Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MHg45ClsXGFIbHn286eyQH7qqsg.roa
File: MHg45ClsXGFIbHn286eyQH7qqsg.roa (raw, json)
Hash identifier: 3ZF6lmiUQhW2zI9gxXI71XopY+8ZNCwRh5oZ8ukjDEI=
Subject key identifier: 30:78:38:E4:29:6C:5C:61:48:6C:79:F6:F3:A7:B2:40:7E:EA:AA:C8
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 0186EA1E1CFC57E101A30552E7DB6BABE0E8
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MHg45ClsXGFIbHn286eyQH7qqsg.roa
Signing time: Thu 16 Mar 2023 11:11:27 +0000
ROA not before: Thu 16 Mar 2023 11:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51093
IP address blocks: 185.108.16.0/24 maxlen: 24
212.48.224.0/22 maxlen: 24
212.48.232.0/24 maxlen: 24
212.48.228.0/22 maxlen: 24
212.48.230.0/24 maxlen: 24
2a06:300::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:1e:1c:fc:57:e1:01:a3:05:52:e7:db:6b:ab:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Mar 16 11:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=307838e4296c5c61486c79f6f3a7b2407eeaaac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:64:c3:cb:3d:6b:ef:16:e3:b7:d8:63:60:
86:9d:eb:ff:b0:99:28:48:51:4d:53:e8:c9:34:ff:
4d:81:d6:b6:df:8b:93:c6:ed:b4:d5:66:7c:1f:1b:
03:aa:8f:47:ae:41:f7:33:89:3c:ef:da:5e:a2:a1:
c6:8e:2c:8f:5b:3f:4e:e1:22:fc:54:4b:76:f4:a0:
f0:1b:f8:cb:ee:dc:8e:6c:6d:89:1b:54:02:66:38:
72:fc:a3:2c:6a:24:c2:49:34:e3:52:0b:2d:7f:e0:
81:88:d7:ce:60:62:e6:55:f4:85:eb:d4:64:86:cb:
91:28:59:03:6a:38:64:f4:63:74:25:57:d7:94:2f:
a5:35:08:df:39:f3:7f:db:03:d5:cf:95:8c:f0:fd:
b1:8a:09:2a:9e:01:0b:3f:3d:d2:33:5c:e8:a6:02:
3d:bb:cb:43:a9:5f:9d:5c:69:95:36:1a:78:89:25:
88:9b:b2:c0:25:fe:f1:b1:da:7f:0d:3d:bf:d8:96:
29:b6:a3:db:67:ce:77:6c:18:30:c5:52:d8:38:8a:
e6:94:be:c7:39:e3:fb:d7:1c:e0:2e:9e:87:55:28:
7f:4b:80:e1:d6:58:36:94:b0:2c:c1:ad:d2:ab:5f:
7a:34:4f:c8:8d:1c:f0:c4:05:fd:5f:07:cd:23:25:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:38:E4:29:6C:5C:61:48:6C:79:F6:F3:A7:B2:40:7E:EA:AA:C8
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MHg45ClsXGFIbHn286eyQH7qqsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.16.0/24
212.48.224.0-212.48.232.255
IPv6:
2a06:300::/29
Signature Algorithm: sha256WithRSAEncryption
6a:a7:83:7d:ef:05:ce:06:08:e9:0a:77:77:96:16:0c:4f:27:
76:7e:ee:41:bd:81:55:f8:e5:ac:83:d9:db:17:dc:d3:af:40:
fe:e5:d4:5b:54:2c:21:e9:a3:6a:23:71:ef:36:82:ca:6b:82:
6d:68:38:a5:ba:1b:13:af:98:1c:04:37:ce:27:59:cf:1a:c0:
55:a0:fb:1d:e2:da:1d:b4:ca:f7:67:db:3a:6f:7e:c4:bc:28:
c7:3a:cd:14:ca:d9:38:04:ec:ec:63:37:f7:bc:0b:18:21:59:
32:e7:e7:c8:14:36:5b:38:49:f2:1e:0a:18:0b:84:5d:63:14:
f3:14:44:ab:6f:ff:12:85:3b:05:0d:68:37:1d:e3:8e:8c:42:
af:c0:e1:0d:5d:9a:ee:75:f4:58:09:cc:d0:85:f4:39:a8:90:
68:13:39:2e:17:bf:42:06:f9:c1:d8:32:f5:13:80:a7:a2:b0:
f1:c8:f6:17:e7:37:d8:a8:72:3b:c5:88:08:3d:ff:4c:5b:dc:
63:bc:31:5b:51:65:24:31:be:25:e1:9f:cc:71:66:b1:8d:cb:
76:80:6f:9f:5f:79:bb:26:75:45:dd:74:72:f2:a7:22:e9:ff:
43:89:46:9c:bf:58:ca:dc:52:c3:bc:bc:3a:25:b6:2f:ad:2a:
0b:4e:27:c7
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYbqHhz8V+EBowVS59trq+DoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjMwMzE2MTExMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDc4MzhlNDI5NmM1YzYxNDg2Yzc5ZjZmM2E3YjI0MDdlZWFhYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRJkw8s9a+8W47fYY2CGnev/sJko
SFFNU+jJNP9Ngda234uTxu201WZ8HxsDqo9HrkH3M4k879peoqHGjiyPWz9O4SL8
VEt29KDwG/jL7tyObG2JG1QCZjhy/KMsaiTCSTTjUgstf+CBiNfOYGLmVfSF69Rk
hsuRKFkDajhk9GN0JVfXlC+lNQjfOfN/2wPVz5WM8P2xigkqngELPz3SM1zopgI9
u8tDqV+dXGmVNhp4iSWIm7LAJf7xsdp/DT2/2JYptqPbZ853bBgwxVLYOIrmlL7H
OeP71xzgLp6HVSh/S4Dh1lg2lLAswa3Sq196NE/IjRzwxAX9XwfNIyUVnwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFDB4OOQpbFxhSGx59vOnskB+6qrIMB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvTUhnNDVDbHNYR0ZJYkhuMjg2ZXlRSDdxcXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAuWwQMAwD
BAXUMOADBADUMOgwDQQCAAIwBwMFAyoGAwAwDQYJKoZIhvcNAQELBQADggEBAGqn
g33vBc4GCOkKd3eWFgxPJ3Z+7kG9gVX45ayD2dsX3NOvQP7l1FtULCHpo2ojce82
gsprgm1oOKW6GxOvmBwEN84nWc8awFWg+x3i2h20yvdn2zpvfsS8KMc6zRTK2TgE
7OxjN/e8CxghWTLn58gUNls4SfIeChgLhF1jFPMURKtv/xKFOwUNaDcd446MQq/A
4Q1dmu519FgJzNCF9DmokGgTOS4Xv0IG+cHYMvUTgKeisPHI9hfnN9iocjvFiAg9
/0xb3GO8MVtRZSQxviXhn8xxZrGNy3aAb59febsmdUXddHLypyLp/0OJRpy/WMrc
UsO8vDolti+tKgtOJ8c=
Generated at Mon Jan 1 21:31:05 2024 by rpki-client on console.sobornost.net