Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/g-WsRW2-tWfF-x9_uY9_dBPGoBg.roa
File: g-WsRW2-tWfF-x9_uY9_dBPGoBg.roa (raw, json)
Hash identifier: A2UPeEPD43Ihnqh8yZXXHiWtqf5mOKk0FasT4g8eV4w=
Subject key identifier: 83:E5:AC:45:6D:BE:B5:67:C5:FB:1F:7F:B9:8F:7F:74:13:C6:A0:18
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B28D9CFCAD2080A4BAD069D41D091CD34
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/g-WsRW2-tWfF-x9_uY9_dBPGoBg.roa
Signing time: Fri 13 Oct 2023 11:44:05 +0000
ROA not before: Fri 13 Oct 2023 11:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 185.81.181.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:d9:cf:ca:d2:08:0a:4b:ad:06:9d:41:d0:91:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 13 11:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e5ac456dbeb567c5fb1f7fb98f7f7413c6a018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:75:5b:c4:7e:23:10:77:af:2b:79:c0:21:
83:eb:94:7b:94:c6:83:f4:02:a9:09:9a:bf:c3:d6:
07:7c:a2:f7:02:9a:af:8a:1d:ed:3a:c0:c0:70:72:
68:02:17:33:ab:41:20:2b:e6:40:7e:2c:e9:d4:da:
89:75:cc:21:46:32:5d:10:9f:6c:9b:c0:d1:6b:aa:
cb:dd:ef:c3:6a:e4:44:f1:89:6d:89:4d:05:7a:81:
89:d2:01:79:4a:c3:e3:ba:fa:d3:9b:9a:34:40:9c:
80:b2:35:ce:f7:6e:e2:08:37:06:90:57:1a:97:5c:
e4:d5:b9:f2:2b:cc:22:44:f3:68:ec:9e:44:7c:6f:
52:0f:91:6c:b7:ca:96:93:08:48:a1:cc:7e:a4:5c:
ef:ce:1d:c6:df:65:9d:42:a2:94:47:99:b0:ac:29:
61:f9:73:a6:5d:3c:8a:da:7c:df:aa:c7:e8:3f:e0:
89:6f:60:1e:81:4f:3c:6a:14:82:c5:1e:09:1a:12:
00:c8:b5:b2:f5:88:c7:44:bb:cc:05:ef:95:f8:fc:
e9:e1:9b:26:6a:23:12:5d:8b:ea:90:bf:b2:c2:d5:
02:5e:7a:37:f1:ba:21:13:45:d6:7e:f5:b3:14:5e:
de:e5:60:fe:cf:dc:fc:68:be:7d:1c:98:1b:5b:1e:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:AC:45:6D:BE:B5:67:C5:FB:1F:7F:B9:8F:7F:74:13:C6:A0:18
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/g-WsRW2-tWfF-x9_uY9_dBPGoBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
185.81.181.0/24
Signature Algorithm: sha256WithRSAEncryption
97:76:41:c3:ce:ff:69:5a:2d:cd:ae:5c:21:be:82:8c:fc:4b:
b1:10:e6:47:43:79:45:aa:51:39:fc:61:07:a4:35:82:6b:b4:
92:ce:85:ed:f5:db:94:b8:63:fe:6e:42:56:e7:7b:86:66:fa:
88:d6:74:ef:9b:9a:b1:ec:a8:0d:a3:6c:05:6b:33:21:e7:b9:
af:51:01:6a:d6:6d:4d:f1:a5:f1:6f:73:93:0b:7e:57:ec:1d:
62:2b:45:8e:ac:0a:ae:fa:a1:84:85:b5:31:14:ba:1e:c6:bb:
61:89:55:b0:5c:4d:52:d7:17:85:89:3a:96:12:49:62:9d:28:
5c:ad:73:8d:4c:1e:fd:73:99:b3:a6:0e:75:0b:95:49:47:48:
90:46:22:93:ce:ca:64:05:b1:e3:cd:32:bc:58:c7:c8:57:85:
29:97:8f:e9:d7:48:be:2c:16:ce:76:72:e1:b2:90:20:95:50:
91:d3:02:f2:b4:66:61:bc:12:a1:bb:65:7e:3f:70:b3:17:e3:
e1:0b:25:fd:ec:a5:7d:1a:c0:94:2b:70:f0:8c:00:45:df:ac:
8f:3e:f1:07:50:f1:8a:74:dc:9c:9d:81:3e:f4:8b:bd:28:1d:
98:1f:4a:23:b1:f1:7c:1b:50:18:62:bf:d0:98:22:f6:23:94:
c2:bf:98:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYso2c/K0ggKS60GnUHQkc00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMxMDEzMTE0NDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2U1YWM0NTZkYmViNTY3YzVmYjFmN2ZiOThmN2Y3NDEzYzZhMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZd1W8R+IxB3ryt5wCGD65R7lMaD
9AKpCZq/w9YHfKL3Apqvih3tOsDAcHJoAhczq0EgK+ZAfizp1NqJdcwhRjJdEJ9s
m8DRa6rL3e/DauRE8YltiU0FeoGJ0gF5SsPjuvrTm5o0QJyAsjXO927iCDcGkFca
l1zk1bnyK8wiRPNo7J5EfG9SD5Fst8qWkwhIocx+pFzvzh3G32WdQqKUR5mwrClh
+XOmXTyK2nzfqsfoP+CJb2AegU88ahSCxR4JGhIAyLWy9YjHRLvMBe+V+Pzp4Zsm
aiMSXYvqkL+ywtUCXno38bohE0XWfvWzFF7e5WD+z9z8aL59HJgbWx6cEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPlrEVtvrVnxfsff7mPf3QTxqAYMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvZy1Xc1JXMi10V2ZGLXg5X3VZOV9kQlBHb0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS4KAwQA
uVG1MA0GCSqGSIb3DQEBCwUAA4IBAQCXdkHDzv9pWi3NrlwhvoKM/EuxEOZHQ3lF
qlE5/GEHpDWCa7SSzoXt9duUuGP+bkJW53uGZvqI1nTvm5qx7KgNo2wFazMh57mv
UQFq1m1N8aXxb3OTC35X7B1iK0WOrAqu+qGEhbUxFLoexrthiVWwXE1S1xeFiTqW
EklinShcrXONTB79c5mzpg51C5VJR0iQRiKTzspkBbHjzTK8WMfIV4Upl4/p10i+
LBbOdnLhspAglVCR0wLytGZhvBKhu2V+P3CzF+PhCyX97KV9GsCUK3DwjABF36yP
PvEHUPGKdNycnYE+9Iu9KB2YH0ojsfF8G1AYYr/QmCL2I5TCv5hO
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net