Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oBbzmK3idzVaZ0ENA9six_hzlh4.roa
File: oBbzmK3idzVaZ0ENA9six_hzlh4.roa (raw, json)
Hash identifier: LZxrSPVwI/j8s4y/MXvL2i3Iz3aIbLtFe2iSlugYRjY=
Subject key identifier: A0:16:F3:98:AD:E2:77:35:5A:67:41:0D:03:DB:22:C7:F8:73:96:1E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0188E7F9A0CCA5E8FD37D35698E8715A8EB1
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oBbzmK3idzVaZ0ENA9six_hzlh4.roa
Signing time: Fri 23 Jun 2023 11:17:56 +0000
ROA not before: Fri 23 Jun 2023 11:17:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 188.209.128.0/22 maxlen: 22
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:f9:a0:cc:a5:e8:fd:37:d3:56:98:e8:71:5a:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 23 11:17:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a016f398ade277355a67410d03db22c7f873961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:de:14:81:ac:bc:f2:18:11:1f:d0:6d:03:
ec:71:0e:44:89:21:93:2f:37:d1:2b:a9:0c:b1:41:
5a:3d:48:62:11:2c:93:6b:a9:60:cb:2a:99:51:c3:
3c:9c:5c:75:24:99:b7:38:37:9f:61:ec:8c:5b:2e:
52:80:99:5b:39:b0:6d:85:30:f0:98:92:d3:37:64:
f9:ae:2d:40:a4:48:03:8c:2c:83:7e:77:59:8c:a9:
7b:d6:d8:1e:53:27:70:63:94:70:30:c1:44:16:f4:
1e:26:56:2c:ab:17:b9:82:3d:bc:3c:1b:8d:71:7b:
fd:50:93:26:5f:ca:27:19:08:f2:37:6a:03:da:fa:
d0:86:d0:38:fe:81:88:2c:1f:90:29:ee:39:b2:65:
f3:5a:2d:03:f0:5d:b2:82:fa:66:1a:5e:4c:27:d7:
ad:e5:58:92:29:66:dc:16:3c:34:e6:bd:53:12:a9:
dc:92:2d:1d:66:55:e5:fa:1c:23:90:bb:5d:f2:8d:
9e:20:5e:6d:3d:87:f2:ec:51:08:58:a6:54:38:71:
f1:29:bb:78:31:30:1f:80:cf:cd:2f:7e:92:83:cc:
f8:07:4b:71:49:f6:ac:c3:9e:82:71:1f:49:8b:6a:
98:f1:ab:62:55:3b:75:72:9a:b4:5c:ca:f7:43:f9:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:F3:98:AD:E2:77:35:5A:67:41:0D:03:DB:22:C7:F8:73:96:1E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oBbzmK3idzVaZ0ENA9six_hzlh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
67:76:3f:18:c3:05:db:8e:81:e0:a9:09:2d:e7:95:8f:72:3f:
e9:3f:81:27:66:8a:d5:e2:05:30:91:6c:85:43:2a:f7:a4:fe:
c7:63:a0:20:9c:05:22:c3:2c:bd:5e:75:10:91:27:f3:e6:71:
37:71:4c:d7:8a:79:c9:23:91:56:c0:a8:83:81:fa:e9:d8:1e:
1c:c2:e9:f2:da:2f:e6:05:55:07:d8:2d:31:16:25:4c:bd:ca:
b0:1b:50:d2:40:28:31:be:37:e8:20:61:af:8d:24:26:01:c3:
97:e9:37:d7:d1:6b:83:12:29:a4:46:1f:26:a8:0e:ae:78:bd:
5b:7d:cf:2f:4c:c8:71:06:10:10:9b:8c:1a:22:69:52:18:cf:
ae:d8:2b:a8:d5:6d:3f:ce:f6:f1:19:77:b8:04:95:01:ed:b9:
75:70:62:13:69:86:06:c1:26:d6:d9:63:b1:51:9d:5e:b8:39:
b4:6e:30:b9:ee:9d:d0:b4:60:12:4e:e4:22:46:a6:ab:04:63:
74:4f:ca:2b:ee:63:8b:0b:2f:ff:f0:1f:b0:ab:f3:f2:0e:8a:
0f:7d:bf:88:b4:fe:18:fe:e0:ef:c7:60:ae:e3:22:b6:54:05:
25:c9:47:f4:12:a5:4b:46:f3:2b:8c:4d:a1:ec:7f:21:1a:4d:
00:75:86:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjn+aDMpej9N9NWmOhxWo6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwNjIzMTExNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDE2ZjM5OGFkZTI3NzM1NWE2NzQxMGQwM2RiMjJjN2Y4NzM5NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQHeFIGsvPIYER/QbQPscQ5EiSGT
LzfRK6kMsUFaPUhiESyTa6lgyyqZUcM8nFx1JJm3ODefYeyMWy5SgJlbObBthTDw
mJLTN2T5ri1ApEgDjCyDfndZjKl71tgeUydwY5RwMMFEFvQeJlYsqxe5gj28PBuN
cXv9UJMmX8onGQjyN2oD2vrQhtA4/oGILB+QKe45smXzWi0D8F2ygvpmGl5MJ9et
5ViSKWbcFjw05r1TEqncki0dZlXl+hwjkLtd8o2eIF5tPYfy7FEIWKZUOHHxKbt4
MTAfgM/NL36Sg8z4B0txSfasw56CcR9Ji2qY8atiVTt1cpq0XMr3Q/k5HQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKAW85it4nc1WmdBDQPbIsf4c5YeMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvb0Jiem1LM2lkelZhWjBFTkE5c2l4X2h6bGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvNGAAwQC
vNGMMA0GCSqGSIb3DQEBCwUAA4IBAQBndj8YwwXbjoHgqQkt55WPcj/pP4EnZorV
4gUwkWyFQyr3pP7HY6AgnAUiwyy9XnUQkSfz5nE3cUzXinnJI5FWwKiDgfrp2B4c
wuny2i/mBVUH2C0xFiVMvcqwG1DSQCgxvjfoIGGvjSQmAcOX6TfX0WuDEimkRh8m
qA6ueL1bfc8vTMhxBhAQm4waImlSGM+u2Cuo1W0/zvbxGXe4BJUB7bl1cGITaYYG
wSbW2WOxUZ1euDm0bjC57p3QtGASTuQiRqarBGN0T8or7mOLCy//8B+wq/PyDooP
fb+ItP4Y/uDvx2Cu4yK2VAUlyUf0EqVLRvMrjE2h7H8hGk0AdYZX
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net