Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-K-Iul6FzWppb3fSkjPR96Zb87M.roa
File: 1-K-Iul6FzWppb3fSkjPR96Zb87M.roa (raw, json)
Hash identifier: 1l72q9FrErfrORiexUbNko+jXNHs+sgfeq32Qeu7Ev0=
Subject key identifier: F8:AF:88:BA:5E:85:CD:6A:69:6F:77:D2:92:33:D1:F7:A6:5B:F3:B3
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018BD8A78FB00CF571EE434E175FBD22A13E
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-K-Iul6FzWppb3fSkjPR96Zb87M.roa
Signing time: Thu 16 Nov 2023 15:02:21 +0000
ROA not before: Thu 16 Nov 2023 15:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201917
IP address blocks: 195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:a7:8f:b0:0c:f5:71:ee:43:4e:17:5f:bd:22:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Nov 16 15:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8af88ba5e85cd6a696f77d29233d1f7a65bf3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:b0:1d:89:87:7d:b9:4b:42:6e:58:cc:63:
61:fe:c6:d3:88:96:44:97:ee:0a:b6:8c:79:0a:3f:
bc:26:08:72:e9:23:f7:4f:d4:93:f8:18:b1:99:14:
b6:5e:6c:83:21:78:45:4e:64:7a:96:ac:50:22:91:
2f:c5:28:38:ce:ee:b4:1f:ca:cb:b4:e2:cd:1c:87:
ce:97:b3:1e:6c:a1:c9:71:f9:99:29:24:e0:ae:3f:
4d:14:9b:c7:65:63:08:3c:b8:af:d7:d2:f8:49:50:
66:9d:06:99:96:0b:98:5b:13:4a:2a:81:cd:c1:c9:
c4:05:6a:50:0a:21:48:d7:27:4f:13:c8:33:2d:06:
b0:81:83:ff:49:04:f2:75:2d:35:57:21:3b:95:82:
df:b1:8c:56:29:0d:62:b4:c7:1b:04:68:24:73:02:
07:35:a3:7e:82:c1:6b:f8:5d:6e:b7:19:6d:0e:10:
af:95:81:29:9b:cd:8f:80:da:d5:b1:9c:50:d7:0c:
24:9f:3c:3c:e9:99:05:cb:ee:81:55:5d:02:9e:c6:
4a:4d:c5:1e:3e:be:c7:0b:c6:ff:a7:5c:ef:0e:7c:
b2:8b:d6:36:45:7e:b8:82:0f:ed:31:3a:4b:59:5a:
e6:3c:33:fc:29:de:a9:c3:ef:0d:ef:3b:d1:40:b3:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:88:BA:5E:85:CD:6A:69:6F:77:D2:92:33:D1:F7:A6:5B:F3:B3
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-K-Iul6FzWppb3fSkjPR96Zb87M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.232.128.0-195.233.255.255
Signature Algorithm: sha256WithRSAEncryption
ae:8f:80:d3:23:d4:29:db:4d:f5:2f:24:21:df:6b:64:4b:c7:
58:98:3b:e4:15:59:7b:3c:4a:65:57:22:ae:c4:ba:5e:1c:4c:
63:b7:ff:a9:61:af:0e:de:b6:98:2a:df:98:b0:87:10:62:db:
79:84:b1:ae:fc:9e:1b:42:aa:2e:c7:e7:c6:fd:d9:f0:74:d7:
54:90:f3:75:e9:50:4e:93:41:e7:9c:a0:86:8f:2a:66:3d:3f:
3a:d4:3e:ee:3e:a8:70:f9:7e:42:46:ce:21:b9:5f:98:34:fb:
f7:c6:8b:c0:88:cb:1b:a1:7d:a5:45:41:08:fa:e1:55:ec:37:
e3:e6:7d:fd:b6:a1:31:45:4c:73:7b:68:67:4b:18:0d:8f:f0:
db:9c:1a:69:8e:9f:c7:81:6c:64:55:80:37:ce:7d:2d:c0:4e:
3f:93:9f:14:e6:ef:55:6a:19:04:75:a6:52:8d:db:ff:d4:62:
2f:32:c2:fd:72:b0:ef:86:93:c5:42:a9:bf:7a:a1:02:4c:27:
a0:fa:3a:f2:14:b5:52:6a:12:82:7e:f3:d9:6e:dd:78:81:6c:
4a:8e:f7:fc:a5:be:76:6e:21:e2:5a:4b:fe:32:72:fa:1d:3c:
43:b7:3c:bc:3e:4e:0f:65:87:f2:83:25:81:c6:db:b2:a1:ef:
b4:98:15:aa
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYvYp4+wDPVx7kNOF1+9IqE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3
NTE1ZDIwHhcNMjMxMTE2MTUwMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGFmODhiYTVlODVjZDZhNjk2Zjc3ZDI5MjMzZDFmN2E2NWJmM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT2wHYmHfblLQm5YzGNh/sbTiJZE
l+4Ktox5Cj+8Jghy6SP3T9ST+BixmRS2XmyDIXhFTmR6lqxQIpEvxSg4zu60H8rL
tOLNHIfOl7MebKHJcfmZKSTgrj9NFJvHZWMIPLiv19L4SVBmnQaZlguYWxNKKoHN
wcnEBWpQCiFI1ydPE8gzLQawgYP/SQTydS01VyE7lYLfsYxWKQ1itMcbBGgkcwIH
NaN+gsFr+F1utxltDhCvlYEpm82PgNrVsZxQ1wwknzw86ZkFy+6BVV0CnsZKTcUe
Pr7HC8b/p1zvDnyyi9Y2RX64gg/tMTpLWVrmPDP8Kd6pw+8N7zvRQLNTNwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPiviLpehc1qaW930pIz0femW/OzMB8GA1UdIwQY
MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEvMS1LLUl1bDZGeldwcGIzZlNralBSOTZaYjg3TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjgvMjllOWJjLWIxOTAtNDA5ZS04NmIwLWVlYzVkNTBlZmE5
NC8xL3M2WFptR1BiTGttMFQyd3lUckJEaVB4MUZkSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAmBggrBgEFBQcBBwEB/wQXMBUwEwQCAAEwDTALAwQHw+iA
AwMBw+gwDQYJKoZIhvcNAQELBQADggEBAK6PgNMj1CnbTfUvJCHfa2RLx1iYO+QV
WXs8SmVXIq7Eul4cTGO3/6lhrw7etpgq35iwhxBi23mEsa78nhtCqi7H58b92fB0
11SQ83XpUE6TQeecoIaPKmY9PzrUPu4+qHD5fkJGziG5X5g0+/fGi8CIyxuhfaVF
QQj64VXsN+Pmff22oTFFTHN7aGdLGA2P8NucGmmOn8eBbGRVgDfOfS3ATj+TnxTm
71VqGQR1plKN2//UYi8ywv1ysO+Gk8VCqb96oQJMJ6D6OvIUtVJqEoJ+89lu3XiB
bEqO9/ylvnZuIeJaS/4ycvodPEO3PLw+Tg9lh/KDJYHG27Kh77SYFao=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net