Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/HNBOwfECJGiEBFl5iXi9fPw0zNU.roa
File: HNBOwfECJGiEBFl5iXi9fPw0zNU.roa (raw, json)
Hash identifier: alR3Y23bg3bh/Qe1HGOUzJRDm7JqL3YEIMvl6odz1UI=
Subject key identifier: 1C:D0:4E:C1:F1:02:24:68:84:04:59:79:89:78:BD:7C:FC:34:CC:D5
Certificate issuer: /CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Certificate serial: 018B8FC15CAC99AAFF8134D33003D6C396DE
Authority key identifier: 95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/HNBOwfECJGiEBFl5iXi9fPw0zNU.roa
Signing time: Thu 02 Nov 2023 11:18:15 +0000
ROA not before: Thu 02 Nov 2023 11:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.201.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:c1:5c:ac:99:aa:ff:81:34:d3:30:03:d6:c3:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Validity
Not Before: Nov 2 11:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cd04ec1f1022468840459798978bd7cfc34ccd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:68:9c:ca:c9:84:24:47:1d:0f:5b:a2:56:
e4:03:e4:ea:5c:3f:f4:90:43:56:c5:3b:7d:fb:00:
fe:1e:d4:b8:93:f8:43:c0:e2:15:73:83:55:1f:31:
c7:e6:fb:46:e9:8a:0f:06:54:aa:be:06:c8:c7:6d:
65:a7:13:de:1f:63:5f:47:0c:97:c2:3a:d4:3f:cd:
b5:cf:f8:42:da:d9:a2:d9:31:b4:6b:5f:ad:83:f6:
45:37:23:d5:41:b2:3a:42:97:04:94:2a:06:a0:8c:
bc:4b:cf:0b:ad:33:e6:e0:86:72:76:1b:c2:5a:5a:
8b:9a:3c:43:06:15:6d:ba:af:c6:9b:2e:68:32:e4:
eb:9f:50:56:3a:7e:9c:26:c8:e8:2a:60:f4:3a:35:
bf:37:c4:49:38:74:8d:f5:09:40:be:95:24:b1:b1:
5a:25:4a:8f:72:4e:42:95:f4:5e:98:96:b2:77:d9:
fe:63:bd:f3:a4:b9:fc:4b:2f:2b:da:e5:25:75:c8:
de:35:3c:4f:62:fc:6d:e5:a3:2b:9f:d5:0e:a9:01:
5e:df:0f:03:61:9d:0b:7c:7b:20:b7:d3:54:ce:fc:
ee:dd:5f:9d:5c:6d:de:b0:8f:25:02:df:f4:40:81:
da:5d:55:de:76:c0:2d:a0:13:2f:4f:0c:b6:55:4d:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:4E:C1:F1:02:24:68:84:04:59:79:89:78:BD:7C:FC:34:CC:D5
X509v3 Authority Key Identifier:
keyid:95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/HNBOwfECJGiEBFl5iXi9fPw0zNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.31.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ec:c7:01:bd:e7:30:a7:c0:57:bf:35:dc:75:06:be:85:d2:
f2:8b:da:a8:92:10:7a:e7:d0:bf:0e:b1:73:0a:bc:f3:1b:e8:
e4:ce:05:49:e3:63:c6:63:cf:9a:ad:6c:98:94:4c:fe:b1:33:
24:5c:b8:65:17:d6:9f:04:91:39:aa:98:f4:40:01:81:59:6e:
24:7e:65:e8:59:db:e6:86:ad:89:5b:1c:eb:1f:f9:71:d7:b2:
f6:ec:e1:69:37:c1:40:04:f8:3a:57:26:43:b2:91:54:a9:5d:
51:fc:1d:2f:c4:5e:0e:9e:46:90:db:f0:15:12:bd:c9:c4:99:
fb:5a:a2:1c:02:a5:6e:71:3e:c5:b2:13:92:3d:6e:e0:87:d2:
af:da:cf:27:8d:fe:1b:90:b1:78:74:82:e2:9c:52:93:f1:98:
6e:62:af:ef:cb:42:11:69:77:5b:fa:16:31:4a:46:60:ac:87:
27:63:31:05:7a:b5:f9:51:95:82:89:4e:56:ed:16:5f:85:60:
25:9c:26:09:3c:6b:6d:47:01:01:58:3d:c6:6b:6a:64:7a:78:
22:de:00:85:bb:d0:a6:a6:c7:13:83:1d:41:f1:18:60:ab:81:
b0:5c:03:d6:55:ec:05:2e:5e:6e:7d:f4:96:1c:2b:b4:ef:1a:
44:1d:4a:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuPwVysmar/gTTTMAPWw5beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjMxODJhYmJlOTA2YmNhY2M5NTI0YzhiM2MxNDQxZmFj
ODM2ZDEwHhcNMjMxMTAyMTExODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2QwNGVjMWYxMDIyNDY4ODQwNDU5Nzk4OTc4YmQ3Y2ZjMzRjY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTponMrJhCRHHQ9bolbkA+TqXD/0
kENWxTt9+wD+HtS4k/hDwOIVc4NVHzHH5vtG6YoPBlSqvgbIx21lpxPeH2NfRwyX
wjrUP821z/hC2tmi2TG0a1+tg/ZFNyPVQbI6QpcElCoGoIy8S88LrTPm4IZydhvC
WlqLmjxDBhVtuq/Gmy5oMuTrn1BWOn6cJsjoKmD0OjW/N8RJOHSN9QlAvpUksbFa
JUqPck5ClfRemJayd9n+Y73zpLn8Sy8r2uUldcjeNTxPYvxt5aMrn9UOqQFe3w8D
YZ0LfHsgt9NUzvzu3V+dXG3esI8lAt/0QIHaXVXedsAtoBMvTwy2VU3nxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzQTsHxAiRohARZeYl4vXz8NMzVMB8GA1UdIwQY
MBaAFJUjGCq76Qa8rMlSTIs8FEH6yDbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNNWUtydnBCcnlzeVZKTWl6d1VRZnJJTnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84MDgzMDItYzk4My00M2Q1LWE3NWMt
NGU0ZWM0MmFmZDAyLzEvSE5CT3dmRUNKR2lFQkZsNWlYaTlmUHcwek5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84MDgzMDItYzk4My00M2Q1LWE3NWMtNGU0ZWM0MmFmZDAy
LzEvbFNNWUtydnBCcnlzeVZKTWl6d1VRZnJJTnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuckfMA0G
CSqGSIb3DQEBCwUAA4IBAQA27McBvecwp8BXvzXcdQa+hdLyi9qokhB659C/DrFz
CrzzG+jkzgVJ42PGY8+arWyYlEz+sTMkXLhlF9afBJE5qpj0QAGBWW4kfmXoWdvm
hq2JWxzrH/lx17L27OFpN8FABPg6VyZDspFUqV1R/B0vxF4OnkaQ2/AVEr3JxJn7
WqIcAqVucT7FshOSPW7gh9Kv2s8njf4bkLF4dILinFKT8ZhuYq/vy0IRaXdb+hYx
SkZgrIcnYzEFerX5UZWCiU5W7RZfhWAlnCYJPGttRwEBWD3Ga2pkengi3gCFu9Cm
pscTgx1B8Rhgq4GwXAPWVewFLl5uffSWHCu07xpEHUpJ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net