Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/hXoBSQsdiRSBY7Tu1uY9NjRJhyI.roa
File: hXoBSQsdiRSBY7Tu1uY9NjRJhyI.roa (raw, json)
Hash identifier: 1ZMoxQwevuXtOh+xzy8PneRY45VVcWNAc3yrVdn/Kso=
Subject key identifier: 85:7A:01:49:0B:1D:89:14:81:63:B4:EE:D6:E6:3D:36:34:49:87:22
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 01856BEEB8F94482D632C64A555AFC224459
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/hXoBSQsdiRSBY7Tu1uY9NjRJhyI.roa
Signing time: Sun 01 Jan 2023 06:04:45 +0000
ROA not before: Sun 01 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57302
IP address blocks: 91.216.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b8:f9:44:82:d6:32:c6:4a:55:5a:fc:22:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Jan 1 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=857a01490b1d89148163b4eed6e63d3634498722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:18:2a:85:68:b1:46:b5:90:b2:19:42:ac:
92:f6:c9:8a:e9:2d:68:f7:1e:8e:b6:8a:5c:04:2f:
5f:f1:bb:37:2a:a7:5f:0f:f4:f1:f3:d0:01:9c:bb:
f6:36:c4:cb:86:0f:0f:4d:ca:9e:88:87:e6:bb:74:
95:95:c8:11:98:e4:37:57:92:39:44:4d:98:86:c7:
a7:cc:39:1c:36:3d:0e:9e:cd:82:87:18:fc:32:96:
40:7b:2e:31:71:df:41:36:58:d8:a8:ed:01:4e:7e:
b1:0a:9e:a3:91:e0:8a:f0:28:97:34:8f:c5:3f:95:
c1:c6:d2:e8:12:d7:87:95:d7:57:69:69:b9:58:43:
8f:9a:6b:3b:6a:34:da:92:44:9d:97:84:c7:67:99:
f0:49:c4:9a:d3:87:77:00:61:fc:85:ea:e0:51:ef:
20:35:d8:7d:dc:cb:a7:ce:6d:b8:30:10:7f:12:43:
02:bb:9b:52:d7:57:54:28:46:14:b1:93:94:2e:0c:
60:18:b7:82:9b:ca:fc:1b:02:30:6a:4d:a4:46:31:
3c:bd:b1:72:68:1f:10:11:34:2c:74:33:91:86:29:
27:02:b0:44:94:b7:b8:bf:cc:7a:8f:ce:c7:44:95:
42:4e:62:8f:ad:29:e4:1c:7e:ef:f2:9a:1a:42:3c:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:01:49:0B:1D:89:14:81:63:B4:EE:D6:E6:3D:36:34:49:87:22
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/hXoBSQsdiRSBY7Tu1uY9NjRJhyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:29:0e:a7:b2:f8:66:d1:ef:d6:e6:45:10:fa:70:41:a2:1c:
0e:9c:91:d9:86:04:70:a2:53:a2:51:01:51:92:9e:7a:e4:3c:
ed:81:58:00:9f:66:07:5d:f3:e8:1c:56:9c:37:f7:fb:b9:71:
e4:06:52:65:4a:a9:28:e6:67:70:c4:e9:1c:17:86:6b:ef:24:
53:a7:d5:9c:92:37:e3:a9:a0:51:ff:46:1a:6c:7e:a1:58:d1:
20:48:a6:a6:e3:69:2b:5d:97:17:42:c1:87:51:3c:05:9e:bc:
e7:27:50:6a:06:d7:88:b0:c7:ca:61:08:45:11:5c:61:ea:67:
1a:8f:16:a0:2d:b9:fd:46:f8:19:21:5b:43:de:4d:cb:35:a7:
7c:74:e0:0e:21:42:fc:fd:6a:99:57:0d:aa:9d:5b:aa:3d:e9:
d3:32:da:b3:26:54:58:b9:a5:af:7c:8f:98:a9:3b:94:56:a0:
e3:88:b7:33:dd:1a:1e:4c:3d:b4:8f:28:2d:57:7c:f6:23:b7:
a4:04:d2:e7:f1:ee:c4:fb:b4:ce:83:9a:41:76:34:67:01:a4:
5e:8f:2c:0c:ed:c3:3d:6b:5d:df:be:6c:1d:fa:85:b1:ab:7c:
14:c0:a2:4e:a8:90:a5:84:03:a8:da:e6:5e:2e:32:14:4f:10:
23:6a:1a:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7rj5RILWMsZKVVr8IkRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODljNjc5OWY3NmI0NTIyZjA5OTFmNmI5MzM0ZmQ2ZGI1
NDFkNWIwHhcNMjMwMTAxMDYwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTdhMDE0OTBiMWQ4OTE0ODE2M2I0ZWVkNmU2M2QzNjM0NDk4NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJsYKoVosUa1kLIZQqyS9smK6S1o
9x6OtopcBC9f8bs3KqdfD/Tx89ABnLv2NsTLhg8PTcqeiIfmu3SVlcgRmOQ3V5I5
RE2YhsenzDkcNj0Ons2Chxj8MpZAey4xcd9BNljYqO0BTn6xCp6jkeCK8CiXNI/F
P5XBxtLoEteHlddXaWm5WEOPmms7ajTakkSdl4THZ5nwScSa04d3AGH8hergUe8g
Ndh93Munzm24MBB/EkMCu5tS11dUKEYUsZOULgxgGLeCm8r8GwIwak2kRjE8vbFy
aB8QETQsdDORhiknArBElLe4v8x6j87HRJVCTmKPrSnkHH7v8poaQjzaVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIV6AUkLHYkUgWO07tbmPTY0SYciMB8GA1UdIwQY
MBaAFEiJxnmfdrRSLwmR9rkzT9bbVB1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEt
ZjU3YmRjYzczYjE2LzEvaFhvQlNRc2RpUlNCWTdUdTF1WTlOalJKaHlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEtZjU3YmRjYzczYjE2
LzEvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9h8MA0G
CSqGSIb3DQEBCwUAA4IBAQAvKQ6nsvhm0e/W5kUQ+nBBohwOnJHZhgRwolOiUQFR
kp565DztgVgAn2YHXfPoHFacN/f7uXHkBlJlSqko5mdwxOkcF4Zr7yRTp9Wckjfj
qaBR/0YabH6hWNEgSKam42krXZcXQsGHUTwFnrznJ1BqBteIsMfKYQhFEVxh6mca
jxagLbn9RvgZIVtD3k3LNad8dOAOIUL8/WqZVw2qnVuqPenTMtqzJlRYuaWvfI+Y
qTuUVqDjiLcz3RoeTD20jygtV3z2I7ekBNLn8e7E+7TOg5pBdjRnAaRejywM7cM9
a13fvmwd+oWxq3wUwKJOqJClhAOo2uZeLjIUTxAjahqW
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:37 2024 by rpki-client on console.sobornost.net