Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/23jiaBvfzP00rM7APB0A687y5_A.roa
File: 23jiaBvfzP00rM7APB0A687y5_A.roa (raw, json)
Hash identifier: x+kgwqxovs9V57w2xWJv21F5Y/93CNi03UJT1m9u+FY=
Subject key identifier: DB:78:E2:68:1B:DF:CC:FD:34:AC:CE:C0:3C:1D:00:EB:CE:F2:E7:F0
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 0185866B118BD26B60BBF09EF62D378A799C
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/23jiaBvfzP00rM7APB0A687y5_A.roa
Signing time: Fri 06 Jan 2023 09:30:41 +0000
ROA not before: Fri 06 Jan 2023 09:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28787
IP address blocks: 185.30.88.0/23 maxlen: 23
188.253.128.0/19 maxlen: 19
185.30.90.0/23 maxlen: 23
194.135.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:6b:11:8b:d2:6b:60:bb:f0:9e:f6:2d:37:8a:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 6 09:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db78e2681bdfccfd34accec03c1d00ebcef2e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:72:58:e3:28:90:70:af:2a:b1:72:86:db:
fb:21:a1:75:1e:9e:c8:ce:f1:84:82:2f:a3:c5:17:
59:e1:69:f7:49:1b:bb:09:57:53:52:d9:4b:05:80:
df:e7:e9:0c:4a:9d:6a:cd:8f:43:41:46:fd:76:b4:
43:ce:3f:b3:23:86:66:40:bd:d9:f4:39:0e:5b:05:
aa:bb:ce:6e:c7:22:1c:76:c8:08:cc:b3:f2:27:15:
3e:b3:c0:99:65:ce:11:74:ab:e3:ff:30:49:ef:4a:
31:15:eb:10:67:c0:d5:5e:fd:88:c9:9e:61:fc:a6:
84:1c:5b:40:c1:59:fc:0f:06:70:42:8c:34:68:86:
27:06:df:9c:ce:fb:62:7f:86:f2:d9:a0:40:12:eb:
8b:b4:14:ed:e0:9e:ea:77:83:78:84:e4:67:24:8a:
2d:cd:ee:dc:d2:22:ee:e3:c2:9f:a1:de:d6:3b:74:
f1:d4:1b:2d:af:31:ad:3b:89:e6:46:9a:79:e4:87:
37:ba:ba:f3:98:2a:89:6e:f3:4b:92:1d:ba:ca:b3:
eb:00:70:56:e3:36:e9:df:03:09:d8:e8:22:3a:11:
0c:14:85:8d:ac:82:4a:9d:09:72:16:15:0f:83:00:
8d:9e:3b:b7:95:6a:38:8a:9e:91:56:69:31:b2:fb:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:E2:68:1B:DF:CC:FD:34:AC:CE:C0:3C:1D:00:EB:CE:F2:E7:F0
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/23jiaBvfzP00rM7APB0A687y5_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.88.0/22
188.253.128.0/19
194.135.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4e:fa:d3:54:3e:1c:3d:a8:2c:9f:cb:4f:77:b7:84:d1:c5:
c4:61:37:ca:da:7b:09:f6:fb:b1:92:dc:11:03:e4:fb:04:47:
09:8f:bc:d3:aa:93:30:91:bf:3c:50:cf:f8:c1:d4:99:5f:f6:
e4:3d:81:08:ab:f4:b2:14:13:e2:ea:21:61:85:53:77:c8:18:
b3:9c:36:21:38:1d:8b:d5:81:bb:b9:5f:6e:45:eb:78:bf:7e:
88:e3:0c:81:e0:9b:85:bc:f4:6a:33:eb:e0:5d:2b:60:9f:85:
59:db:55:cb:87:bc:3a:de:d9:47:40:d2:cc:8e:20:55:dc:7c:
12:42:18:f9:61:67:b6:f9:7c:3b:66:d4:b8:1b:b3:8a:90:89:
cf:77:6a:72:64:64:d9:cd:61:91:d2:dc:03:e3:b6:07:ab:3d:
0a:ff:a9:02:48:24:4c:4f:05:ca:7c:3e:c0:e3:b0:fb:21:6c:
96:f0:a6:57:65:f3:61:03:48:2e:31:57:77:b0:07:d4:83:ee:
c3:1d:b9:27:26:c2:ba:f3:d1:9f:24:aa:41:62:a0:03:1c:02:
f4:cd:2c:3c:4a:10:73:d1:32:01:07:74:25:5a:bb:bf:c9:0c:
25:14:48:a4:ea:92:be:61:70:fa:27:44:09:d7:c0:66:da:cb:
3c:dc:0e:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWGaxGL0mtgu/Ce9i03inmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy
MDEzNTAwHhcNMjMwMTA2MDkzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjc4ZTI2ODFiZGZjY2ZkMzRhY2NlYzAzYzFkMDBlYmNlZjJlN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3VyWOMokHCvKrFyhtv7IaF1Hp7I
zvGEgi+jxRdZ4Wn3SRu7CVdTUtlLBYDf5+kMSp1qzY9DQUb9drRDzj+zI4ZmQL3Z
9DkOWwWqu85uxyIcdsgIzLPyJxU+s8CZZc4RdKvj/zBJ70oxFesQZ8DVXv2IyZ5h
/KaEHFtAwVn8DwZwQow0aIYnBt+czvtif4by2aBAEuuLtBTt4J7qd4N4hORnJIot
ze7c0iLu48Kfod7WO3Tx1BstrzGtO4nmRpp55Ic3urrzmCqJbvNLkh26yrPrAHBW
4zbp3wMJ2OgiOhEMFIWNrIJKnQlyFhUPgwCNnju3lWo4ip6RVmkxsvu1JQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNt44mgb38z9NKzOwDwdAOvO8ufwMB8GA1UdIwQY
MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct
ODFmNTY2MTg1YjA2LzEvMjNqaWFCdmZ6UDAwck03QVBCMEE2ODd5NV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2
LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuR5YAwQF
vP2AAwQAwoexMA0GCSqGSIb3DQEBCwUAA4IBAQBeTvrTVD4cPagsn8tPd7eE0cXE
YTfK2nsJ9vuxktwRA+T7BEcJj7zTqpMwkb88UM/4wdSZX/bkPYEIq/SyFBPi6iFh
hVN3yBiznDYhOB2L1YG7uV9uRet4v36I4wyB4JuFvPRqM+vgXStgn4VZ21XLh7w6
3tlHQNLMjiBV3HwSQhj5YWe2+Xw7ZtS4G7OKkInPd2pyZGTZzWGR0twD47YHqz0K
/6kCSCRMTwXKfD7A47D7IWyW8KZXZfNhA0guMVd3sAfUg+7DHbknJsK689GfJKpB
YqADHAL0zSw8ShBz0TIBB3QlWru/yQwlFEik6pK+YXD6J0QJ18Bm2ss83A7x
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net