Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Sn_jH7x5DfQehoO3xvylHH0A3-w.roa
File: Sn_jH7x5DfQehoO3xvylHH0A3-w.roa (raw, json)
Hash identifier: PVIttzia4NWARLwDFWGPQKvdPXoJ0ieQiE+vUjmaMCk=
Subject key identifier: 4A:7F:E3:1F:BC:79:0D:F4:1E:86:83:B7:C6:FC:A5:1C:7D:00:DF:EC
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AF525D4DC04670E42E467EC1A4B22B2ED
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Sn_jH7x5DfQehoO3xvylHH0A3-w.roa
Signing time: Tue 03 Oct 2023 10:46:51 +0000
ROA not before: Tue 03 Oct 2023 10:46:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.251.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:25:d4:dc:04:67:0e:42:e4:67:ec:1a:4b:22:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 3 10:46:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a7fe31fbc790df41e8683b7c6fca51c7d00dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:4e:ea:35:b7:3f:92:63:dd:aa:d4:6c:b8:
ea:99:5b:fa:7a:cd:52:22:b3:8f:2f:70:11:60:0d:
31:96:22:62:f2:08:05:44:64:6f:7c:81:51:a5:82:
f1:f9:ce:3d:92:a1:94:26:3f:c9:67:53:76:ce:bb:
5b:98:38:48:4a:13:aa:20:4f:27:9a:20:8a:8a:f7:
fd:37:fd:1e:fd:d2:6f:fc:a1:b1:60:31:40:1d:15:
22:2d:7b:25:06:df:e5:2f:18:7c:4d:dc:cb:a8:07:
9f:9d:07:0a:92:60:de:30:99:4d:96:50:2f:65:d5:
18:0d:e4:06:14:49:98:ef:7c:35:91:43:44:c0:90:
de:40:84:96:c3:87:76:07:a3:33:a8:c1:fb:b6:95:
5b:5a:c6:ae:87:74:1d:4a:15:73:b3:fd:a6:f3:d8:
06:7d:c3:70:ab:a6:a7:63:72:92:ba:1e:7f:77:71:
6a:55:9a:2e:62:5e:54:59:fa:60:c6:64:b6:12:c9:
73:d6:6e:d1:d2:d0:ae:fb:fc:db:b1:a8:cc:78:e8:
14:52:4a:29:f9:ec:31:0c:2e:79:7c:6d:8d:f4:a3:
f3:9b:d2:8c:02:6d:a1:23:d8:c2:b5:4b:d2:48:15:
b7:f6:9f:f4:b5:27:3b:bf:a2:b6:0c:db:60:c0:43:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:E3:1F:BC:79:0D:F4:1E:86:83:B7:C6:FC:A5:1C:7D:00:DF:EC
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Sn_jH7x5DfQehoO3xvylHH0A3-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4e:e1:97:6a:65:8a:81:5a:f9:8a:4d:24:de:a2:2c:6f:4d:
40:fa:db:d0:2f:d6:8d:74:8d:47:b7:57:5c:5f:a6:79:03:d3:
2e:22:89:20:18:27:91:9e:54:ae:2b:bf:cb:5d:e2:a4:3f:2c:
94:5d:bc:28:08:19:23:d1:24:c0:c5:11:4d:e4:5a:d3:b8:5e:
81:ec:ff:32:69:29:19:37:f1:2e:81:0b:cd:39:37:c6:f8:24:
da:4c:b7:86:67:f4:5c:0c:b0:e5:7b:e4:c2:14:f2:09:3e:5d:
5b:a1:b1:a9:e2:e0:35:19:28:06:72:a2:cd:92:cb:cf:2b:1b:
e6:12:a9:f3:ca:98:86:02:ce:a0:9f:7d:ad:6b:66:33:68:9f:
91:b1:e7:69:b3:9b:cc:73:e9:d5:0b:dc:3c:ff:14:c5:57:7d:
cb:a9:cc:82:12:74:eb:68:59:31:64:47:56:10:d1:5e:49:d0:
1b:65:47:da:14:4c:6b:e4:67:b0:e9:ff:94:50:88:ae:8c:f3:
d4:0a:ac:d2:5a:bb:3e:67:93:70:70:2c:de:fb:7c:ab:29:00:
38:cd:7c:a0:fa:32:d5:e4:6a:80:4b:2c:51:41:6b:f9:a5:80:
48:7b:12:50:d0:15:af:d2:de:13:36:cb:ee:3d:b5:05:d7:1f:
8d:0a:4f:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr1JdTcBGcOQuRn7BpLIrLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjMxMDAzMTA0NjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTdmZTMxZmJjNzkwZGY0MWU4NjgzYjdjNmZjYTUxYzdkMDBkZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSZO6jW3P5Jj3arUbLjqmVv6es1S
IrOPL3ARYA0xliJi8ggFRGRvfIFRpYLx+c49kqGUJj/JZ1N2zrtbmDhIShOqIE8n
miCKivf9N/0e/dJv/KGxYDFAHRUiLXslBt/lLxh8TdzLqAefnQcKkmDeMJlNllAv
ZdUYDeQGFEmY73w1kUNEwJDeQISWw4d2B6MzqMH7tpVbWsauh3QdShVzs/2m89gG
fcNwq6anY3KSuh5/d3FqVZouYl5UWfpgxmS2Eslz1m7R0tCu+/zbsajMeOgUUkop
+ewxDC55fG2N9KPzm9KMAm2hI9jCtUvSSBW39p/0tSc7v6K2DNtgwEN+KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEp/4x+8eQ30HoaDt8b8pRx9AN/sMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvU25fakg3eDVEZlFlaG9PM3h2eWxISDBBMy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/sDMA0G
CSqGSIb3DQEBCwUAA4IBAQCtTuGXamWKgVr5ik0k3qIsb01A+tvQL9aNdI1Ht1dc
X6Z5A9MuIokgGCeRnlSuK7/LXeKkPyyUXbwoCBkj0STAxRFN5FrTuF6B7P8yaSkZ
N/EugQvNOTfG+CTaTLeGZ/RcDLDle+TCFPIJPl1bobGp4uA1GSgGcqLNksvPKxvm
EqnzypiGAs6gn32ta2YzaJ+Rsedps5vMc+nVC9w8/xTFV33LqcyCEnTraFkxZEdW
ENFeSdAbZUfaFExr5Gew6f+UUIiujPPUCqzSWrs+Z5NwcCze+3yrKQA4zXyg+jLV
5GqASyxRQWv5pYBIexJQ0BWv0t4TNsvuPbUF1x+NCk8A
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:27 2024 by rpki-client on console.sobornost.net