Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa
File: n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa (raw, json)
Hash identifier: 4RYEENCAUA8UYTVXCTNYxV9L9fksjrbd55BhygT+Gus=
Subject key identifier: 9F:91:31:15:9E:E8:99:E7:B1:F3:B6:6A:F4:99:61:F8:F5:6E:08:88
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F36D79294C59BD8EFEAEF21A812A
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa
Signing time: Sun 01 Jan 2023 08:14:58 +0000
ROA not before: Sun 01 Jan 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61052
IP address blocks: 79.133.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f3:6d:79:29:4c:59:bd:8e:fe:ae:f2:1a:81:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f9131159ee899e7b1f3b66af49961f8f56e0888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:1d:10:75:c9:1e:fb:4a:28:df:84:65:ca:
d5:0b:c7:d6:db:76:8c:4f:80:2e:4a:32:ab:a7:3e:
10:04:7e:74:f0:30:08:45:b4:ca:32:a8:f2:16:5e:
d0:c9:4e:f3:b3:66:be:30:08:ba:ba:e5:e6:86:4c:
40:cc:eb:e7:dc:61:63:07:cc:f5:25:4b:9f:61:d2:
7a:30:aa:c0:8f:ec:b4:5d:8e:81:eb:cd:2e:89:61:
1d:d6:c7:e7:ae:08:ff:45:bf:29:b1:8d:10:e4:42:
b2:db:ac:6d:8e:ad:1a:eb:cd:13:d6:8e:06:29:d2:
e0:5c:31:af:08:f0:66:14:8a:95:0a:5c:00:d2:d2:
91:b6:a2:7c:7c:2f:5b:95:82:3e:a3:51:52:96:29:
9e:71:60:e4:44:25:76:09:2e:65:ba:06:e3:0b:12:
f3:8a:38:7c:c0:02:e8:88:ab:ce:1d:9d:ff:4f:55:
9a:e2:a9:7e:fc:dd:cb:fb:04:1f:fa:39:44:86:02:
56:ae:34:7e:7a:c1:fe:30:ae:de:f3:b0:10:b0:db:
de:6d:a9:96:20:3e:31:bb:8d:1d:a3:50:3e:1d:4c:
f1:c6:bd:9a:3a:f5:e2:2b:a9:70:a2:e1:c3:a3:7b:
03:6d:91:7f:c3:95:e2:c3:f8:e2:a6:ed:9c:e4:69:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:31:15:9E:E8:99:E7:B1:F3:B6:6A:F4:99:61:F8:F5:6E:08:88
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.104.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a5:e9:ff:43:4d:76:06:e2:4f:25:e4:c5:56:3f:ff:78:e7:
94:82:8c:2b:de:81:d2:bc:61:1a:1a:b5:d3:24:83:e3:eb:60:
c3:9f:4d:bc:b9:68:d8:66:8d:21:32:2b:6c:7d:aa:24:68:73:
dd:ba:f9:6f:c8:d1:5a:74:e6:54:c8:1f:f5:2e:6b:1f:80:bb:
2c:a6:63:d7:0f:66:4c:23:90:c0:52:50:73:c0:33:f4:55:15:
a0:bb:c2:ee:99:97:fd:51:50:ee:02:12:45:d5:38:fb:1d:ff:
ff:53:2d:c0:25:56:a6:83:1b:35:ac:4e:ae:cf:ab:1c:68:ab:
1c:bd:79:dc:66:15:65:d5:dc:ec:cd:c4:ab:18:ec:65:b4:13:
80:90:6c:f9:7b:20:58:90:84:c6:85:31:7a:2e:d2:d2:f6:42:
a2:e2:ec:c1:6b:81:bc:95:a2:c1:75:dc:17:35:94:80:82:c8:
b2:2b:b8:36:76:4b:bd:f1:15:c3:60:df:74:93:8c:4e:02:2f:
56:9f:34:05:15:81:45:f5:86:fe:7b:78:b7:1f:64:9c:53:fb:
c7:d6:dd:04:f9:d6:2e:9e:41:b5:0b:a8:ea:1f:1b:65:2a:98:
d3:3e:af:04:16:b1:9b:c2:e3:d6:6b:b3:bb:14:16:71:39:0f:
bc:7f:e7:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsZfNteSlMWb2O/q7yGoEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjMwMTAxMDgxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjkxMzExNTllZTg5OWU3YjFmM2I2NmFmNDk5NjFmOGY1NmUwODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqsdEHXJHvtKKN+EZcrVC8fW23aM
T4AuSjKrpz4QBH508DAIRbTKMqjyFl7QyU7zs2a+MAi6uuXmhkxAzOvn3GFjB8z1
JUufYdJ6MKrAj+y0XY6B680uiWEd1sfnrgj/Rb8psY0Q5EKy26xtjq0a680T1o4G
KdLgXDGvCPBmFIqVClwA0tKRtqJ8fC9blYI+o1FSlimecWDkRCV2CS5lugbjCxLz
ijh8wALoiKvOHZ3/T1Wa4ql+/N3L+wQf+jlEhgJWrjR+esH+MK7e87AQsNvebamW
ID4xu40do1A+HUzxxr2aOvXiK6lwouHDo3sDbZF/w5Xiw/jipu2c5GlE+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+RMRWe6JnnsfO2avSZYfj1bgiIMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvbjVFeEZaN29tZWV4ODdacTlKbGgtUFZ1Q0lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT4VoMA0G
CSqGSIb3DQEBCwUAA4IBAQBBpen/Q012BuJPJeTFVj//eOeUgowr3oHSvGEaGrXT
JIPj62DDn028uWjYZo0hMitsfaokaHPduvlvyNFadOZUyB/1LmsfgLsspmPXD2ZM
I5DAUlBzwDP0VRWgu8LumZf9UVDuAhJF1Tj7Hf//Uy3AJVamgxs1rE6uz6scaKsc
vXncZhVl1dzszcSrGOxltBOAkGz5eyBYkITGhTF6LtLS9kKi4uzBa4G8laLBddwX
NZSAgsiyK7g2dku98RXDYN90k4xOAi9WnzQFFYFF9Yb+e3i3H2ScU/vH1t0E+dYu
nkG1C6jqHxtlKpjTPq8EFrGbwuPWa7O7FBZxOQ+8f+cL
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net