Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iLEeKGWgG20WVfBxw50IsZ8YiPU.roa
File: iLEeKGWgG20WVfBxw50IsZ8YiPU.roa (raw, json)
Hash identifier: gSJh2peoDthUNAu7al484npUqMNggOhHBrom4Uy+KMo=
Subject key identifier: 88:B1:1E:28:65:A0:1B:6D:16:55:F0:71:C3:9D:08:B1:9F:18:88:F5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01891BD1567C19B72D0BE695551B649BF11A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iLEeKGWgG20WVfBxw50IsZ8YiPU.roa
Signing time: Mon 03 Jul 2023 12:54:11 +0000
ROA not before: Mon 03 Jul 2023 12:54:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:d1:56:7c:19:b7:2d:0b:e6:95:55:1b:64:9b:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 3 12:54:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b11e2865a01b6d1655f071c39d08b19f1888f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:dc:69:64:fc:f9:b3:0a:8b:ad:94:be:03:
da:d2:48:89:35:57:f0:2e:0b:39:ef:01:db:71:a3:
e7:fd:bd:92:e4:f1:83:65:b1:6d:aa:fd:5d:48:29:
06:0d:53:8f:69:73:d3:98:09:34:83:02:6a:78:8c:
21:ac:57:14:84:5c:17:0e:97:db:a5:4c:24:ce:b0:
7a:92:b6:45:cf:d5:e2:d6:44:39:bd:75:0c:4b:81:
ec:a9:a7:67:6a:dc:c8:14:a9:9b:ef:cc:eb:6b:b2:
74:25:89:ef:d5:e3:a3:0f:48:09:69:75:e1:a3:91:
1a:d6:86:b0:c5:a4:ea:89:b7:a2:5b:1b:12:e1:e1:
9e:b6:5a:54:17:be:8a:8e:13:1a:31:32:3a:d3:d8:
1b:cc:a6:ef:5c:70:73:ac:89:4a:53:6f:e3:7e:aa:
2b:34:aa:89:3f:2a:7d:31:21:11:7a:43:b0:b9:3f:
3f:27:70:96:0e:77:c8:2a:e7:f9:c8:84:30:70:1e:
09:c4:bb:97:e4:cd:ac:90:e6:a2:45:b8:4f:18:ac:
2c:35:e1:1c:4b:1c:b2:bc:6c:a5:ce:55:92:20:67:
dd:9c:5d:4f:21:74:c8:e8:74:a6:b7:7a:8b:5d:d6:
14:00:52:bd:9a:1a:fb:69:0b:e2:87:84:e8:ee:dd:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:1E:28:65:A0:1B:6D:16:55:F0:71:C3:9D:08:B1:9F:18:88:F5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iLEeKGWgG20WVfBxw50IsZ8YiPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
213.176.2.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:dd:22:2e:57:79:4b:ff:4a:47:b3:6e:66:b5:74:f6:1f:51:
78:05:1c:0e:2a:22:27:fc:ff:71:b0:04:18:bd:52:7e:b6:b2:
9d:5b:5c:37:d7:92:fc:7b:1e:4b:35:13:bf:9a:9c:a4:f5:41:
c2:4e:71:66:67:c3:31:d3:c8:48:be:65:1c:36:ce:4e:66:87:
28:fd:8f:fc:1d:36:b1:e0:64:33:9c:09:7e:31:fe:b8:0a:b0:
cf:0f:ff:a3:00:7b:67:4e:a3:60:68:04:91:57:49:06:b6:90:
f7:c7:88:6a:ee:38:03:b4:b5:90:a9:d7:d6:b3:29:6b:bf:06:
ab:2f:98:79:9e:11:15:c5:b1:fc:67:91:17:10:fc:a7:52:61:
cd:28:87:01:45:91:1d:bc:69:83:04:33:e1:37:22:6e:28:ad:
32:dd:54:1c:f5:ed:9f:13:20:7e:d8:d5:4f:42:0f:fc:e5:48:
02:3d:ae:1b:24:8b:24:f0:bc:82:ed:88:3c:bc:67:1e:d6:42:
4c:59:26:54:1b:34:a1:4d:16:f6:2f:1c:da:b0:7d:53:88:e1:
fa:3e:5e:e9:67:5a:78:2d:39:c0:de:6e:33:00:e2:df:e6:4a:
9a:83:ec:e7:f9:63:14:c0:6e:8b:1f:27:89:a3:d7:71:84:91:
9a:87:8d:fd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYkb0VZ8GbctC+aVVRtkm/EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNzAzMTI1NDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGIxMWUyODY1YTAxYjZkMTY1NWYwNzFjMzlkMDhiMTlmMTg4OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3zcaWT8+bMKi62UvgPa0kiJNVfw
Lgs57wHbcaPn/b2S5PGDZbFtqv1dSCkGDVOPaXPTmAk0gwJqeIwhrFcUhFwXDpfb
pUwkzrB6krZFz9Xi1kQ5vXUMS4HsqadnatzIFKmb78zra7J0JYnv1eOjD0gJaXXh
o5Ea1oawxaTqibeiWxsS4eGetlpUF76KjhMaMTI609gbzKbvXHBzrIlKU2/jfqor
NKqJPyp9MSERekOwuT8/J3CWDnfIKuf5yIQwcB4JxLuX5M2skOaiRbhPGKwsNeEc
SxyyvGylzlWSIGfdnF1PIXTI6HSmt3qLXdYUAFK9mhr7aQvih4To7t1hFwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIixHihloBttFlXwccOdCLGfGIj1MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvaUxFZUtHV2dHMjBXVmZCeHc1MElzWjhZaVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPjzEAwQB
1bACAwQB1bB4AwQB1bB+MA0GCSqGSIb3DQEBCwUAA4IBAQAt3SIuV3lL/0pHs25m
tXT2H1F4BRwOKiIn/P9xsAQYvVJ+trKdW1w315L8ex5LNRO/mpyk9UHCTnFmZ8Mx
08hIvmUcNs5OZoco/Y/8HTax4GQznAl+Mf64CrDPD/+jAHtnTqNgaASRV0kGtpD3
x4hq7jgDtLWQqdfWsylrvwarL5h5nhEVxbH8Z5EXEPynUmHNKIcBRZEdvGmDBDPh
NyJuKK0y3VQc9e2fEyB+2NVPQg/85UgCPa4bJIsk8LyC7Yg8vGce1kJMWSZUGzSh
TRb2LxzasH1TiOH6Pl7pZ1p4LTnA3m4zAOLf5kqag+zn+WMUwG6LHyeJo9dxhJGa
h439
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net