9B:0C:42:6E:E4:3B:8C:9C:80:7D:F4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0185710C1CD7CD26856FCBAA742E71BFE37C
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/eRCqDjnXWdt-mwxCbuQ7jJyAffQ.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59666
IP address blocks: 185.51.209.0/24 maxlen: 24
185.51.210.0/23 maxlen: 23
185.51.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1c:d7:cd:26:85:6f:cb:aa:74:2e:71:bf:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7910aa0e39d759db7e9b0c426ee43b8c9c807df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:5b:13:1d:07:75:74:a3:2d:32:74:35:0f:
29:d8:10:0a:9c:7b:77:05:b1:74:e4:96:de:19:78:
11:f5:d9:68:57:a7:b9:00:58:62:3f:b7:19:47:6c:
0e:0a:45:09:ba:f8:a1:c0:bb:4c:74:b7:27:d5:bb:
19:59:c7:bd:f4:1e:9d:ca:68:a1:bd:de:70:18:62:
76:b0:f4:86:9c:4c:f6:ec:ad:81:3e:a0:b7:41:28:
6b:df:dd:50:92:12:0c:df:cd:76:30:1e:7c:6c:0f:
87:a5:04:f0:2c:8f:e7:c5:4e:32:60:8f:91:63:98:
b6:fb:04:75:c2:85:11:19:4f:d9:f8:5a:d6:f2:63:
9b:4a:ef:3a:e7:be:58:de:af:72:75:a8:60:0d:55:
95:a8:9e:e3:ff:8d:d3:a3:fe:da:e3:36:56:eb:e6:
c9:f3:b2:77:72:53:5e:04:c3:bd:70:e3:66:7a:f8:
cc:29:02:ac:08:c4:6a:05:5a:a6:e8:07:58:94:a9:
b7:dc:78:f4:ab:2b:50:aa:18:e9:af:d2:31:d2:59:
5c:ba:ae:2b:1b:02:e2:32:81:46:78:f0:32:9b:aa:
3c:7f:7f:d9:59:5b:77:a0:04:2f:3e:b9:01:33:21:
ef:fb:2f:76:21:31:7f:29:11:25:c2:d3:13:11:97:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:AA:0E:39:D7:59:DB:7E:9B:0C:42:6E:E4:3B:8C:9C:80:7D:F4
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/eRCqDjnXWdt-mwxCbuQ7jJyAffQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d4:b8:6e:de:91:c2:5a:f5:79:b8:f7:17:87:c6:b4:3b:9f:
f2:23:ee:5e:53:3d:d0:66:83:62:59:8f:b0:cc:35:c5:f6:e4:
e6:a3:9d:b0:b5:6e:fd:e3:dc:67:bf:e1:1d:1e:15:74:55:fa:
89:1c:a8:88:d1:75:e0:cd:36:9b:8b:95:2f:bc:27:93:03:6d:
59:25:8e:77:7c:4e:82:21:4e:9d:15:99:c1:de:81:38:ff:3f:
6b:95:dc:01:1b:31:5b:68:02:16:02:f0:0b:65:81:45:01:0c:
17:43:c6:d3:2c:4d:32:a9:7c:d3:72:a0:d2:0e:bc:54:cd:d6:
49:4b:12:03:c2:b2:29:f5:db:1b:44:e7:53:da:ab:56:dd:a6:
12:ac:cf:6c:60:1b:35:ad:06:14:98:4c:fb:d6:dc:56:b8:dc:
85:64:6f:9a:b9:4b:13:cb:71:44:2e:21:56:cc:29:69:fd:59:
5c:0e:a6:f6:43:c3:5b:37:4a:0d:50:28:a0:d1:0c:48:92:9b:
f4:f9:5c:6d:8f:91:7b:8e:1d:90:be:a1:97:fa:60:b0:26:3c:
8c:fc:a5:8e:e9:29:c1:6c:df:61:14:a1:cd:97:7c:b5:33:1e:
57:c8:6d:a8:e3:fb:cb:05:7a:56:7e:bf:f7:e8:a5:18:b8:9a:
fa:c5:3b:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDBzXzSaFb8uqdC5xv+N8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjMwMTAyMDU1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTEwYWEwZTM5ZDc1OWRiN2U5YjBjNDI2ZWU0M2I4YzljODA3ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K9bEx0HdXSjLTJ0NQ8p2BAKnHt3
BbF05JbeGXgR9dloV6e5AFhiP7cZR2wOCkUJuvihwLtMdLcn1bsZWce99B6dymih
vd5wGGJ2sPSGnEz27K2BPqC3QShr391QkhIM3812MB58bA+HpQTwLI/nxU4yYI+R
Y5i2+wR1woURGU/Z+FrW8mObSu86575Y3q9ydahgDVWVqJ7j/43To/7a4zZW6+bJ
87J3clNeBMO9cONmevjMKQKsCMRqBVqm6AdYlKm33Hj0qytQqhjpr9Ix0llcuq4r
GwLiMoFGePAym6o8f3/ZWVt3oAQvPrkBMyHv+y92ITF/KRElwtMTEZcSRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkQqg4511nbfpsMQm7kO4ycgH30MB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvZVJDcURqblhXZHQtbXd4Q2J1UTdqSnlBZmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTPQMA0G
CSqGSIb3DQEBCwUAA4IBAQB81Lhu3pHCWvV5uPcXh8a0O5/yI+5eUz3QZoNiWY+w
zDXF9uTmo52wtW7949xnv+EdHhV0VfqJHKiI0XXgzTabi5UvvCeTA21ZJY53fE6C
IU6dFZnB3oE4/z9rldwBGzFbaAIWAvALZYFFAQwXQ8bTLE0yqXzTcqDSDrxUzdZJ
SxIDwrIp9dsbROdT2qtW3aYSrM9sYBs1rQYUmEz71txWuNyFZG+auUsTy3FELiFW
zClp/VlcDqb2Q8NbN0oNUCig0QxIkpv0+Vxtj5F7jh2QvqGX+mCwJjyM/KWO6SnB
bN9hFKHNl3y1Mx5XyG2o4/vLBXpWfr/36KUYuJr6xTsx
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net