Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/KZ5oqLHt4uiFmEYN0Bwr5eadkR8.roa
File: KZ5oqLHt4uiFmEYN0Bwr5eadkR8.roa (raw, json)
Hash identifier: +YIg5MiRzTSsbp21eKgdSNMFqRiwhQg8KsHJZcWUwsg=
Subject key identifier: 29:9E:68:A8:B1:ED:E2:E8:85:98:46:0D:D0:1C:2B:E5:E6:9D:91:1F
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 01856FCBA7951177622DF7D0F4C44555520F
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/KZ5oqLHt4uiFmEYN0Bwr5eadkR8.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60475
IP address blocks: 185.235.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a7:95:11:77:62:2d:f7:d0:f4:c4:45:55:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=299e68a8b1ede2e88598460dd01c2be5e69d911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:b6:53:df:88:2b:e9:04:fc:e6:19:b7:80:
e1:03:f8:41:2f:8d:00:f1:bf:3b:cd:41:cd:fc:86:
f9:14:c4:e3:12:b8:b3:81:dc:55:2f:d7:a6:b8:e2:
fb:df:6a:99:09:e9:0b:d2:d0:78:d8:31:51:df:7f:
0c:77:d5:a9:4b:d7:f5:62:7f:da:66:1a:0c:a9:26:
4b:28:a7:61:4b:2b:36:8f:0e:cb:03:bb:70:d5:e4:
53:64:03:84:3c:66:ba:8f:60:d7:18:2b:68:6f:48:
2a:d7:28:c4:aa:12:59:cb:48:8b:bf:ea:03:43:40:
76:f0:78:ce:1a:5a:63:e0:89:85:c9:13:c5:c0:97:
06:dc:87:bd:61:a9:54:08:81:ad:65:d9:14:f3:c0:
4c:1f:9f:29:e5:a7:ff:08:bf:6f:b3:05:4b:a5:39:
68:fe:37:52:c4:ce:dc:c8:35:fb:98:79:b8:c5:fa:
34:28:43:9d:d9:a3:18:0f:78:8f:62:ff:f9:c3:d4:
a1:ec:94:f7:07:bb:1c:4f:59:73:27:07:ac:74:80:
a3:e5:be:06:2a:11:95:0e:d3:d0:77:a5:9b:a9:7b:
b9:b4:b9:38:84:f9:87:49:16:1b:e7:04:78:50:2b:
7b:ed:80:44:2d:ec:e3:9a:d5:65:1e:4c:13:65:77:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:68:A8:B1:ED:E2:E8:85:98:46:0D:D0:1C:2B:E5:E6:9D:91:1F
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/KZ5oqLHt4uiFmEYN0Bwr5eadkR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:c5:50:ce:48:c5:6d:2a:b9:02:64:62:93:3f:62:87:5b:96:
2a:12:55:c2:43:2d:9d:80:8a:a1:27:4a:74:f1:3c:bf:91:36:
50:27:91:23:46:cc:5a:63:11:b3:60:55:72:e5:db:d1:0e:81:
c5:51:fc:04:69:64:e8:bc:a3:8f:52:7b:d5:10:db:81:0d:d3:
ad:32:b5:61:2a:be:30:fd:e8:56:63:ac:fa:29:02:8b:01:86:
02:82:2d:d7:a2:41:cf:cf:7b:0f:f9:c4:ae:db:60:e6:46:2f:
f6:06:4c:11:76:de:87:2a:50:e6:a6:21:b4:f4:4b:75:24:c7:
1b:d9:68:36:4c:31:d7:66:37:45:b4:a6:44:1e:33:8c:05:0d:
31:7c:6b:12:5b:2f:ef:d7:06:62:aa:33:81:eb:39:fc:76:06:
1a:76:b4:b8:4f:93:10:69:51:1d:13:68:2f:43:83:3a:d6:e9:
7b:a2:40:bf:f0:65:34:64:33:b1:c5:b7:5f:1e:17:ee:ba:7a:
57:f4:dd:cc:be:77:a0:ba:21:e1:07:e8:ce:59:fe:ca:9e:23:
8a:76:37:0e:c0:06:8a:35:c0:a1:9a:29:01:b2:06:35:b2:78:
84:a0:3d:99:55:a0:60:cd:19:66:f9:50:c6:7b:27:87:83:90:
26:4a:92:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy6eVEXdiLffQ9MRFVVIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4
NWM3ZGUwHhcNMjMwMTAyMDAwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTllNjhhOGIxZWRlMmU4ODU5ODQ2MGRkMDFjMmJlNWU2OWQ5MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFi2U9+IK+kE/OYZt4DhA/hBL40A
8b87zUHN/Ib5FMTjErizgdxVL9emuOL732qZCekL0tB42DFR338Md9WpS9f1Yn/a
ZhoMqSZLKKdhSys2jw7LA7tw1eRTZAOEPGa6j2DXGCtob0gq1yjEqhJZy0iLv+oD
Q0B28HjOGlpj4ImFyRPFwJcG3Ie9YalUCIGtZdkU88BMH58p5af/CL9vswVLpTlo
/jdSxM7cyDX7mHm4xfo0KEOd2aMYD3iPYv/5w9Sh7JT3B7scT1lzJwesdICj5b4G
KhGVDtPQd6WbqXu5tLk4hPmHSRYb5wR4UCt77YBELezjmtVlHkwTZXdUaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmeaKix7eLohZhGDdAcK+XmnZEfMB8GA1UdIwQY
MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt
ZGUzNTJhOTJmNmJhLzEvS1o1b3FMSHQ0dWlGbUVZTjBCd3I1ZWFka1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh
LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuesUMA0G
CSqGSIb3DQEBCwUAA4IBAQBuxVDOSMVtKrkCZGKTP2KHW5YqElXCQy2dgIqhJ0p0
8Ty/kTZQJ5EjRsxaYxGzYFVy5dvRDoHFUfwEaWTovKOPUnvVENuBDdOtMrVhKr4w
/ehWY6z6KQKLAYYCgi3XokHPz3sP+cSu22DmRi/2BkwRdt6HKlDmpiG09Et1JMcb
2Wg2TDHXZjdFtKZEHjOMBQ0xfGsSWy/v1wZiqjOB6zn8dgYadrS4T5MQaVEdE2gv
Q4M61ul7okC/8GU0ZDOxxbdfHhfuunpX9N3MvneguiHhB+jOWf7KniOKdjcOwAaK
NcChmikBsgY1sniEoD2ZVaBgzRlm+VDGeyeHg5AmSpLf
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:43 2024 by rpki-client on console.sobornost.net