Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/LmUzyIg2IxdofFdr4tnbinTcnKA.roa
File: LmUzyIg2IxdofFdr4tnbinTcnKA.roa (raw, json)
Hash identifier: n++vCE1HZAlVCTKrcftfEorfb2XFM/9aQ8Ve2nGDhM4=
Subject key identifier: 2E:65:33:C8:88:36:23:17:68:7C:57:6B:E2:D9:DB:8A:74:DC:9C:A0
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 018571154BD6610CFF3EDF6934E5A32A7BDC
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/LmUzyIg2IxdofFdr4tnbinTcnKA.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207013
IP address blocks: 185.168.176.0/24 maxlen: 24
185.168.179.0/24 maxlen: 24
185.168.178.0/24 maxlen: 24
2a0b:ffc0::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4b:d6:61:0c:ff:3e:df:69:34:e5:a3:2a:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e6533c888362317687c576be2d9db8a74dc9ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:99:85:1f:af:8d:05:0b:c9:5c:60:78:61:
3d:c4:ff:e7:b0:ac:96:28:59:08:fa:39:6c:56:69:
25:98:cf:a4:0e:fb:24:17:0c:b2:85:c3:4f:39:28:
f0:95:c2:9c:72:99:d8:6b:53:78:d7:75:bb:da:41:
f0:93:c1:c0:76:a3:90:4d:ed:c3:6f:1d:1c:9b:4d:
8b:34:55:15:59:1f:0a:41:74:88:dd:a1:ef:89:09:
05:11:be:63:fc:ce:2d:07:4d:ce:ae:b8:aa:d8:a3:
cc:fd:2d:c6:c5:fe:b3:fc:9e:36:78:29:c5:81:b2:
72:e7:69:6e:e0:ec:99:1c:f8:3f:ab:a6:f4:5d:21:
b8:30:24:77:05:b8:6d:08:2b:21:18:8f:07:07:63:
7f:c9:bd:da:10:6d:24:fb:82:4a:4a:a6:74:1c:35:
68:e8:50:93:fc:47:90:ee:b4:41:6f:2a:16:22:bf:
78:5e:a5:96:e2:0f:db:38:35:2a:c5:91:41:f9:d2:
5b:ca:d6:39:39:b8:e9:71:0b:55:5a:bc:f7:f3:e1:
a5:e0:be:09:4c:26:d9:c2:bb:76:81:2f:1b:3e:77:
b3:9d:19:8d:fe:ae:f6:11:32:b6:46:11:26:54:ef:
b1:0e:df:88:5f:fd:09:e9:49:22:eb:ea:9d:19:05:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:33:C8:88:36:23:17:68:7C:57:6B:E2:D9:DB:8A:74:DC:9C:A0
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/LmUzyIg2IxdofFdr4tnbinTcnKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.176.0/24
185.168.178.0/23
IPv6:
2a0b:ffc0::/40
Signature Algorithm: sha256WithRSAEncryption
3e:fd:d8:f7:44:22:4b:c7:11:cf:45:9f:bb:1a:44:34:8f:a5:
b8:f2:c6:75:50:2c:96:74:c7:0e:44:9e:7c:bd:49:6b:eb:38:
71:47:75:36:60:e2:23:5c:81:45:aa:74:e9:83:bc:11:86:d9:
a1:cb:3e:18:85:76:f8:ac:b5:e9:eb:bd:a7:e8:c1:2b:ea:9e:
93:eb:8f:00:65:ca:47:2c:6f:3f:17:b0:16:b9:12:f2:e2:4e:
a4:33:52:b8:03:a9:55:36:3b:a6:1d:df:6d:b7:bc:aa:3f:42:
2d:24:d7:82:89:de:43:6b:8a:39:68:4e:d5:76:8f:28:ce:59:
43:62:7e:e6:91:4c:53:93:9e:b5:6d:ec:74:fa:c8:f5:69:8e:
85:83:c3:f3:4a:2d:dd:aa:05:8f:4f:21:ed:b1:86:cd:3d:3a:
a5:5d:c2:74:f4:f4:82:3a:16:94:1f:bb:3e:2d:c7:27:06:1e:
cf:04:ec:52:e2:93:ee:7b:f3:37:07:a8:41:82:59:16:2a:0c:
e1:20:e7:18:35:f2:ca:f1:95:8b:77:9f:86:f7:73:9d:5f:dc:
f0:81:4a:7c:aa:6e:45:99:c7:53:18:aa:9c:75:2b:a9:0f:ef:
ea:eb:ac:3f:ce:31:af:4b:26:cb:d7:38:df:0f:7e:07:71:86:
34:bf:08:7a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVxFUvWYQz/Pt9pNOWjKnvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5
ZWM5NzQwHhcNMjMwMTAyMDYwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTY1MzNjODg4MzYyMzE3Njg3YzU3NmJlMmQ5ZGI4YTc0ZGM5Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPiZhR+vjQULyVxgeGE9xP/nsKyW
KFkI+jlsVmklmM+kDvskFwyyhcNPOSjwlcKccpnYa1N413W72kHwk8HAdqOQTe3D
bx0cm02LNFUVWR8KQXSI3aHviQkFEb5j/M4tB03Orriq2KPM/S3Gxf6z/J42eCnF
gbJy52lu4OyZHPg/q6b0XSG4MCR3BbhtCCshGI8HB2N/yb3aEG0k+4JKSqZ0HDVo
6FCT/EeQ7rRBbyoWIr94XqWW4g/bODUqxZFB+dJbytY5ObjpcQtVWrz38+Gl4L4J
TCbZwrt2gS8bPneznRmN/q72ETK2RhEmVO+xDt+IX/0J6Uki6+qdGQWYOwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFC5lM8iINiMXaHxXa+LZ24p03JygMB8GA1UdIwQY
MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct
M2M0M2MzZDM1ZWYzLzEvTG1VenlJZzJJeGRvZkZkcjR0bmJpblRjbktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz
LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAuaiwAwQB
uaiyMA4EAgACMAgDBgAqC//AADANBgkqhkiG9w0BAQsFAAOCAQEAPv3Y90QiS8cR
z0WfuxpENI+luPLGdVAslnTHDkSefL1Ja+s4cUd1NmDiI1yBRap06YO8EYbZocs+
GIV2+Ky16eu9p+jBK+qek+uPAGXKRyxvPxewFrkS8uJOpDNSuAOpVTY7ph3fbbe8
qj9CLSTXgoneQ2uKOWhO1XaPKM5ZQ2J+5pFMU5OetW3sdPrI9WmOhYPD80ot3aoF
j08h7bGGzT06pV3CdPT0gjoWlB+7Pi3HJwYezwTsUuKT7nvzNweoQYJZFioM4SDn
GDXyyvGVi3efhvdznV/c8IFKfKpuRZnHUxiqnHUrqQ/v6uusP84xr0smy9c43w9+
B3GGNL8Ieg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net