Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/SrngTjyosID-hWyBY61ePmgqCLA.roa
File: SrngTjyosID-hWyBY61ePmgqCLA.roa (raw, json)
Hash identifier: n3EHXqD54a2kNdVd54RWezvwDxts5xu9KdBhBxbZmc4=
Subject key identifier: 4A:B9:E0:4E:3C:A8:B0:80:FE:85:6C:81:63:AD:5E:3E:68:2A:08:B0
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 018CC5DCCCB06D4A43669824A5A064101823
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/SrngTjyosID-hWyBY61ePmgqCLA.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 2a0f:5840:a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 17:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cc:b0:6d:4a:43:66:98:24:a5:a0:64:10:18:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ab9e04e3ca8b080fe856c8163ad5e3e682a08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:64:82:70:3d:ed:a0:05:04:07:84:7b:97:
30:ff:e4:5b:7c:eb:45:3a:14:e3:1e:46:e2:2a:c6:
73:6c:3d:93:5d:ea:bb:c2:3b:f6:4e:95:df:d8:59:
dc:82:12:29:09:d9:57:e1:88:de:54:e5:04:34:29:
41:8c:72:84:e2:30:86:e7:d8:5a:23:92:ef:5a:b4:
9c:e8:1d:95:a9:cd:60:ad:c8:39:e2:12:98:d1:0c:
d3:6a:f6:d2:85:20:fe:36:f2:32:c8:ef:33:18:e7:
1c:c7:90:34:76:2c:df:35:43:50:e3:ed:a3:5a:e6:
57:32:c2:63:7b:2e:a7:35:ce:88:2d:4f:ee:1c:ea:
47:77:f3:cd:9e:82:5d:ac:a0:88:85:fe:51:f7:07:
c6:e4:f9:e1:38:77:1b:ae:69:a8:6a:71:1b:9e:1d:
4f:d3:8b:ef:27:07:8d:5f:2d:d3:0a:c2:e1:6c:0a:
a2:1a:66:c9:bb:2e:12:61:4c:96:23:7b:a4:30:7c:
df:7a:6a:4e:55:8c:08:f8:65:19:09:0b:fa:82:c1:
26:f4:95:92:1d:71:ad:e3:db:41:8d:6b:b8:2c:dd:
ab:0c:2d:a4:c8:fd:cb:c2:43:20:35:f5:47:2a:3e:
7d:c4:f3:38:14:06:4d:b3:53:96:74:8f:d7:fd:7e:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:E0:4E:3C:A8:B0:80:FE:85:6C:81:63:AD:5E:3E:68:2A:08:B0
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/SrngTjyosID-hWyBY61ePmgqCLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5840:a1::/48
Signature Algorithm: sha256WithRSAEncryption
01:7b:aa:bf:1a:92:65:21:38:57:99:6b:8a:89:b6:47:d7:8f:
80:af:22:2c:12:82:e4:50:af:03:79:97:3f:6f:84:ab:54:0a:
62:e6:4b:00:92:1a:61:89:e3:d8:c7:b0:7a:93:2f:01:16:e4:
b6:34:2f:55:83:75:37:d2:b9:da:16:3e:7f:35:12:7f:88:47:
b2:10:cf:44:ec:38:c7:f3:5b:f3:ef:22:de:d3:70:c2:32:dc:
44:af:8e:6a:f7:f4:62:09:15:02:b0:6c:cd:13:08:3e:74:a0:
98:d9:83:38:5a:18:0a:83:ef:5f:45:6a:b1:bf:15:73:f3:12:
6e:83:c6:5c:d8:05:73:8e:24:17:19:d5:7e:35:b0:dd:3d:7b:
4f:7a:5e:7f:03:ca:68:de:55:d3:46:6b:eb:18:76:93:60:18:
9b:70:75:17:a6:ff:0b:32:0c:a0:ee:7b:37:14:ed:bf:54:4c:
ce:1b:5b:19:d6:92:93:42:95:2b:f4:eb:c3:52:54:99:21:3d:
58:3e:40:95:cb:c9:db:58:8e:b6:47:44:01:c0:ab:e3:bf:15:
09:e3:80:9b:cf:a6:7d:35:d2:7e:2a:c7:21:ed:af:c4:e8:24:
70:b2:8e:a5:c4:21:45:74:32:92:37:48:d2:9f:de:94:07:ce:
87:fc:cb:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzF3MywbUpDZpgkpaBkEBgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjQwMTAxMTYzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWI5ZTA0ZTNjYThiMDgwZmU4NTZjODE2M2FkNWUzZTY4MmEwOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7hkgnA97aAFBAeEe5cw/+RbfOtF
OhTjHkbiKsZzbD2TXeq7wjv2TpXf2FncghIpCdlX4YjeVOUENClBjHKE4jCG59ha
I5LvWrSc6B2Vqc1grcg54hKY0QzTavbShSD+NvIyyO8zGOccx5A0dizfNUNQ4+2j
WuZXMsJjey6nNc6ILU/uHOpHd/PNnoJdrKCIhf5R9wfG5PnhOHcbrmmoanEbnh1P
04vvJweNXy3TCsLhbAqiGmbJuy4SYUyWI3ukMHzfempOVYwI+GUZCQv6gsEm9JWS
HXGt49tBjWu4LN2rDC2kyP3LwkMgNfVHKj59xPM4FAZNs1OWdI/X/X7C5QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEq54E48qLCA/oVsgWOtXj5oKgiwMB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvU3JuZ1RqeW9zSUQtaFd5Qlk2MWVQbWdxQ0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9YQACh
MA0GCSqGSIb3DQEBCwUAA4IBAQABe6q/GpJlIThXmWuKibZH14+AryIsEoLkUK8D
eZc/b4SrVApi5ksAkhphiePYx7B6ky8BFuS2NC9Vg3U30rnaFj5/NRJ/iEeyEM9E
7DjH81vz7yLe03DCMtxEr45q9/RiCRUCsGzNEwg+dKCY2YM4WhgKg+9fRWqxvxVz
8xJug8Zc2AVzjiQXGdV+NbDdPXtPel5/A8po3lXTRmvrGHaTYBibcHUXpv8LMgyg
7ns3FO2/VEzOG1sZ1pKTQpUr9OvDUlSZIT1YPkCVy8nbWI62R0QBwKvjvxUJ44Cb
z6Z9NdJ+Ksch7a/E6CRwso6lxCFFdDKSN0jSn96UB86H/MtB
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:15 2024 by rpki-client on console.sobornost.net