Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/5E3hUy9ibgLwbIUTUcaaBd9g-rk.roa
File: 5E3hUy9ibgLwbIUTUcaaBd9g-rk.roa (raw, json)
Hash identifier: 8RRlGCdIySTQhAkSerj2/57WCT1leCxJNJO4vvV9Sm0=
Subject key identifier: E4:4D:E1:53:2F:62:6E:02:F0:6C:85:13:51:C6:9A:05:DF:60:FA:B9
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01857356297A98126F91AC7519827EAADB91
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/5E3hUy9ibgLwbIUTUcaaBd9g-rk.roa
Signing time: Mon 02 Jan 2023 16:35:04 +0000
ROA not before: Mon 02 Jan 2023 16:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202924
IP address blocks: 82.222.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:29:7a:98:12:6f:91:ac:75:19:82:7e:aa:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44de1532f626e02f06c851351c69a05df60fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:d9:31:43:86:de:66:9a:1d:df:48:be:52:
7d:be:46:38:d5:69:8e:17:ba:87:f1:75:97:4c:d9:
65:d2:c0:e5:de:7d:fd:0e:be:df:24:d2:82:0b:50:
1a:ce:38:95:9b:48:67:a0:64:49:d9:16:29:92:1a:
27:7e:9f:5a:89:81:2a:d4:01:69:13:8d:fc:7b:f5:
af:bd:0d:5a:90:d5:2e:07:5b:e6:f6:e0:85:9e:22:
e0:13:de:a5:27:81:76:98:5d:6a:a9:e2:b8:32:4e:
55:d3:55:c2:f8:12:b9:01:9e:7a:95:60:26:5e:5a:
b3:cd:e7:36:d0:fb:be:b8:c4:7a:7b:ac:7b:55:2d:
3a:e2:de:7c:68:97:3a:f3:fb:db:53:fd:eb:1a:f8:
12:b4:85:59:47:39:5a:ab:fc:3c:85:9f:a6:1b:01:
f4:28:36:44:36:c3:79:9b:46:ff:49:eb:5a:a9:55:
d2:67:1d:bc:b7:03:a7:67:ea:98:c7:fe:3d:de:88:
87:04:65:94:4e:fe:60:06:45:20:0f:a5:97:74:cb:
60:64:66:68:8a:01:de:f0:8f:a6:8c:32:6a:42:ae:
31:24:12:fa:ad:fb:19:f3:9d:d2:25:20:6a:ce:b6:
50:3d:c6:a1:00:51:cd:b7:22:f3:4e:85:95:b0:8c:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4D:E1:53:2F:62:6E:02:F0:6C:85:13:51:C6:9A:05:DF:60:FA:B9
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/5E3hUy9ibgLwbIUTUcaaBd9g-rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c9:38:2e:71:21:46:e1:7f:ef:22:3b:dd:eb:d1:4a:e6:85:
dd:12:d6:72:fd:9e:6e:e4:c9:50:2f:91:4c:83:27:ba:4f:30:
3e:eb:a8:83:7d:cb:f9:42:65:4f:ff:8c:49:45:60:bf:be:47:
80:3b:c4:7c:c6:73:48:7b:12:5c:92:c1:e0:0f:d7:dc:ce:49:
ca:35:76:be:9c:3d:fd:2e:03:b3:3f:bd:62:d7:47:91:bb:f5:
e9:e2:86:a0:1e:4f:b7:3a:48:ed:8d:1f:9e:25:e4:e2:23:f4:
f7:d8:81:9c:0d:86:fa:c5:89:f5:21:00:de:9d:65:67:6b:f6:
b1:cf:ae:28:bb:ec:05:ec:ca:8f:11:df:6c:8e:1b:57:d5:f4:
88:54:cf:a9:f2:e9:71:05:4e:bf:cb:08:8e:80:22:fd:a9:31:
d4:59:22:8a:92:bc:26:58:9b:a4:f9:5d:61:b3:83:25:f2:27:
ed:91:fb:b1:47:bd:ea:66:b2:7f:82:c2:e0:bd:8b:f1:89:2b:
e9:f3:8e:4e:65:ed:74:b2:d0:cd:63:29:4b:41:6f:2f:ba:9f:
1e:26:45:5d:cf:b8:18:ee:46:45:67:e8:f7:39:95:b2:f6:72:
db:ce:df:df:10:5e:b1:e8:ec:9c:5d:74:1e:21:16:5f:2b:16:
02:3b:c8:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVil6mBJvkax1GYJ+qtuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjMwMTAyMTYzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDRkZTE1MzJmNjI2ZTAyZjA2Yzg1MTM1MWM2OWEwNWRmNjBmYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfzZMUOG3maaHd9IvlJ9vkY41WmO
F7qH8XWXTNll0sDl3n39Dr7fJNKCC1AazjiVm0hnoGRJ2RYpkhonfp9aiYEq1AFp
E438e/WvvQ1akNUuB1vm9uCFniLgE96lJ4F2mF1qqeK4Mk5V01XC+BK5AZ56lWAm
Xlqzzec20Pu+uMR6e6x7VS064t58aJc68/vbU/3rGvgStIVZRzlaq/w8hZ+mGwH0
KDZENsN5m0b/SetaqVXSZx28twOnZ+qYx/493oiHBGWUTv5gBkUgD6WXdMtgZGZo
igHe8I+mjDJqQq4xJBL6rfsZ853SJSBqzrZQPcahAFHNtyLzToWVsIwW8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORN4VMvYm4C8GyFE1HGmgXfYPq5MB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvNUUzaFV5OWliZ0x3YklVVFVjYWFCZDlnLXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUt5TMA0G
CSqGSIb3DQEBCwUAA4IBAQCiyTgucSFG4X/vIjvd69FK5oXdEtZy/Z5u5MlQL5FM
gye6TzA+66iDfcv5QmVP/4xJRWC/vkeAO8R8xnNIexJcksHgD9fczknKNXa+nD39
LgOzP71i10eRu/Xp4oagHk+3OkjtjR+eJeTiI/T32IGcDYb6xYn1IQDenWVna/ax
z64ou+wF7MqPEd9sjhtX1fSIVM+p8ulxBU6/ywiOgCL9qTHUWSKKkrwmWJuk+V1h
s4Ml8iftkfuxR73qZrJ/gsLgvYvxiSvp845OZe10stDNYylLQW8vup8eJkVdz7gY
7kZFZ+j3OZWy9nLbzt/fEF6x6OycXXQeIRZfKxYCO8it
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:30 2024 by rpki-client on console.sobornost.net