Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/afyaI25fpb-cECex4DD4xf0ajyc.roa
File: afyaI25fpb-cECex4DD4xf0ajyc.roa (raw, json)
Hash identifier: rN1yW7DqTjrRICnj9jwlzAxt78SwXjdbZ/DmKlHu7tU=
Subject key identifier: 69:FC:9A:23:6E:5F:A5:BF:9C:10:27:B1:E0:30:F8:C5:FD:1A:8F:27
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01886D6778CB3F25A2264404977660AB4005
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/afyaI25fpb-cECex4DD4xf0ajyc.roa
Signing time: Tue 30 May 2023 16:04:37 +0000
ROA not before: Tue 30 May 2023 16:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5413
IP address blocks: 185.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:67:78:cb:3f:25:a2:26:44:04:97:76:60:ab:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: May 30 16:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69fc9a236e5fa5bf9c1027b1e030f8c5fd1a8f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:a6:1b:79:60:3f:0d:96:4f:6e:15:9e:7c:
c2:ec:e3:ca:e3:c0:70:4b:d6:37:46:fb:57:d8:76:
37:84:2b:3a:26:3b:77:c2:c7:5b:18:12:4d:42:52:
dd:63:a9:3b:e3:6c:57:8c:35:a4:f1:5c:f0:f1:75:
1d:5d:22:85:37:01:68:e6:e5:eb:dc:53:64:e0:1a:
36:4e:34:8e:21:a4:41:54:bd:06:ed:c0:de:32:6a:
85:f6:ff:07:95:7c:4e:38:44:68:aa:fa:82:10:4b:
82:6c:19:19:72:1d:e5:52:37:19:18:3a:83:46:2b:
63:e5:1a:b0:b7:76:0a:ba:fe:27:d4:d3:ec:96:95:
06:35:86:6c:97:12:e8:92:8c:92:be:d9:e0:f4:ce:
1e:00:fd:a0:5e:31:16:77:43:3c:48:0f:21:56:db:
08:59:21:c9:ae:e1:87:5f:a2:35:c4:8f:07:31:e2:
ba:4f:5e:b8:11:4f:7b:ad:05:81:72:13:e0:b4:4e:
e1:cf:ff:ef:99:29:e1:e7:58:d8:be:12:70:38:63:
ef:4f:3e:a7:f3:6f:c2:95:ca:49:ee:71:7d:0c:6c:
fe:d1:6c:da:62:27:82:f9:5a:dd:52:ea:8f:25:fc:
61:43:75:1a:9f:1b:62:60:04:1c:03:92:51:9c:68:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:9A:23:6E:5F:A5:BF:9C:10:27:B1:E0:30:F8:C5:FD:1A:8F:27
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/afyaI25fpb-cECex4DD4xf0ajyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:83:72:18:c3:80:af:8f:f0:d5:a8:87:bf:75:9d:dc:db:0a:
ea:43:b7:93:23:a9:11:80:d4:f4:ee:aa:ed:1b:d7:7a:7c:82:
2c:50:27:fc:55:ac:1e:39:a1:f8:08:56:94:57:12:2e:fe:fc:
df:ee:78:dd:17:8c:93:58:63:e8:0b:fc:f2:fc:c2:e2:d1:8b:
6e:4d:a8:33:a2:60:8a:f4:77:49:69:03:be:2c:b9:10:a1:30:
45:77:5a:09:c3:bd:c7:1f:a7:ff:ef:21:de:ed:4b:ce:12:00:
98:6f:b9:c7:2f:b3:fe:57:d9:3c:42:30:0c:f4:54:34:19:65:
0b:9d:84:c6:7e:a7:b4:69:cf:0b:32:5e:6d:29:ce:40:c3:24:
e4:9a:1c:6a:da:29:7d:3f:6f:fe:92:06:ed:8e:dd:90:c0:d2:
b0:63:79:b1:67:63:80:cc:01:24:e8:75:50:ac:fd:71:b6:20:
d8:8b:39:59:d7:aa:11:bb:40:c8:bd:fc:07:7f:3f:79:84:fc:
38:4c:de:03:22:26:6d:79:88:53:90:28:ae:7d:45:6d:0d:1f:
0a:2b:19:b8:3b:fa:7a:c7:9f:16:c6:28:4b:02:ba:8d:63:99:
e1:c1:61:2b:60:71:b7:25:59:03:3d:00:5e:65:71:ea:30:33:
1c:97:b5:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhtZ3jLPyWiJkQEl3Zgq0AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjMwNTMwMTYwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWZjOWEyMzZlNWZhNWJmOWMxMDI3YjFlMDMwZjhjNWZkMWE4ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFCmG3lgPw2WT24VnnzC7OPK48Bw
S9Y3RvtX2HY3hCs6Jjt3wsdbGBJNQlLdY6k742xXjDWk8Vzw8XUdXSKFNwFo5uXr
3FNk4Bo2TjSOIaRBVL0G7cDeMmqF9v8HlXxOOERoqvqCEEuCbBkZch3lUjcZGDqD
Ritj5Rqwt3YKuv4n1NPslpUGNYZslxLokoySvtng9M4eAP2gXjEWd0M8SA8hVtsI
WSHJruGHX6I1xI8HMeK6T164EU97rQWBchPgtE7hz//vmSnh51jYvhJwOGPvTz6n
82/ClcpJ7nF9DGz+0WzaYieC+VrdUuqPJfxhQ3UanxtiYAQcA5JRnGiOjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGn8miNuX6W/nBAnseAw+MX9Go8nMB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvYWZ5YUkyNWZwYi1jRUNleDRERDR4ZjBhanljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXdvMA0G
CSqGSIb3DQEBCwUAA4IBAQAMg3IYw4Cvj/DVqIe/dZ3c2wrqQ7eTI6kRgNT07qrt
G9d6fIIsUCf8VaweOaH4CFaUVxIu/vzf7njdF4yTWGPoC/zy/MLi0YtuTagzomCK
9HdJaQO+LLkQoTBFd1oJw73HH6f/7yHe7UvOEgCYb7nHL7P+V9k8QjAM9FQ0GWUL
nYTGfqe0ac8LMl5tKc5AwyTkmhxq2il9P2/+kgbtjt2QwNKwY3mxZ2OAzAEk6HVQ
rP1xtiDYizlZ16oRu0DIvfwHfz95hPw4TN4DIiZteYhTkCiufUVtDR8KKxm4O/p6
x58WxihLArqNY5nhwWErYHG3JVkDPQBeZXHqMDMcl7UO
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net