Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/0qRTnhJN6PGyliWvlaGRqdkvSC8.roa
File: 0qRTnhJN6PGyliWvlaGRqdkvSC8.roa (raw, json)
Hash identifier: DuoI8+eaj6VSP7edgGsNmUn8gKQsBRAttYcGynVBprE=
Subject key identifier: D2:A4:53:9E:12:4D:E8:F1:B2:96:25:AF:95:A1:91:A9:D9:2F:48:2F
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 0189DE9B2C396313CF1AFCFD6F0D4E8E35C0
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/0qRTnhJN6PGyliWvlaGRqdkvSC8.roa
Signing time: Thu 10 Aug 2023 08:40:58 +0000
ROA not before: Thu 10 Aug 2023 08:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:9b:2c:39:63:13:cf:1a:fc:fd:6f:0d:4e:8e:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Aug 10 08:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2a4539e124de8f1b29625af95a191a9d92f482f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:57:48:76:fc:f8:cd:4c:f9:4e:c6:ca:26:
03:91:d8:e8:10:86:d3:2e:a1:c3:f2:fc:3e:2e:73:
d3:a4:3d:b5:2b:ac:dd:93:38:84:00:c9:3e:c1:3e:
41:db:1d:53:1f:2a:4c:8a:32:75:95:49:61:ab:d5:
dc:e4:d1:6f:8d:13:b3:ae:cf:a2:9e:02:06:18:9c:
60:c8:c9:82:e1:42:68:85:ac:f3:f3:68:3d:f8:48:
11:ed:fa:c4:f3:b1:4c:da:fa:fc:88:bf:1d:ae:11:
c5:58:6b:25:76:bc:5b:3d:44:4e:e8:aa:3c:e1:22:
bb:89:ac:21:9a:df:25:72:fa:84:6c:6f:aa:87:91:
a7:81:17:53:82:94:89:c3:8e:b0:67:46:71:79:69:
0f:42:96:fa:48:f7:11:c1:cb:26:0c:00:4a:dc:09:
02:ab:3e:88:d9:4c:c0:36:e2:39:59:d8:62:f3:04:
4f:e4:05:0b:27:cc:56:8e:75:36:0d:06:97:4c:3f:
4f:ea:93:e7:f8:1d:f4:8a:e1:39:20:7a:83:56:5c:
d4:08:a1:46:a9:e3:dd:c8:8f:72:00:17:32:5c:84:
63:cc:80:0f:46:5d:f8:81:f2:0b:d3:00:9c:b5:c8:
80:6c:d5:3f:36:76:01:9f:74:5c:0c:2a:90:d4:a9:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:53:9E:12:4D:E8:F1:B2:96:25:AF:95:A1:91:A9:D9:2F:48:2F
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/0qRTnhJN6PGyliWvlaGRqdkvSC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
40:8b:0b:36:4b:43:72:d4:71:2d:51:c4:40:2f:90:99:71:f1:
77:7c:86:cf:c7:4c:1b:3d:71:0f:51:8b:eb:72:73:88:36:6b:
e4:ea:a6:8c:11:f1:7c:ee:62:a9:ca:46:1b:e4:55:13:b1:58:
6b:53:02:18:39:06:67:bf:f6:52:39:75:31:08:c4:f1:ee:e2:
28:49:e4:da:57:41:b0:f3:ef:56:2e:ba:18:6a:0f:13:e8:ef:
c7:de:44:ba:88:c2:56:35:b6:f8:02:b9:71:b5:1c:65:92:a1:
35:95:b5:3a:4b:88:c6:72:da:21:a0:73:ca:af:9f:20:77:3d:
cd:b8:a5:34:bc:be:52:32:2e:ba:a4:86:da:10:80:3f:4d:e4:
94:7d:e8:a3:ae:61:e6:74:fe:e7:65:69:80:30:26:0c:6d:7e:
42:53:f9:10:8b:25:a5:d1:d9:e2:e8:16:4b:f5:95:d7:fa:d8:
4a:2e:bd:18:c5:47:6b:9c:19:d1:43:a6:18:ae:6c:11:fb:ea:
8a:76:0a:e3:ed:d1:aa:52:57:33:d6:53:34:04:b0:ae:88:04:
90:2c:a3:d2:d2:22:92:e0:ed:cb:f2:5a:9f:ce:5e:92:db:90:
ec:97:51:c0:df:f5:5a:b2:bb:ab:a8:9c:9c:5b:3f:27:ad:2f:
bc:b0:0b:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnemyw5YxPPGvz9bw1OjjXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjMwODEwMDg0MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmE0NTM5ZTEyNGRlOGYxYjI5NjI1YWY5NWExOTFhOWQ5MmY0ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZBXSHb8+M1M+U7GyiYDkdjoEIbT
LqHD8vw+LnPTpD21K6zdkziEAMk+wT5B2x1THypMijJ1lUlhq9Xc5NFvjROzrs+i
ngIGGJxgyMmC4UJohazz82g9+EgR7frE87FM2vr8iL8drhHFWGsldrxbPURO6Ko8
4SK7iawhmt8lcvqEbG+qh5GngRdTgpSJw46wZ0ZxeWkPQpb6SPcRwcsmDABK3AkC
qz6I2UzANuI5Wdhi8wRP5AULJ8xWjnU2DQaXTD9P6pPn+B30iuE5IHqDVlzUCKFG
qePdyI9yABcyXIRjzIAPRl34gfIL0wCctciAbNU/NnYBn3RcDCqQ1Km7jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNKkU54STejxspYlr5WhkanZL0gvMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvMHFSVG5oSk42UEd5bGlXdmxhR1JxZGt2U0M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0YMA0G
CSqGSIb3DQEBCwUAA4IBAQBAiws2S0Ny1HEtUcRAL5CZcfF3fIbPx0wbPXEPUYvr
cnOINmvk6qaMEfF87mKpykYb5FUTsVhrUwIYOQZnv/ZSOXUxCMTx7uIoSeTaV0Gw
8+9WLroYag8T6O/H3kS6iMJWNbb4ArlxtRxlkqE1lbU6S4jGctohoHPKr58gdz3N
uKU0vL5SMi66pIbaEIA/TeSUfeijrmHmdP7nZWmAMCYMbX5CU/kQiyWl0dni6BZL
9ZXX+thKLr0YxUdrnBnRQ6YYrmwR++qKdgrj7dGqUlcz1lM0BLCuiASQLKPS0iKS
4O3L8lqfzl6S25Dsl1HA3/VasrurqJycWz8nrS+8sAtQ
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net