Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SOYWZ68DQVSWxnE91glFrGlPqVU.roa
File: SOYWZ68DQVSWxnE91glFrGlPqVU.roa (raw, json)
Hash identifier: Koq6AeoIXTohU5tOzz4I2O1U644j8deqXhtPhDW6ltw=
Subject key identifier: 48:E6:16:67:AF:03:41:54:96:C6:71:3D:D6:09:45:AC:69:4F:A9:55
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0188FD3987946D15E6FC7FC3E3B4E42C4A49
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SOYWZ68DQVSWxnE91glFrGlPqVU.roa
Signing time: Tue 27 Jun 2023 14:19:45 +0000
ROA not before: Tue 27 Jun 2023 14:19:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.144.176.0/21 maxlen: 21
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:39:87:94:6d:15:e6:fc:7f:c3:e3:b4:e4:2c:4a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 27 14:19:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e61667af03415496c6713dd60945ac694fa955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:f2:b9:fc:3c:57:9c:a8:60:88:02:f4:47:
5b:6b:2f:53:d1:64:82:9f:85:6b:84:b3:d8:5a:81:
63:31:cd:48:2c:c1:ee:a8:9f:0c:19:b8:25:6c:05:
be:4e:de:7a:3c:d7:89:cd:81:6a:e4:86:96:6b:22:
3c:ba:d3:e2:ae:72:c4:11:82:fa:5d:eb:13:0f:f2:
b0:bc:96:02:5a:da:2f:a1:00:c9:87:74:32:10:22:
99:99:0b:96:77:19:92:ee:f8:5f:96:42:d0:37:6c:
70:ee:cb:fd:2e:9e:21:f1:79:ca:da:d9:b7:ce:70:
19:a3:32:66:8b:60:0f:cb:19:e4:a7:a4:f5:96:a3:
62:f2:11:34:81:01:f4:a5:f9:f8:90:51:c7:34:78:
59:0a:2c:d0:34:14:a9:db:0c:1d:42:bc:e7:2d:aa:
f9:55:d8:de:ce:59:b2:fd:b7:07:71:91:6e:b1:00:
f8:20:c1:3b:83:f1:3a:24:cb:89:7d:4e:15:7e:cf:
e1:18:ce:db:c3:c1:8f:f9:52:9f:13:43:6f:fe:8c:
0f:5f:60:9d:04:af:27:01:04:42:66:37:0e:bf:58:
3c:8d:1d:66:ba:cc:e2:1c:85:27:58:05:5a:bf:4d:
02:91:dd:49:1c:22:f9:3a:c6:cf:89:b7:98:1c:b1:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:16:67:AF:03:41:54:96:C6:71:3D:D6:09:45:AC:69:4F:A9:55
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SOYWZ68DQVSWxnE91glFrGlPqVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.176.0/21
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f2:82:ef:8c:15:cd:f2:11:69:29:a0:da:ce:1d:fe:c3:38:
7f:0b:66:5f:0c:cf:94:f9:07:bd:dd:bb:93:86:6b:14:7c:a9:
7d:34:1a:59:f3:05:6c:7a:17:e1:6c:48:67:89:03:76:40:d2:
5f:ee:85:9e:a0:b3:f8:10:d4:ae:12:98:0e:5c:5c:47:96:36:
58:78:ed:0d:5e:4e:b3:ab:9f:ae:e7:f0:a8:12:57:79:54:2e:
59:73:bd:86:67:94:e0:ea:8e:c6:a6:3b:37:74:1c:52:a1:bb:
8d:cd:99:f4:fe:ae:bf:d1:0c:6c:a1:31:28:94:f3:5f:ae:72:
d5:dd:6c:33:af:b9:70:23:46:af:f1:4e:57:6f:10:6c:51:0c:
1b:ee:d7:d6:53:24:ea:93:b6:84:e8:48:59:3e:39:84:7a:7b:
e5:4a:f0:8a:22:85:92:9c:ae:f5:68:8f:28:b6:89:ba:51:aa:
1d:2c:67:11:db:51:0a:8f:1c:5e:88:cc:82:fc:eb:76:66:e0:
f2:5a:41:a1:14:7e:38:4a:67:0f:a1:61:ac:4f:8a:8f:4d:76:
61:e6:00:1f:e2:37:bd:c2:ac:4f:a2:06:1c:07:cb:46:87:eb:
b1:46:e0:94:ca:71:48:dd:bf:21:f5:04:33:7e:87:bd:97:35:
97:0f:7a:0b
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAYj9OYeUbRXm/H/D47TkLEpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjMwNjI3MTQxOTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGU2MTY2N2FmMDM0MTU0OTZjNjcxM2RkNjA5NDVhYzY5NGZhOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjLyufw8V5yoYIgC9Edbay9T0WSC
n4VrhLPYWoFjMc1ILMHuqJ8MGbglbAW+Tt56PNeJzYFq5IaWayI8utPirnLEEYL6
XesTD/KwvJYCWtovoQDJh3QyECKZmQuWdxmS7vhflkLQN2xw7sv9Lp4h8XnK2tm3
znAZozJmi2APyxnkp6T1lqNi8hE0gQH0pfn4kFHHNHhZCizQNBSp2wwdQrznLar5
Vdjezlmy/bcHcZFusQD4IME7g/E6JMuJfU4Vfs/hGM7bw8GP+VKfE0Nv/owPX2Cd
BK8nAQRCZjcOv1g8jR1musziHIUnWAVav00Ckd1JHCL5OsbPibeYHLGjLwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFEjmFmevA0FUlsZxPdYJRaxpT6lVMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvU09ZV1o2OERRVlNXeG5FOTFnbEZyR2xQcVZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzBNBAIAATBHAwQABSf4MAsD
BAEFJ/oDAwMFIAMEAwWQsDAMAwQFBbJgAwQABbJkMAwDBAMFsmgDBAAFsmoDBAMf
wPADBAItDNgDBAK5BSQwDQYJKoZIhvcNAQELBQADggEBAHjygu+MFc3yEWkpoNrO
Hf7DOH8LZl8Mz5T5B73du5OGaxR8qX00GlnzBWx6F+FsSGeJA3ZA0l/uhZ6gs/gQ
1K4SmA5cXEeWNlh47Q1eTrOrn67n8KgSV3lULllzvYZnlODqjsamOzd0HFKhu43N
mfT+rr/RDGyhMSiU81+uctXdbDOvuXAjRq/xTldvEGxRDBvu19ZTJOqTtoToSFk+
OYR6e+VK8IoihZKcrvVojyi2ibpRqh0sZxHbUQqPHF6IzIL863Zm4PJaQaEUfjhK
Zw+hYaxPio9NdmHmAB/iN73CrE+iBhwHy0aH67FG4JTKcUjdvyH1BDN+h72XNZcP
egs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net