Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/g1ElYP0C8jJ9d1uF-Zi0MLe1Dag.roa
File: g1ElYP0C8jJ9d1uF-Zi0MLe1Dag.roa (raw, json)
Hash identifier: EWaJsXzspYxJEVlYFYRHuE33iNrCmAgQpJvsbqwEUyQ=
Subject key identifier: 83:51:25:60:FD:02:F2:32:7D:77:5B:85:F9:98:B4:30:B7:B5:0D:A8
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA875E756CD1A3B93F724FFA61580E
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/g1ElYP0C8jJ9d1uF-Zi0MLe1Dag.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201845
IP address blocks: 85.232.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:87:5e:75:6c:d1:a3:b9:3f:72:4f:fa:61:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83512560fd02f2327d775b85f998b430b7b50da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:35:1a:18:02:1e:1d:55:4c:4a:34:58:e8:
3f:fb:c1:ae:88:5d:7d:34:79:00:6d:63:c3:28:33:
7b:3a:76:80:61:27:40:7c:83:2b:18:53:d5:48:05:
75:a1:30:a8:ce:17:f9:c9:5e:17:46:63:df:3c:84:
69:21:a6:45:d0:98:dd:d2:7d:4b:8f:ba:ec:7c:b1:
23:79:a9:3f:45:4b:f4:2a:a8:33:ed:b7:b8:65:5c:
2f:23:0e:08:27:2c:03:f4:f4:32:60:77:52:2d:0d:
c8:4b:83:71:0b:4c:05:db:c1:f9:74:81:bf:de:80:
9c:ee:23:e5:8b:a4:86:c5:37:fa:d4:b4:b3:2f:b4:
73:fd:5e:c9:c4:6d:ee:69:01:0d:54:03:e7:ec:2d:
c9:55:b0:7d:d5:fe:d7:9d:2b:8c:60:38:48:c5:d4:
b0:b9:c4:b1:ba:4a:6c:99:86:f7:d1:ca:0a:9e:56:
ee:69:ad:59:fd:29:ce:89:61:ec:08:70:26:ad:3f:
fa:d9:6c:cf:c7:f6:33:9a:1b:13:6f:33:c1:9a:17:
fa:01:b4:7e:2b:5b:ec:69:2b:18:26:4e:2e:f9:02:
f8:e8:01:8d:7c:82:2c:48:f2:7b:50:a3:0d:ed:46:
39:bf:d6:b5:6a:15:ae:23:45:fd:38:b8:9a:34:2d:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:51:25:60:FD:02:F2:32:7D:77:5B:85:F9:98:B4:30:B7:B5:0D:A8
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/g1ElYP0C8jJ9d1uF-Zi0MLe1Dag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4b:73:97:0b:dc:f9:71:69:ea:90:98:ac:d5:6b:b6:5d:d5:
11:bb:17:07:b8:dc:81:03:8f:31:d2:65:20:02:b5:dd:02:5e:
a2:02:0c:59:8a:4b:82:1b:e1:28:85:e2:68:ea:b1:0f:bc:9e:
70:77:d1:e6:66:9a:e9:98:a2:d6:3e:cd:01:63:bc:8d:8b:a1:
27:dc:ad:0c:3b:45:fb:54:07:38:1a:fb:e0:bd:25:d4:25:09:
fc:b0:43:fe:7e:82:2b:50:76:74:89:4a:7d:07:a1:5d:f7:45:
62:63:18:4a:4f:01:93:21:77:ee:03:4c:9b:dc:df:cf:11:70:
4b:74:3a:5c:e2:d2:8b:d0:12:9e:f0:a6:f8:c0:d4:60:6c:3d:
4f:2f:4b:82:fb:54:d4:1d:42:78:94:05:53:48:f8:e8:d8:b1:
2f:1e:69:82:34:b4:fa:4d:8f:69:d2:15:ca:d3:99:7e:90:4b:
b3:59:a4:24:8f:7f:fb:ce:14:78:86:62:d1:a2:c6:49:11:a6:
11:b6:10:ef:9d:5b:54:17:b5:0e:04:a7:ca:c9:76:47:10:22:
61:08:f2:b4:1b:fb:5e:53:e0:e9:8e:0e:1f:98:49:65:3d:84:
39:26:2c:ce:31:41:ad:6b:69:1f:da:e8:9b:4b:18:46:3b:c5:
c9:c9:3e:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyuodedWzRo7k/ck/6YVgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjMwMTAyMTM0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzUxMjU2MGZkMDJmMjMyN2Q3NzViODVmOTk4YjQzMGI3YjUwZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/81GhgCHh1VTEo0WOg/+8GuiF19
NHkAbWPDKDN7OnaAYSdAfIMrGFPVSAV1oTCozhf5yV4XRmPfPIRpIaZF0Jjd0n1L
j7rsfLEjeak/RUv0Kqgz7be4ZVwvIw4IJywD9PQyYHdSLQ3IS4NxC0wF28H5dIG/
3oCc7iPli6SGxTf61LSzL7Rz/V7JxG3uaQENVAPn7C3JVbB91f7XnSuMYDhIxdSw
ucSxukpsmYb30coKnlbuaa1Z/SnOiWHsCHAmrT/62WzPx/YzmhsTbzPBmhf6AbR+
K1vsaSsYJk4u+QL46AGNfIIsSPJ7UKMN7UY5v9a1ahWuI0X9OLiaNC3lwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINRJWD9AvIyfXdbhfmYtDC3tQ2oMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvZzFFbFlQMEM4ako5ZDF1Ri1aaTBNTGUxRGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVejnMA0G
CSqGSIb3DQEBCwUAA4IBAQBfS3OXC9z5cWnqkJis1Wu2XdURuxcHuNyBA48x0mUg
ArXdAl6iAgxZikuCG+EoheJo6rEPvJ5wd9HmZprpmKLWPs0BY7yNi6En3K0MO0X7
VAc4GvvgvSXUJQn8sEP+foIrUHZ0iUp9B6Fd90ViYxhKTwGTIXfuA0yb3N/PEXBL
dDpc4tKL0BKe8Kb4wNRgbD1PL0uC+1TUHUJ4lAVTSPjo2LEvHmmCNLT6TY9p0hXK
05l+kEuzWaQkj3/7zhR4hmLRosZJEaYRthDvnVtUF7UOBKfKyXZHECJhCPK0G/te
U+Dpjg4fmEllPYQ5JizOMUGta2kf2uibSxhGO8XJyT7+
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:15 2024 by rpki-client on console.sobornost.net