Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/s7DoRpu9D69eg0K7kxnRJ3eJ--U.roa
File: s7DoRpu9D69eg0K7kxnRJ3eJ--U.roa (raw, json)
Hash identifier: el13OpziuNeBW6cv/hKLEm7dRlS9CH1sGDZulYG3xdo=
Subject key identifier: B3:B0:E8:46:9B:BD:0F:AF:5E:83:42:BB:93:19:D1:27:77:89:FB:E5
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01856FF021D50B95D128D3D9334F7BE98696
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/s7DoRpu9D69eg0K7kxnRJ3eJ--U.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211717
IP address blocks: 185.51.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:21:d5:0b:95:d1:28:d3:d9:33:4f:7b:e9:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3b0e8469bbd0faf5e8342bb9319d1277789fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:dd:eb:a5:60:9c:8c:05:f7:4c:dc:91:3c:
e9:5e:63:75:2d:bb:74:3e:14:b4:5c:68:44:9a:73:
83:d3:2a:7a:5d:50:ce:88:c1:94:e1:69:95:be:12:
16:16:1d:92:1a:aa:8b:6e:7f:1c:51:7e:3e:dd:85:
63:69:7d:4f:3d:d3:83:97:ea:e5:45:f4:43:13:63:
4d:83:3b:37:47:09:6b:e7:a9:22:9b:2c:d6:aa:75:
bd:7c:26:2f:b8:f0:a3:29:29:f9:8c:2b:72:49:6c:
e2:3f:53:d8:b8:d7:63:e5:df:cb:42:80:06:ba:1f:
af:c8:f3:18:0e:51:e8:c3:c1:28:4f:5e:0f:d7:ca:
62:64:71:fd:c6:4c:70:61:7f:29:88:1d:c6:7e:39:
41:e4:d5:3b:a2:fd:68:ef:a8:64:b5:98:f6:ca:1f:
7a:d1:62:8f:80:16:09:c9:c9:8e:89:2d:da:62:1d:
9f:68:e3:f9:5e:4e:30:d6:b8:5b:3b:7c:bc:4f:de:
90:39:a0:15:5e:9c:e7:f2:c0:88:07:61:ec:67:1a:
32:db:af:c8:b7:1a:be:86:70:90:fa:70:bb:91:10:
9c:e3:ed:cd:01:c1:d1:75:d3:a0:e7:12:37:a4:66:
84:b1:ae:5a:b8:66:ca:c2:1d:2e:3a:e9:4e:65:c9:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:E8:46:9B:BD:0F:AF:5E:83:42:BB:93:19:D1:27:77:89:FB:E5
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/s7DoRpu9D69eg0K7kxnRJ3eJ--U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
14:19:22:c9:02:50:92:5b:8d:4f:ed:27:ad:6e:60:61:37:9d:
8e:27:e8:c1:51:58:e7:7b:4d:fc:cc:71:88:86:24:c6:e0:25:
4e:74:1a:44:30:fa:cf:02:f9:cb:9d:5e:85:78:59:f8:80:e0:
10:3b:ba:1c:0f:46:c8:47:4a:c1:c4:4f:22:dc:dd:cd:de:01:
82:80:7a:20:6a:84:27:ed:45:93:37:d6:aa:c3:63:1f:88:2e:
b4:7a:21:7f:5f:ad:23:e0:e5:9c:68:45:fa:49:13:66:55:a0:
59:0d:d9:0b:e0:72:21:fa:c6:76:11:30:84:b4:cd:6d:15:ba:
81:d1:04:e6:26:27:83:c0:28:2f:c9:35:9c:a1:eb:2d:86:cb:
e0:5e:9c:b9:76:5c:de:f6:06:9e:ca:33:99:db:63:d3:d9:a4:
0f:7a:fe:a1:04:f4:04:07:e9:10:a1:9f:13:8d:39:8e:d7:47:
4a:a8:23:2c:f0:9a:51:de:58:6c:06:0a:18:e1:99:0e:04:0e:
28:87:0c:87:5f:8a:39:95:bb:b2:13:1f:ed:cf:ab:c4:ce:7c:
ce:50:f3:2f:89:d2:bd:1b:37:b3:7c:c3:3b:62:45:48:50:7a:
9d:29:b0:db:6b:76:d5:88:d5:e4:3d:ab:1a:01:09:4e:37:41:
ea:56:14:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8CHVC5XRKNPZM0976YaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjYxMWEwYjdkNDMzNGI3YTIzOTVlOGNjZTdiMGUzYzli
ODM4ZTgwHhcNMjMwMTAyMDA0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2IwZTg0NjliYmQwZmFmNWU4MzQyYmI5MzE5ZDEyNzc3ODlmYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK/d66VgnIwF90zckTzpXmN1Lbt0
PhS0XGhEmnOD0yp6XVDOiMGU4WmVvhIWFh2SGqqLbn8cUX4+3YVjaX1PPdODl+rl
RfRDE2NNgzs3Rwlr56kimyzWqnW9fCYvuPCjKSn5jCtySWziP1PYuNdj5d/LQoAG
uh+vyPMYDlHow8EoT14P18piZHH9xkxwYX8piB3GfjlB5NU7ov1o76hktZj2yh96
0WKPgBYJycmOiS3aYh2faOP5Xk4w1rhbO3y8T96QOaAVXpzn8sCIB2HsZxoy26/I
txq+hnCQ+nC7kRCc4+3NAcHRddOg5xI3pGaEsa5auGbKwh0uOulOZclunwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOw6EabvQ+vXoNCu5MZ0Sd3ifvlMB8GA1UdIwQY
MBaAFIW2EaC31DNLeiOV6MznsOPJuDjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmIt
ODhjYjRlNzEwNmVhLzEvczdEb1JwdTlENjllZzBLN2t4blJKM2VKLS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmItODhjYjRlNzEwNmVh
LzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTMsMA0G
CSqGSIb3DQEBCwUAA4IBAQAUGSLJAlCSW41P7SetbmBhN52OJ+jBUVjne038zHGI
hiTG4CVOdBpEMPrPAvnLnV6FeFn4gOAQO7ocD0bIR0rBxE8i3N3N3gGCgHogaoQn
7UWTN9aqw2MfiC60eiF/X60j4OWcaEX6SRNmVaBZDdkL4HIh+sZ2ETCEtM1tFbqB
0QTmJieDwCgvyTWcoesthsvgXpy5dlze9gaeyjOZ22PT2aQPev6hBPQEB+kQoZ8T
jTmO10dKqCMs8JpR3lhsBgoY4ZkOBA4ohwyHX4o5lbuyEx/tz6vEznzOUPMvidK9
GzezfMM7YkVIUHqdKbDba3bViNXkPasaAQlON0HqVhRu
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:02 2024 by rpki-client on console.sobornost.net