Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/4-Vdo5qYhmzHkpmGxHM8vrzN1Rg.roa
File: 4-Vdo5qYhmzHkpmGxHM8vrzN1Rg.roa (raw, json)
Hash identifier: kB5abu8KbhyzwJ0EYGTCN5f8A6S+1C5t/9qsrTHxnr4=
Subject key identifier: E3:E5:5D:A3:9A:98:86:6C:C7:92:99:86:C4:73:3C:BE:BC:CD:D5:18
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 018570027BE69DFD654904BEFD56A029E484
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/4-Vdo5qYhmzHkpmGxHM8vrzN1Rg.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.5.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7b:e6:9d:fd:65:49:04:be:fd:56:a0:29:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3e55da39a98866cc7929986c4733cbebccdd518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:83:ff:a6:a0:6f:fd:2a:89:53:eb:ed:c2:
0e:2c:9d:4f:de:d4:9b:51:3f:24:95:5b:9f:27:b3:
15:91:c2:c6:fa:38:27:0c:ef:a7:04:7c:bd:b6:29:
45:46:98:94:ac:2f:b3:f3:16:f2:aa:d4:ff:c8:e9:
8f:e2:d1:c9:42:06:f8:87:fa:b2:74:89:97:7a:f0:
f2:12:9d:e2:1f:97:33:dd:7d:5b:3c:64:ce:38:94:
a7:89:b3:2b:e2:ee:56:c8:b5:0d:37:ca:fb:23:ce:
9f:c1:77:65:77:cc:a9:9b:2c:a6:f9:59:78:ce:0f:
4a:65:f0:7d:e7:0d:5e:f4:18:2b:ca:fe:f0:8f:5e:
46:3e:96:8e:72:30:72:6f:03:42:d4:a0:d3:62:fc:
3a:f6:5d:9b:bd:62:a0:da:b5:b1:66:b4:fb:7d:c8:
21:65:d4:1f:68:40:0c:81:f4:63:60:0f:64:9c:17:
4e:86:40:a5:d4:d4:fc:2a:f7:f7:5d:3e:57:61:06:
ae:81:61:ce:71:86:45:54:52:73:d3:bb:e8:61:29:
ce:9e:85:d9:84:f7:4c:4a:06:82:57:a8:3f:40:3b:
30:97:d9:16:6b:33:84:62:85:b2:ba:36:57:19:f9:
d4:60:5e:2a:6b:45:34:d0:70:e0:8f:fd:a3:a9:8d:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E5:5D:A3:9A:98:86:6C:C7:92:99:86:C4:73:3C:BE:BC:CD:D5:18
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/4-Vdo5qYhmzHkpmGxHM8vrzN1Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4e:80:5a:d9:aa:15:ab:61:a0:12:b7:c0:0a:12:bd:e6:ab:
ca:a9:d1:5d:11:09:0d:38:c1:98:9c:e2:ee:24:ea:eb:51:27:
b1:ed:7a:36:06:0a:b8:b0:27:71:cb:cd:0f:22:6a:7f:a3:6d:
48:d8:40:4d:8d:f6:cd:62:3e:94:cb:4a:5f:74:96:58:44:60:
6a:1b:ac:1f:48:d2:3a:ce:d6:e3:96:3e:45:28:c5:30:82:ee:
0d:04:92:54:7c:f9:a1:6a:22:cb:9d:fc:9d:e7:df:1a:89:69:
5e:4a:14:9a:93:7d:40:07:e6:4e:6c:4c:c8:23:8b:ee:32:12:
66:3f:87:c8:97:bd:a5:c8:06:20:63:15:7f:5c:53:84:62:71:
25:a9:f6:5f:d1:54:bc:f1:d7:4b:10:54:35:57:27:cf:ca:97:
f0:03:dd:19:85:fa:9e:53:e5:a3:b1:b8:0b:0d:8b:04:e7:8f:
38:bf:29:ff:55:ac:97:2b:91:ae:83:75:c7:5b:2c:0a:7a:35:
e9:00:6f:35:0f:f3:54:54:63:f7:4d:e7:e3:ed:cf:4f:9f:ce:
35:84:19:20:ac:c6:52:68:de:95:1a:2d:0d:3b:f3:f6:9f:50:
6f:5e:6a:49:85:18:75:7b:59:d3:4f:be:51:f8:1c:c1:b1:72:
e8:f2:f4:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAnvmnf1lSQS+/VagKeSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw
MDhjNDUwHhcNMjMwMTAyMDEwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2U1NWRhMzlhOTg4NjZjYzc5Mjk5ODZjNDczM2NiZWJjY2RkNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsouD/6agb/0qiVPr7cIOLJ1P3tSb
UT8klVufJ7MVkcLG+jgnDO+nBHy9tilFRpiUrC+z8xbyqtT/yOmP4tHJQgb4h/qy
dImXevDyEp3iH5cz3X1bPGTOOJSnibMr4u5WyLUNN8r7I86fwXdld8ypmyym+Vl4
zg9KZfB95w1e9Bgryv7wj15GPpaOcjBybwNC1KDTYvw69l2bvWKg2rWxZrT7fcgh
ZdQfaEAMgfRjYA9knBdOhkCl1NT8Kvf3XT5XYQaugWHOcYZFVFJz07voYSnOnoXZ
hPdMSgaCV6g/QDswl9kWazOEYoWyujZXGfnUYF4qa0U00HDgj/2jqY340wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPlXaOamIZsx5KZhsRzPL68zdUYMB8GA1UdIwQY
MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct
ODhhMGU0NTBhMTdiLzEvNC1WZG81cVlobXpIa3BtR3hITTh2cnpOMVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi
LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQWQMA0G
CSqGSIb3DQEBCwUAA4IBAQBvToBa2aoVq2GgErfAChK95qvKqdFdEQkNOMGYnOLu
JOrrUSex7Xo2Bgq4sCdxy80PImp/o21I2EBNjfbNYj6Uy0pfdJZYRGBqG6wfSNI6
ztbjlj5FKMUwgu4NBJJUfPmhaiLLnfyd598aiWleShSak31AB+ZObEzII4vuMhJm
P4fIl72lyAYgYxV/XFOEYnElqfZf0VS88ddLEFQ1VyfPypfwA90ZhfqeU+WjsbgL
DYsE5484vyn/VayXK5Gug3XHWywKejXpAG81D/NUVGP3Tefj7c9Pn841hBkgrMZS
aN6VGi0NO/P2n1BvXmpJhRh1e1nTT75R+BzBsXLo8vR2
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:55 2024 by rpki-client on console.sobornost.net