Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/f-o_WU6r9HZjJ-AALCLiLVM-fLo.roa
File: f-o_WU6r9HZjJ-AALCLiLVM-fLo.roa (raw, json)
Hash identifier: L6EI5br3C0iaaJmgtYB4tZZLu+XaiZ7bK6WTEBSObIE=
Subject key identifier: 7F:EA:3F:59:4E:AB:F4:76:63:27:E0:00:2C:22:E2:2D:53:3E:7C:BA
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018572FA64FFB064FD83A81821BC91308E31
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/f-o_WU6r9HZjJ-AALCLiLVM-fLo.roa
Signing time: Mon 02 Jan 2023 14:54:50 +0000
ROA not before: Mon 02 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202187
IP address blocks: 89.30.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:64:ff:b0:64:fd:83:a8:18:21:bc:91:30:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fea3f594eabf4766327e0002c22e22d533e7cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:e8:d3:21:d8:35:89:07:c8:a5:b7:ac:4b:
6c:89:71:97:3d:00:40:77:90:8c:15:cf:f1:d8:d0:
d6:8f:a0:bf:c1:cc:0e:cc:ce:3d:66:1e:e7:49:a5:
66:32:2d:62:8a:cd:59:25:3b:a5:ed:1f:30:75:f4:
15:b5:2f:35:ce:9a:f9:09:72:2f:3c:af:e6:c2:29:
c6:fa:fa:1d:dc:ce:5c:4c:86:aa:da:2e:bd:c1:87:
86:70:96:63:97:09:af:6d:af:8e:a7:90:7d:a9:f5:
2f:2d:fe:6c:a6:87:71:37:ea:0f:2f:2e:36:c4:ef:
c6:a3:84:40:a6:ca:e7:ae:ad:52:39:38:fb:e7:f2:
03:d3:67:b3:e6:3f:f9:d6:b0:d9:f3:0d:78:23:11:
3a:e0:ef:00:12:f1:69:a6:9e:a9:9e:68:51:15:ac:
3b:68:aa:2d:93:f9:71:10:d2:0d:5e:ad:54:9c:4d:
e8:e5:7b:b9:a4:9c:d7:0d:1e:3a:29:2b:27:d5:f8:
17:84:aa:17:ee:99:b7:86:4d:be:2a:65:98:2c:42:
24:ff:42:b6:33:7a:4d:6f:6b:3d:f1:3a:ca:4a:28:
f8:57:80:3e:a5:7f:07:3d:ac:23:d4:c4:96:81:de:
c5:33:9e:cb:8a:c2:75:d4:20:ee:ca:dc:88:31:dc:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:3F:59:4E:AB:F4:76:63:27:E0:00:2C:22:E2:2D:53:3E:7C:BA
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/f-o_WU6r9HZjJ-AALCLiLVM-fLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:cf:72:1c:95:64:26:e5:e3:77:64:5a:34:8c:00:f5:f7:e3:
90:ef:43:59:7a:8b:68:f9:c1:ab:59:23:fa:7a:30:b2:4f:7b:
04:86:31:ec:72:03:52:53:69:8d:57:3c:81:4e:6b:a5:70:1f:
aa:6e:f5:50:2c:22:75:1c:eb:f1:15:06:51:66:35:6d:5e:a3:
15:19:5c:d5:d4:8c:1e:20:c5:c9:da:b5:13:64:95:cd:13:74:
1f:7f:73:cb:61:f2:86:4e:a7:19:9c:87:4d:bc:35:f6:c6:d4:
76:90:65:78:9f:f0:a9:c1:a1:32:57:76:e4:2f:b3:21:63:c3:
e3:47:09:07:f1:fb:ee:e6:f9:ee:ca:a0:b7:b5:b4:6a:49:4c:
28:72:2a:7a:e1:2d:b5:af:ff:fe:01:ee:b7:00:e5:d1:8f:76:
ad:48:23:87:c4:58:84:e8:c5:8b:bb:ee:90:28:de:5d:f2:a3:
2a:8a:9c:17:df:d5:a8:61:a6:40:3f:47:7c:48:97:11:7e:b5:
90:67:dd:f5:f2:48:a8:21:ce:c4:76:fd:6c:e4:01:da:c5:2a:
e0:99:92:89:cc:7a:1b:f6:71:4a:bd:fc:91:9b:21:be:52:d1:
02:3f:0a:0d:f0:07:6a:4d:54:67:35:46:c0:bb:2b:ab:10:21:
92:4b:18:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy+mT/sGT9g6gYIbyRMI4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz
NzllNDQwHhcNMjMwMTAyMTQ1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmVhM2Y1OTRlYWJmNDc2NjMyN2UwMDAyYzIyZTIyZDUzM2U3Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVXo0yHYNYkHyKW3rEtsiXGXPQBA
d5CMFc/x2NDWj6C/wcwOzM49Zh7nSaVmMi1iis1ZJTul7R8wdfQVtS81zpr5CXIv
PK/mwinG+vod3M5cTIaq2i69wYeGcJZjlwmvba+Op5B9qfUvLf5spodxN+oPLy42
xO/Go4RApsrnrq1SOTj75/ID02ez5j/51rDZ8w14IxE64O8AEvFppp6pnmhRFaw7
aKotk/lxENINXq1UnE3o5Xu5pJzXDR46KSsn1fgXhKoX7pm3hk2+KmWYLEIk/0K2
M3pNb2s98TrKSij4V4A+pX8HPawj1MSWgd7FM57LisJ11CDuytyIMdzTHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/qP1lOq/R2YyfgACwi4i1TPny6MB8GA1UdIwQY
MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt
ZGZlZDEyZjFhMDFlLzEvZi1vX1dVNnI5SFpqSi1BQUxDTGlMVk0tZkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl
LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR5sMA0G
CSqGSIb3DQEBCwUAA4IBAQClz3IclWQm5eN3ZFo0jAD19+OQ70NZeoto+cGrWSP6
ejCyT3sEhjHscgNSU2mNVzyBTmulcB+qbvVQLCJ1HOvxFQZRZjVtXqMVGVzV1Iwe
IMXJ2rUTZJXNE3Qff3PLYfKGTqcZnIdNvDX2xtR2kGV4n/CpwaEyV3bkL7MhY8Pj
RwkH8fvu5vnuyqC3tbRqSUwocip64S21r//+Ae63AOXRj3atSCOHxFiE6MWLu+6Q
KN5d8qMqipwX39WoYaZAP0d8SJcRfrWQZ9318kioIc7Edv1s5AHaxSrgmZKJzHob
9nFKvfyRmyG+UtECPwoN8AdqTVRnNUbAuyurECGSSxhk
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net