Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/X7eKfdIvg5NZ-Jkm-A1nPCeF_3Y.roa
File: X7eKfdIvg5NZ-Jkm-A1nPCeF_3Y.roa (raw, json)
Hash identifier: 8jzec+RIYhkvgyPdKjjcjNVn1eiwpIvZZ6MBd6iejFA=
Subject key identifier: 5F:B7:8A:7D:D2:2F:83:93:59:F8:99:26:F8:0D:67:3C:27:85:FF:76
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 01857315D8D8DB298464685BBFFF00C78EC4
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/X7eKfdIvg5NZ-Jkm-A1nPCeF_3Y.roa
Signing time: Mon 02 Jan 2023 15:24:49 +0000
ROA not before: Mon 02 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 185.254.140.0/22 maxlen: 22
2a0c:4e40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d8:d8:db:29:84:64:68:5b:bf:ff:00:c7:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Jan 2 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fb78a7dd22f839359f89926f80d673c2785ff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:8a:c8:7c:cf:b2:ef:ff:91:1b:2d:87:98:
96:7a:0b:c1:48:fd:83:93:ae:b9:78:76:a9:8e:6f:
83:f4:47:58:20:2f:a7:5c:e1:ad:6e:76:92:21:b9:
84:e9:14:b6:30:49:ac:3c:a3:b2:bb:92:92:87:91:
73:30:30:83:b3:fb:92:2b:fb:4a:87:da:b0:91:9e:
0b:04:c4:57:8e:b1:a0:78:ce:0b:6d:af:f6:1a:fa:
65:e1:ac:52:f9:79:d0:5d:90:cc:d3:c0:44:62:2e:
ac:55:05:ae:66:69:97:37:dd:c3:b0:24:dd:ef:0e:
a3:6a:ae:23:f4:42:6f:97:99:02:dd:04:52:a0:6b:
95:d7:98:78:bf:67:5f:5d:84:31:25:87:f0:e1:ef:
85:59:b6:6c:7e:fc:21:b9:dd:20:3a:29:ee:3e:ed:
a4:96:d7:d8:db:6f:a6:d4:ca:a3:c5:b9:f4:d1:5e:
69:21:ab:86:82:d6:38:4d:22:ac:86:93:31:6c:43:
cf:84:5a:b9:43:94:29:ad:e7:a5:c8:19:2a:93:ba:
26:d0:07:13:ae:44:c8:d6:64:bf:73:aa:52:79:54:
ee:69:1b:fa:ee:31:07:6d:7f:cf:51:81:ab:4f:6a:
e1:a5:5a:2a:1b:24:38:53:c3:a0:c2:ac:51:ef:70:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:8A:7D:D2:2F:83:93:59:F8:99:26:F8:0D:67:3C:27:85:FF:76
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/X7eKfdIvg5NZ-Jkm-A1nPCeF_3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.140.0/22
IPv6:
2a0c:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
26:a7:3b:aa:c2:b4:4f:0a:3e:a9:4e:53:fd:4e:fd:6a:ef:63:
86:22:91:3d:e8:e9:35:6c:75:1c:fc:bb:89:ab:98:cb:d4:eb:
c8:6d:a6:97:bf:54:6a:f8:87:f9:d3:17:eb:f2:aa:ef:ac:6b:
90:fb:0b:2f:c2:ce:5f:45:0f:05:11:40:65:1c:dd:47:51:2d:
e0:b4:76:64:d1:fe:5c:fa:21:3c:f8:27:88:20:ec:a9:a3:eb:
0a:53:96:89:c5:2e:94:d0:3c:59:78:eb:9a:a5:c5:71:8a:64:
ef:5c:a6:08:e2:e5:59:4f:9e:44:c0:5a:36:bd:cd:8d:4a:2b:
3b:ef:a5:d0:25:a9:b4:a9:dd:71:a5:3b:9e:87:e8:ac:78:82:
23:33:86:5d:33:49:16:5d:d5:e5:23:ae:94:b4:e6:2b:1b:96:
58:1b:f7:a6:7b:b5:44:e9:fb:44:67:0a:92:9c:c8:7e:73:7f:
1b:04:fe:42:f9:08:5e:06:b7:c6:c1:19:67:16:1a:4a:e9:d8:
89:d8:a7:80:f1:3b:4d:da:5b:9c:53:9e:57:de:70:2c:e6:a9:
e8:f8:b1:13:91:8b:6d:5a:ec:52:d3:6c:42:c4:09:8e:e6:58:
f8:4e:bd:ea:2a:b6:d1:ea:6f:e1:2f:91:09:29:b8:30:e2:a5:
3b:2e:26:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVzFdjY2ymEZGhbv/8Ax47EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjMwMTAyMTUyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmI3OGE3ZGQyMmY4MzkzNTlmODk5MjZmODBkNjczYzI3ODVmZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHSKyHzPsu//kRsth5iWegvBSP2D
k665eHapjm+D9EdYIC+nXOGtbnaSIbmE6RS2MEmsPKOyu5KSh5FzMDCDs/uSK/tK
h9qwkZ4LBMRXjrGgeM4Lba/2Gvpl4axS+XnQXZDM08BEYi6sVQWuZmmXN93DsCTd
7w6jaq4j9EJvl5kC3QRSoGuV15h4v2dfXYQxJYfw4e+FWbZsfvwhud0gOinuPu2k
ltfY22+m1Mqjxbn00V5pIauGgtY4TSKshpMxbEPPhFq5Q5QpreelyBkqk7om0AcT
rkTI1mS/c6pSeVTuaRv67jEHbX/PUYGrT2rhpVoqGyQ4U8OgwqxR73ARlQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF+3in3SL4OTWfiZJvgNZzwnhf92MB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvWDdlS2ZkSXZnNU5aLUprbS1BMW5QQ2VGXzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf6MMA0E
AgACMAcDBQMqDE5AMA0GCSqGSIb3DQEBCwUAA4IBAQAmpzuqwrRPCj6pTlP9Tv1q
72OGIpE96Ok1bHUc/LuJq5jL1OvIbaaXv1Rq+If50xfr8qrvrGuQ+wsvws5fRQ8F
EUBlHN1HUS3gtHZk0f5c+iE8+CeIIOypo+sKU5aJxS6U0DxZeOuapcVximTvXKYI
4uVZT55EwFo2vc2NSis776XQJam0qd1xpTueh+iseIIjM4ZdM0kWXdXlI66UtOYr
G5ZYG/eme7VE6ftEZwqSnMh+c38bBP5C+QheBrfGwRlnFhpK6diJ2KeA8TtN2luc
U55X3nAs5qno+LETkYttWuxS02xCxAmO5lj4Tr3qKrbR6m/hL5EJKbgw4qU7LiYI
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:38 2024 by rpki-client on console.sobornost.net