Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mVOyEAzIW5f1O22p8vXJAs_Vot4.roa
File: mVOyEAzIW5f1O22p8vXJAs_Vot4.roa (raw, json)
Hash identifier: K2UAvSVgLd3Oreahw0CsjOqP9ZkPr/8bVLNBg9joMhc=
Subject key identifier: 99:53:B2:10:0C:C8:5B:97:F5:3B:6D:A9:F2:F5:C9:02:CF:D5:A2:DE
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018B9C7F63DD9BFCD219C9817680D4CC4ED0
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mVOyEAzIW5f1O22p8vXJAs_Vot4.roa
Signing time: Sat 04 Nov 2023 22:41:16 +0000
ROA not before: Sat 04 Nov 2023 22:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.251.0.0/23 maxlen: 23
87.251.2.0/24 maxlen: 24
87.251.4.0/23 maxlen: 23
87.251.10.0/23 maxlen: 23
87.251.7.0/24 maxlen: 24
87.251.8.0/23 maxlen: 23
87.251.17.0/24 maxlen: 24
87.251.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:7f:63:dd:9b:fc:d2:19:c9:81:76:80:d4:cc:4e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Nov 4 22:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9953b2100cc85b97f53b6da9f2f5c902cfd5a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:5c:69:57:01:ab:fd:0b:61:05:14:38:ad:
b9:c1:08:41:b9:4e:82:48:6c:dd:02:94:23:57:a0:
6c:d6:73:6a:0e:c7:26:53:20:db:89:f7:d4:2b:63:
93:84:8e:53:e3:84:de:6a:26:d2:dc:fd:31:0d:1a:
7c:6f:f6:e3:60:10:03:5b:73:5f:d0:f1:68:15:8e:
23:de:57:f0:ba:cc:04:53:dd:2d:e3:fc:d3:7a:ef:
3b:a8:c9:72:ac:a2:b2:ba:e5:a4:fa:fc:a9:a5:06:
e5:83:83:68:d3:16:bb:5e:d1:58:36:b1:15:8e:fe:
e5:4a:bc:cf:11:ad:8c:7f:5d:a3:66:dc:60:e9:f4:
9b:56:f4:92:6f:ad:43:f0:a0:1c:0a:4a:3a:0b:57:
f0:67:20:15:0c:02:7c:ad:38:9f:39:3b:92:80:7a:
53:33:89:59:44:2c:ab:bb:82:00:27:7c:37:48:30:
39:01:90:e7:fe:c0:44:e9:71:c7:e1:a9:bc:02:3b:
d7:92:26:8f:a8:44:9d:a8:a7:04:7d:c5:bb:be:40:
3f:7a:45:22:f1:8d:1a:7e:55:8c:4a:81:0b:49:95:
8b:05:87:33:4a:b7:80:8a:f7:34:5c:36:2d:67:06:
e8:66:44:9d:62:45:88:83:d3:0b:3d:89:0b:90:ed:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:B2:10:0C:C8:5B:97:F5:3B:6D:A9:F2:F5:C9:02:CF:D5:A2:DE
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mVOyEAzIW5f1O22p8vXJAs_Vot4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0-87.251.2.255
87.251.4.0/23
87.251.7.0-87.251.11.255
87.251.17.0/24
87.251.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:69:ee:85:49:a4:80:10:4f:7a:d8:da:8f:e6:b6:86:72:ab:
60:4d:de:d9:ea:0b:e1:24:2c:7b:89:dd:87:34:0d:c4:2f:ea:
f0:23:37:75:44:c8:f0:c7:75:e6:19:93:de:bf:4e:59:25:50:
6f:5d:8d:1e:24:73:4b:ce:74:2f:62:b2:9c:bd:83:6c:46:b1:
25:38:8f:e8:18:65:58:88:ce:a4:6a:bc:cd:63:b1:ab:be:31:
ad:67:2e:93:ba:82:d7:6e:e5:cc:a6:d1:f1:48:19:2e:6a:62:
f5:f0:d3:1f:a6:e7:91:1a:77:63:b0:d5:0e:cf:c9:2f:22:7b:
0c:28:be:56:22:26:4c:75:61:73:85:4e:27:a0:2a:76:14:0e:
95:53:9a:f0:62:96:2a:48:fb:86:d0:56:d8:4f:86:e3:80:7b:
24:9a:b2:36:b2:b7:98:dd:9f:a8:22:6b:36:68:1a:2b:b1:ca:
de:24:ca:12:0d:68:ed:17:6b:80:fe:7f:87:1b:e8:db:df:38:
b0:85:63:f5:c9:3c:e5:47:3f:12:2b:38:30:7c:e6:dc:ff:c4:
6a:db:94:99:09:99:f0:71:85:6f:07:c5:f5:6a:f9:5a:f7:7c:
79:ac:05:20:f9:29:11:c1:83:3e:8c:c2:7e:27:00:fe:c6:ea:
d5:0f:07:0f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYucf2Pdm/zSGcmBdoDUzE7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjMxMTA0MjI0MTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTUzYjIxMDBjYzg1Yjk3ZjUzYjZkYTlmMmY1YzkwMmNmZDVhMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia9caVcBq/0LYQUUOK25wQhBuU6C
SGzdApQjV6Bs1nNqDscmUyDbiffUK2OThI5T44TeaibS3P0xDRp8b/bjYBADW3Nf
0PFoFY4j3lfwuswEU90t4/zTeu87qMlyrKKyuuWk+vyppQblg4No0xa7XtFYNrEV
jv7lSrzPEa2Mf12jZtxg6fSbVvSSb61D8KAcCko6C1fwZyAVDAJ8rTifOTuSgHpT
M4lZRCyru4IAJ3w3SDA5AZDn/sBE6XHH4am8AjvXkiaPqESdqKcEfcW7vkA/ekUi
8Y0aflWMSoELSZWLBYczSreAivc0XDYtZwboZkSdYkWIg9MLPYkLkO2tKwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJlTshAMyFuX9TttqfL1yQLP1aLeMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvbVZPeUVBeklXNWYxTzIycDh2WEpBc19Wb3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAATAtMAsDAwBX+wME
AFf7AgMEAVf7BDAMAwQAV/sHAwQCV/sIAwQAV/sRAwQCV/sUMA0GCSqGSIb3DQEB
CwUAA4IBAQCNae6FSaSAEE962NqP5raGcqtgTd7Z6gvhJCx7id2HNA3EL+rwIzd1
RMjwx3XmGZPev05ZJVBvXY0eJHNLznQvYrKcvYNsRrElOI/oGGVYiM6karzNY7Gr
vjGtZy6TuoLXbuXMptHxSBkuamL18NMfpueRGndjsNUOz8kvInsMKL5WIiZMdWFz
hU4noCp2FA6VU5rwYpYqSPuG0FbYT4bjgHskmrI2sreY3Z+oIms2aBorscreJMoS
DWjtF2uA/n+HG+jb3ziwhWP1yTzlRz8SKzgwfObc/8Rq25SZCZnwcYVvB8X1avla
93x5rAUg+SkRwYM+jMJ+JwD+xurVDwcP
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:27 2024 by rpki-client on console.sobornost.net