Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/fjV5OJJmMuaoz7mPNi1mxa3P1W4.roa
File: fjV5OJJmMuaoz7mPNi1mxa3P1W4.roa (raw, json)
Hash identifier: RFV/+MFzg1YHrcI9Eitwkid9cQI+uMyNd2SzKkE1oCk=
Subject key identifier: 7E:35:79:38:92:66:32:E6:A8:CF:B9:8F:36:2D:66:C5:AD:CF:D5:6E
Certificate issuer: /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial: 0185707076795988396576F9BC7B8BA98EB0
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/fjV5OJJmMuaoz7mPNi1mxa3P1W4.roa
Signing time: Mon 02 Jan 2023 03:04:56 +0000
ROA not before: Mon 02 Jan 2023 03:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43200
IP address blocks: 81.26.32.0/19 maxlen: 19
85.89.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:76:79:59:88:39:65:76:f9:bc:7b:8b:a9:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Validity
Not Before: Jan 2 03:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e357938926632e6a8cfb98f362d66c5adcfd56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:09:11:7f:bb:8b:c8:4b:c6:20:35:1c:5d:
dc:09:4e:bf:44:1d:84:54:68:be:f9:46:80:cd:f4:
90:7d:68:1a:24:11:9f:ba:09:f4:b1:62:77:df:2e:
d7:e1:2b:1a:8a:9d:67:c9:c4:86:8b:c0:68:89:08:
73:58:45:06:5c:40:6c:12:45:13:bc:bd:7a:8a:ea:
fa:07:88:96:ed:7f:b4:f9:f1:dc:13:d4:30:f8:d2:
d4:d1:7f:98:17:50:cf:58:86:ed:ce:99:12:c8:3c:
39:40:4f:db:4a:ec:46:9e:f9:6f:95:2b:ee:c4:73:
41:e2:38:ad:b9:d2:39:72:46:a7:6a:2d:fa:d3:7a:
36:e8:80:30:f0:f8:ba:6d:6b:d7:e5:df:c0:0b:d0:
59:b9:fd:cc:d1:0a:75:80:19:77:f4:5d:99:b7:34:
7a:73:5a:c6:99:0c:cb:59:09:d6:e5:53:30:8e:92:
9a:0b:31:67:05:46:67:a0:ee:22:41:54:e1:d1:bb:
40:2f:be:82:fe:76:99:a1:58:df:da:cf:f4:e8:dc:
5d:51:95:36:07:b2:04:30:cc:60:03:28:dc:da:f2:
aa:8f:07:77:7b:99:ae:37:ad:92:e5:b4:06:d0:d1:
68:fc:fa:3d:5b:22:6a:c7:b5:76:67:d8:ee:23:09:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:79:38:92:66:32:E6:A8:CF:B9:8F:36:2D:66:C5:AD:CF:D5:6E
X509v3 Authority Key Identifier:
keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/fjV5OJJmMuaoz7mPNi1mxa3P1W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.32.0/19
85.89.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:a6:03:68:99:3a:63:17:a7:d9:3f:a5:ef:eb:6f:44:ae:e3:
53:76:32:79:7b:2d:1c:1d:01:0e:a7:ef:d9:e8:9c:23:14:46:
78:7b:f0:3a:d6:c4:4b:80:92:06:d1:fc:bc:d9:51:cf:a1:b8:
4b:da:80:c0:da:69:06:d5:46:9b:16:bd:c6:86:1d:40:c8:85:
5c:bb:e4:0d:c2:e3:12:de:36:01:cf:74:89:c6:1d:0b:8d:d5:
65:e4:bc:a2:a7:7d:3f:19:2c:3c:6a:5d:3e:b7:b0:6e:24:2e:
a2:f0:d2:7d:72:40:b7:58:83:95:ed:36:9b:71:8f:e6:fc:4e:
c6:1a:20:8c:21:60:79:d4:4c:b4:48:93:4a:ce:66:79:fe:e5:
db:84:34:33:04:e2:7e:2f:a6:fb:31:6e:d8:9f:80:e0:6b:8b:
c0:8d:5d:d3:4f:a2:69:44:ae:06:7c:e3:9e:7f:ae:96:4d:9c:
10:55:ff:99:91:8d:2e:f7:84:fb:d9:34:d6:67:4b:b6:41:fe:
09:53:7c:44:d9:43:e4:ee:93:46:6f:73:80:b2:89:cc:03:26:
8a:d2:94:fb:01:d7:aa:44:4f:bc:99:01:bd:4c:1e:01:16:4b:
63:a6:50:4e:e5:e9:b7:a2:15:a2:98:8f:8c:8b:82:27:f5:cd:
51:d1:91:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwcHZ5WYg5ZXb5vHuLqY6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZmNiMGMzNjU1YTNjNTJmMDMwYTY0ZGI2NjEzOTYyNWEw
ZmZiZTAwHhcNMjMwMTAyMDMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTM1NzkzODkyNjYzMmU2YThjZmI5OGYzNjJkNjZjNWFkY2ZkNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFUJEX+7i8hLxiA1HF3cCU6/RB2E
VGi++UaAzfSQfWgaJBGfugn0sWJ33y7X4Ssaip1nycSGi8BoiQhzWEUGXEBsEkUT
vL16iur6B4iW7X+0+fHcE9Qw+NLU0X+YF1DPWIbtzpkSyDw5QE/bSuxGnvlvlSvu
xHNB4jitudI5ckanai3603o26IAw8Pi6bWvX5d/AC9BZuf3M0Qp1gBl39F2ZtzR6
c1rGmQzLWQnW5VMwjpKaCzFnBUZnoO4iQVTh0btAL76C/naZoVjf2s/06NxdUZU2
B7IEMMxgAyjc2vKqjwd3e5muN62S5bQG0NFo/Po9WyJqx7V2Z9juIwnpnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH41eTiSZjLmqM+5jzYtZsWtz9VuMB8GA1UdIwQY
MBaAFCb8sMNlWjxS8DCmTbZhOWJaD/vgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZ5d3cyVmFQRkx3TUtaTnRtRTVZbG9QLS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NmI2N2MtODBiZS00ZmNhLWJlMjQt
MWViMmE2ZWY1MjE3LzEvZmpWNU9KSm1NdWFvejdtUE5pMW14YTNQMVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NmI2N2MtODBiZS00ZmNhLWJlMjQtMWViMmE2ZWY1MjE3
LzEvSnZ5d3cyVmFQRkx3TUtaTnRtRTVZbG9QLS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFURogAwQF
VVnAMA0GCSqGSIb3DQEBCwUAA4IBAQBepgNomTpjF6fZP6Xv629EruNTdjJ5ey0c
HQEOp+/Z6JwjFEZ4e/A61sRLgJIG0fy82VHPobhL2oDA2mkG1UabFr3Ghh1AyIVc
u+QNwuMS3jYBz3SJxh0LjdVl5Lyip30/GSw8al0+t7BuJC6i8NJ9ckC3WIOV7Tab
cY/m/E7GGiCMIWB51Ey0SJNKzmZ5/uXbhDQzBOJ+L6b7MW7Yn4Dga4vAjV3TT6Jp
RK4GfOOef66WTZwQVf+ZkY0u94T72TTWZ0u2Qf4JU3xE2UPk7pNGb3OAsonMAyaK
0pT7AdeqRE+8mQG9TB4BFktjplBO5em3ohWimI+Mi4In9c1R0ZF7
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net