Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/j4GTR1MUj4XQNU72sbw1DuY563Y.roa
File: j4GTR1MUj4XQNU72sbw1DuY563Y.roa (raw, json)
Hash identifier: SLy7A1bhdwSHbFQq1di4LxQUiD7hrH1XJP9Ls+pZA+E=
Subject key identifier: 8F:81:93:47:53:14:8F:85:D0:35:4E:F6:B1:BC:35:0E:E6:39:EB:76
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01856C25E88C5572CB17D3CEFE14337AE753
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/j4GTR1MUj4XQNU72sbw1DuY563Y.roa
Signing time: Sun 01 Jan 2023 07:05:01 +0000
ROA not before: Sun 01 Jan 2023 07:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 185.212.90.0/24 maxlen: 24
185.212.88.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e8:8c:55:72:cb:17:d3:ce:fe:14:33:7a:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 07:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f81934753148f85d0354ef6b1bc350ee639eb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:04:18:74:38:7d:67:6a:5e:15:b7:18:91:
76:ba:f2:e0:0d:d7:90:8a:7e:39:e9:4e:9c:bf:41:
b8:4d:89:59:6f:44:29:86:de:d8:3f:a7:3e:ac:b7:
1c:e7:33:87:a5:00:b3:e2:a4:f6:83:1e:bd:69:1d:
25:8e:dc:3a:f4:40:e7:ee:94:89:7d:55:e6:c9:dc:
cb:f0:30:16:7d:71:a9:26:d5:8c:b3:58:60:f4:57:
1b:7a:7a:df:65:b3:a2:91:44:83:21:be:31:a0:2f:
37:5f:7c:e6:1b:27:39:c7:4c:e0:58:4b:56:1a:82:
79:81:b9:c4:8d:69:69:5b:03:b7:60:ae:08:de:0c:
cf:f9:52:1b:6b:cd:b9:f5:a8:10:9d:d1:05:59:d0:
5c:f2:31:1a:75:d2:85:00:68:4e:79:39:9f:8a:71:
30:b5:af:f5:1e:61:c0:89:a9:1d:e8:b4:18:fe:42:
b8:57:18:7a:8d:d4:eb:7a:8d:fa:3d:64:9b:98:82:
c6:25:3c:39:38:22:ae:d8:d6:12:fb:1b:aa:2a:f5:
8e:21:98:85:c1:d3:dd:0b:1f:8b:ee:e1:46:31:03:
a9:ec:90:23:0a:bb:cb:f1:00:9a:7a:36:aa:fd:52:
94:07:f3:91:1f:ad:d4:cd:ca:f9:59:01:3d:26:7d:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:93:47:53:14:8F:85:D0:35:4E:F6:B1:BC:35:0E:E6:39:EB:76
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/j4GTR1MUj4XQNU72sbw1DuY563Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0-185.212.90.255
Signature Algorithm: sha256WithRSAEncryption
6f:90:3e:39:4f:7f:e5:5b:7c:f5:1f:28:fc:bb:66:3a:3a:18:
7c:21:c1:52:f6:74:bc:ff:11:dd:1e:96:fa:bb:66:e6:18:43:
ff:d1:d3:a3:42:4d:cc:b9:5c:ec:25:76:a2:07:4a:27:93:d3:
00:80:4b:4e:50:e4:b1:f8:64:75:af:f9:9e:e6:f6:f7:3a:50:
35:f6:c6:4d:97:3d:21:ed:78:84:2b:18:8e:c5:14:e8:bd:37:
99:de:8b:10:c3:fb:fd:7f:00:52:3b:78:45:55:1f:a1:c4:a4:
c8:fe:3f:b3:1c:5d:0f:c9:a3:22:6e:34:dc:18:19:84:a3:43:
6f:3c:87:3e:04:58:52:0f:7b:d2:01:a6:21:07:f0:dc:e6:d4:
df:1a:40:cd:a3:d0:20:57:74:21:10:49:ad:63:6c:c6:07:b9:
dd:01:07:1f:d3:58:2e:8f:de:86:8e:4f:10:f9:7d:87:79:82:
9a:3e:12:84:70:68:c0:72:b6:02:1a:be:d6:f0:47:43:58:20:
f6:8e:44:bf:78:20:5b:ce:9b:21:51:d1:bb:2f:1b:9d:19:a3:
3e:1f:e9:71:61:38:5b:01:bb:4b:51:b3:bc:3d:27:84:8f:52:
95:8a:74:03:ee:c3:27:30:1c:b4:34:c3:0f:34:a7:61:00:6e:
6a:36:e7:9e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVsJeiMVXLLF9PO/hQzeudTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjMwMTAxMDcwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjgxOTM0NzUzMTQ4Zjg1ZDAzNTRlZjZiMWJjMzUwZWU2MzllYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0wEGHQ4fWdqXhW3GJF2uvLgDdeQ
in456U6cv0G4TYlZb0Qpht7YP6c+rLcc5zOHpQCz4qT2gx69aR0ljtw69EDn7pSJ
fVXmydzL8DAWfXGpJtWMs1hg9FcbenrfZbOikUSDIb4xoC83X3zmGyc5x0zgWEtW
GoJ5gbnEjWlpWwO3YK4I3gzP+VIba8259agQndEFWdBc8jEaddKFAGhOeTmfinEw
ta/1HmHAiakd6LQY/kK4Vxh6jdTreo36PWSbmILGJTw5OCKu2NYS+xuqKvWOIZiF
wdPdCx+L7uFGMQOp7JAjCrvL8QCaejaq/VKUB/ORH63Uzcr5WQE9Jn1lCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI+Bk0dTFI+F0DVO9rG8NQ7mOet2MB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvajRHVFIxTVVqNFhRTlU3MnNidzFEdVk1NjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO51FgD
BAC51FowDQYJKoZIhvcNAQELBQADggEBAG+QPjlPf+VbfPUfKPy7Zjo6GHwhwVL2
dLz/Ed0elvq7ZuYYQ//R06NCTcy5XOwldqIHSieT0wCAS05Q5LH4ZHWv+Z7m9vc6
UDX2xk2XPSHteIQrGI7FFOi9N5neixDD+/1/AFI7eEVVH6HEpMj+P7McXQ/JoyJu
NNwYGYSjQ288hz4EWFIPe9IBpiEH8Nzm1N8aQM2j0CBXdCEQSa1jbMYHud0BBx/T
WC6P3oaOTxD5fYd5gpo+EoRwaMBytgIavtbwR0NYIPaORL94IFvOmyFR0bsvG50Z
oz4f6XFhOFsBu0tRs7w9J4SPUpWKdAPuwycwHLQ0ww80p2EAbmo2554=
-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:10 2024 by rpki-client on console.sobornost.net