Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/1DP7NzlaNxRtRO5bWbhNY-TQeFc.roa
File: 1DP7NzlaNxRtRO5bWbhNY-TQeFc.roa (raw, json)
Hash identifier: 8sFun9YXuNspjrAzjtq8BeGQndFkLGp+p+UNb4i6GYg=
Subject key identifier: D4:33:FB:37:39:5A:37:14:6D:44:EE:5B:59:B8:4D:63:E4:D0:78:57
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01878C1FB66F9C2B1201D768CCDF76F801E0
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/1DP7NzlaNxRtRO5bWbhNY-TQeFc.roa
Signing time: Sun 16 Apr 2023 22:11:41 +0000
ROA not before: Sun 16 Apr 2023 22:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.213.169.0/24 maxlen: 24
185.213.171.0/24 maxlen: 24
185.213.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8c:1f:b6:6f:9c:2b:12:01:d7:68:cc:df:76:f8:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 16 22:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d433fb37395a37146d44ee5b59b84d63e4d07857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:2b:1d:d8:37:06:09:b8:e6:bd:47:04:7f:
dd:d2:74:7d:f5:7a:f8:bc:2c:bc:cf:a3:13:79:77:
6f:1c:b0:19:84:e5:91:83:57:9d:32:cc:b0:4e:62:
4a:53:bd:62:e4:0e:54:2b:90:eb:92:06:a7:24:9c:
30:33:8f:53:8f:7d:7e:99:c0:11:5d:cb:1f:dc:81:
f5:be:85:51:4e:11:79:15:fe:47:01:e9:29:08:39:
48:95:16:30:3b:d2:88:3f:73:2d:1d:3b:6a:10:41:
94:20:27:8b:2d:26:5a:f1:b2:f6:e3:73:52:42:52:
1b:4a:d6:ad:60:9c:41:00:45:8b:d1:c8:b3:33:bc:
7d:a9:ee:4f:5e:78:93:29:dc:77:3f:b9:18:90:e9:
37:2c:7c:fa:84:04:d9:ee:2f:85:eb:9c:26:8a:65:
87:b1:e0:c7:ed:5b:94:1f:75:aa:35:f9:5e:32:e7:
06:cf:ac:01:5a:37:39:27:d0:77:41:8a:66:6d:c4:
dc:f5:d3:d1:32:06:41:48:53:cf:2c:01:5f:d0:c0:
2e:56:21:57:c1:03:69:02:18:34:3e:25:04:0b:f5:
a5:cd:af:bc:ad:4e:e1:ec:60:17:9b:fa:f3:5f:1d:
ab:16:cc:be:32:75:10:12:b8:c6:7f:1a:1d:19:14:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:FB:37:39:5A:37:14:6D:44:EE:5B:59:B8:4D:63:E4:D0:78:57
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/1DP7NzlaNxRtRO5bWbhNY-TQeFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.169.0-185.213.171.255
Signature Algorithm: sha256WithRSAEncryption
58:f9:ea:48:a6:79:39:ad:44:7b:db:cd:e2:a5:03:c8:2f:84:
83:2a:62:39:8d:5a:ab:a8:cb:aa:9c:f4:1b:ba:b7:e0:53:81:
17:fa:9b:38:4f:bb:9c:d5:6e:14:2d:1a:e3:09:cc:fa:b0:dc:
88:ce:27:ce:86:15:65:27:10:cb:7f:c6:7d:56:7a:04:2f:c8:
76:8b:0d:92:38:73:cb:74:25:24:d5:0c:18:b3:9e:0c:b7:7f:
1f:91:53:1e:54:3b:b7:3f:d6:12:5b:ec:1f:ff:41:53:4f:22:
82:ce:5f:de:8e:b2:b8:d6:b9:76:b3:dd:d7:b3:f3:04:d5:7e:
0d:5c:cc:5d:95:fb:94:ba:fc:60:f7:fa:cd:68:e2:4c:cb:84:
de:08:81:17:b5:48:4e:2a:83:06:55:0e:12:6e:18:8f:c3:d4:
05:98:6b:10:d8:da:51:57:ad:87:ad:4a:70:35:d7:69:6e:e7:
32:06:83:3d:a3:2a:f6:83:a5:b8:b1:ec:d8:2e:05:9d:68:b6:
02:ed:50:eb:d0:12:9e:c7:30:9b:32:33:c3:e6:5c:dc:cc:b7:
62:16:bb:64:48:03:74:36:97:00:4a:60:28:18:0a:9f:c0:52:
91:d6:80:14:8b:4d:7b:00:e0:3c:aa:1f:5c:65:0a:a8:a1:d0:
0c:b5:3c:52
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYeMH7ZvnCsSAddozN92+AHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjMwNDE2MjIxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDMzZmIzNzM5NWEzNzE0NmQ0NGVlNWI1OWI4NGQ2M2U0ZDA3ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpYrHdg3Bgm45r1HBH/d0nR99Xr4
vCy8z6MTeXdvHLAZhOWRg1edMsywTmJKU71i5A5UK5DrkganJJwwM49Tj31+mcAR
Xcsf3IH1voVRThF5Ff5HAekpCDlIlRYwO9KIP3MtHTtqEEGUICeLLSZa8bL243NS
QlIbStatYJxBAEWL0cizM7x9qe5PXniTKdx3P7kYkOk3LHz6hATZ7i+F65wmimWH
seDH7VuUH3WqNfleMucGz6wBWjc5J9B3QYpmbcTc9dPRMgZBSFPPLAFf0MAuViFX
wQNpAhg0PiUEC/Wlza+8rU7h7GAXm/rzXx2rFsy+MnUQErjGfxodGRRDeQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNQz+zc5WjcUbUTuW1m4TWPk0HhXMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvMURQN056bGFOeFJ0Uk81YldiaE5ZLVRRZUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC51akD
BAK51agwDQYJKoZIhvcNAQELBQADggEBAFj56kimeTmtRHvbzeKlA8gvhIMqYjmN
Wquoy6qc9Bu6t+BTgRf6mzhPu5zVbhQtGuMJzPqw3IjOJ86GFWUnEMt/xn1WegQv
yHaLDZI4c8t0JSTVDBizngy3fx+RUx5UO7c/1hJb7B//QVNPIoLOX96OsrjWuXaz
3dez8wTVfg1czF2V+5S6/GD3+s1o4kzLhN4IgRe1SE4qgwZVDhJuGI/D1AWYaxDY
2lFXrYetSnA112lu5zIGgz2jKvaDpbix7NguBZ1otgLtUOvQEp7HMJsyM8PmXNzM
t2IWu2RIA3Q2lwBKYCgYCp/AUpHWgBSLTXsA4DyqH1xlCqih0Ay1PFI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net