Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/1-vVbPIJT7Y2he0cG3Gyx_uOiD0E.roa
File: 1-vVbPIJT7Y2he0cG3Gyx_uOiD0E.roa (raw, json)
Hash identifier: nxFuE2/PSo6O4ZPdEiyUFpOnN6IsHFztdlp6oRN021M=
Subject key identifier: FA:F5:5B:3C:82:53:ED:8D:A1:7B:47:06:DC:6C:B1:FE:E3:A2:0F:41
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 0186C1CC3D653943FF9109571C791A0B736C
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/1-vVbPIJT7Y2he0cG3Gyx_uOiD0E.roa
Signing time: Wed 08 Mar 2023 15:17:13 +0000
ROA not before: Wed 08 Mar 2023 15:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.251.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:cc:3d:65:39:43:ff:91:09:57:1c:79:1a:0b:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Mar 8 15:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faf55b3c8253ed8da17b4706dc6cb1fee3a20f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:8c:dc:9a:68:7e:64:e6:ea:5c:53:c9:cf:
b1:5a:b0:2a:e4:96:16:2b:a3:b9:58:5a:ac:e7:1d:
6f:7e:23:87:98:46:7d:29:83:15:52:7d:57:a3:97:
d3:42:af:ea:d8:7e:88:cd:46:21:04:a4:16:91:fd:
1c:f9:22:c5:18:b7:e7:b0:d6:40:53:41:f5:3f:44:
d0:09:81:55:a6:46:9d:52:52:30:87:97:e4:71:05:
5b:86:ea:d6:7b:0f:3b:7d:cb:c1:04:37:66:c0:c7:
eb:89:66:11:15:7b:f7:d8:fe:3c:8e:09:fe:8c:44:
da:8a:7a:56:38:ee:57:2f:d6:f7:a1:59:91:ad:69:
23:b4:5c:5d:af:f6:d6:81:52:62:55:86:87:83:2b:
7c:d4:e8:46:b0:2d:48:c1:59:37:5c:31:75:df:a2:
67:b7:58:35:7d:2d:97:df:30:85:a6:8d:8e:71:ad:
40:b0:5c:fd:28:55:ab:9b:71:a9:ed:4c:21:d1:5a:
db:a5:d8:67:b1:10:e0:d7:55:eb:d9:4c:28:fc:e7:
b3:8f:75:e4:59:fb:ee:8e:9c:f9:74:52:3f:b3:f6:
19:4e:4d:ea:80:fd:f8:6c:bb:0e:c4:c0:1c:90:67:
53:6b:2f:c5:fb:9b:21:40:40:6d:78:7a:7c:1e:58:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:5B:3C:82:53:ED:8D:A1:7B:47:06:DC:6C:B1:FE:E3:A2:0F:41
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/1-vVbPIJT7Y2he0cG3Gyx_uOiD0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:1a:68:19:39:b6:83:b6:8e:78:eb:e4:26:9f:dd:30:fa:d2:
75:c3:36:87:57:91:b2:d8:83:e7:5d:8b:83:af:cd:ef:b3:6c:
52:0f:9b:ba:a9:25:d4:50:39:c9:7b:f2:d3:ef:8f:45:60:5a:
a6:31:59:34:44:b6:0d:cd:9d:b2:5b:ae:30:ed:f9:3c:a2:5e:
67:b6:66:f0:23:fd:4c:12:7f:f9:61:fe:ae:5c:bb:08:d1:6d:
f3:35:65:b8:9d:c0:e0:b1:30:97:ec:4e:e5:ad:9a:be:84:11:
91:f7:be:74:ac:fe:7b:be:e7:aa:4c:cc:18:fc:94:71:02:01:
b8:2e:de:da:33:1c:e0:e8:9c:cd:86:c4:d0:f4:07:47:cd:22:
ab:64:58:70:99:e9:de:5e:8c:1a:b2:06:ae:43:25:d9:64:92:
6b:d3:3b:eb:11:18:d1:75:dc:c2:f0:eb:5a:b9:a4:72:88:9e:
f6:e0:e3:5a:64:20:90:14:e4:4a:da:20:c5:e7:a4:0f:7d:04:
ec:42:ee:94:27:35:6d:11:ed:93:12:e7:0c:a0:18:d7:54:75:
24:61:19:33:42:d8:a3:0d:bc:e3:ef:48:10:a3:cc:c0:ac:cb:
55:a3:57:f0:b8:65:2b:b9:7d:0d:e1:38:93:1c:12:80:93:4d:
32:98:1b:8d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYbBzD1lOUP/kQlXHHkaC3NsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjMwMzA4MTUxNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWY1NWIzYzgyNTNlZDhkYTE3YjQ3MDZkYzZjYjFmZWUzYTIwZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSM3JpofmTm6lxTyc+xWrAq5JYW
K6O5WFqs5x1vfiOHmEZ9KYMVUn1Xo5fTQq/q2H6IzUYhBKQWkf0c+SLFGLfnsNZA
U0H1P0TQCYFVpkadUlIwh5fkcQVbhurWew87fcvBBDdmwMfriWYRFXv32P48jgn+
jETainpWOO5XL9b3oVmRrWkjtFxdr/bWgVJiVYaHgyt81OhGsC1IwVk3XDF136Jn
t1g1fS2X3zCFpo2Oca1AsFz9KFWrm3Gp7Uwh0VrbpdhnsRDg11Xr2Uwo/Oezj3Xk
Wfvujpz5dFI/s/YZTk3qgP34bLsOxMAckGdTay/F+5shQEBteHp8Hlg/pQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPr1WzyCU+2NoXtHBtxssf7jog9BMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvMS12VmJQSUpUN1kyaGUwY0czR3l4X3VPaUQwRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2MvYjkyMzMxLTJiYjQtNGE1OS05OTc4LTc1MWIxN2QxYzQz
Ny8xL0lzZk5wMTlPRmVTRzN1V21VQnktSUJpOERnOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn7DTAN
BgkqhkiG9w0BAQsFAAOCAQEAqRpoGTm2g7aOeOvkJp/dMPrSdcM2h1eRstiD512L
g6/N77NsUg+buqkl1FA5yXvy0++PRWBapjFZNES2Dc2dsluuMO35PKJeZ7Zm8CP9
TBJ/+WH+rly7CNFt8zVluJ3A4LEwl+xO5a2avoQRkfe+dKz+e77nqkzMGPyUcQIB
uC7e2jMc4OiczYbE0PQHR80iq2RYcJnp3l6MGrIGrkMl2WSSa9M76xEY0XXcwvDr
Wrmkcoie9uDjWmQgkBTkStogxeekD30E7ELulCc1bRHtkxLnDKAY11R1JGEZM0LY
ow284+9IEKPMwKzLVaNX8LhlK7l9DeE4kxwSgJNNMpgbjQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net