Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/1RvOXPYCn7zU3nVOQlFJUIbHGA8.roa
File: 1RvOXPYCn7zU3nVOQlFJUIbHGA8.roa (raw, json)
Hash identifier: dKZjK+8XLNvquayB4G6JDkCjkH6V7Sauvim5zwL/hd4=
Subject key identifier: D5:1B:CE:5C:F6:02:9F:BC:D4:DE:75:4E:42:51:49:50:86:C7:18:0F
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 018CC6B7A5CD9546A9DFBD67BEA609CF0941
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/1RvOXPYCn7zU3nVOQlFJUIbHGA8.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60284
IP address blocks: 193.135.96.0/22 maxlen: 24
178.238.0.0/22 maxlen: 24
193.228.197.0/24 maxlen: 24
193.228.198.0/24 maxlen: 24
2a13:a200::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 10:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a5:cd:95:46:a9:df:bd:67:be:a6:09:cf:09:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d51bce5cf6029fbcd4de754e4251495086c7180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:e9:4d:bb:0b:a7:73:2c:05:13:56:8f:15:
5f:41:5c:36:8a:5e:0a:75:dd:b9:35:e6:87:8a:ed:
fc:97:8c:eb:38:bf:53:5c:0d:c2:d4:34:a2:46:75:
95:15:4d:99:5a:eb:0d:62:b1:07:e6:b0:4e:35:0e:
54:f4:a2:a2:63:eb:60:18:44:cd:7d:ae:80:06:d1:
5d:d8:7e:f3:f8:d5:9e:15:c5:79:be:14:cb:db:9c:
fa:9d:cf:dc:14:9e:71:06:4f:c4:17:e7:60:7e:39:
bf:77:14:ab:1e:53:a5:02:e6:df:f8:a6:fb:a2:b4:
04:1b:9f:c9:19:0c:00:ab:9b:99:4b:7c:19:56:63:
60:f1:23:ed:65:1b:ff:19:d3:bb:66:6d:a3:7f:e4:
84:1f:59:a9:f5:60:e4:ce:89:f0:93:18:04:44:5f:
08:62:ba:cc:0b:5f:db:d3:e3:4a:be:20:eb:2b:84:
c3:cd:1c:54:cc:16:e9:58:4e:b3:77:87:61:01:ae:
50:af:13:74:e5:80:a7:e1:85:57:44:27:44:56:0d:
f0:92:8c:3a:46:4e:5a:49:03:2e:28:12:c8:ed:cf:
0e:5d:94:0c:67:1d:86:72:aa:a0:96:a5:dc:fa:74:
ee:c4:9e:75:56:2f:db:29:6d:de:74:ee:09:42:67:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:CE:5C:F6:02:9F:BC:D4:DE:75:4E:42:51:49:50:86:C7:18:0F
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/1RvOXPYCn7zU3nVOQlFJUIbHGA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.0.0/22
193.135.96.0/22
193.228.197.0-193.228.198.255
IPv6:
2a13:a200::/29
Signature Algorithm: sha256WithRSAEncryption
24:b1:c2:12:04:63:be:83:0a:06:7a:b0:73:7f:46:00:3d:a1:
e2:96:30:b4:2a:c9:31:b6:df:ce:09:e4:62:3b:79:50:64:1b:
13:bb:28:df:17:67:c2:01:2d:4b:8a:97:19:73:33:69:7a:38:
b6:10:56:8f:07:90:ab:dd:6c:f1:31:13:64:a5:fe:b9:cc:54:
e9:7c:64:a7:ed:79:1f:06:29:36:07:57:ee:bb:e0:85:cc:45:
82:a1:28:2f:82:64:df:40:1a:57:9e:40:50:a8:36:79:4f:ee:
fb:b6:e8:1a:86:df:8b:8c:7f:bc:0d:9e:e1:c1:99:51:3c:78:
fa:28:91:62:99:f2:66:82:b1:5b:d8:47:a5:fc:55:3d:24:1e:
e6:be:62:6d:02:30:f8:a4:e1:89:b0:f0:0c:39:d1:22:15:b9:
38:ce:22:d8:01:cf:9a:1e:e3:99:e4:6c:b8:14:c7:fc:de:dd:
46:4b:22:32:43:6b:b3:b8:b9:23:f7:ca:c6:16:78:36:40:d9:
2e:c8:5f:35:c9:20:c6:e0:08:71:70:8f:b3:63:1f:46:98:22:
95:01:00:55:c3:b7:b9:44:60:35:6a:9f:de:4f:34:0e:76:3e:
ec:9b:c1:7f:d0:43:a0:a0:a0:76:e1:0d:2a:ca:02:d7:ed:2a:
10:f1:e8:25
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzGt6XNlUap371nvqYJzwlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjQwMTAxMjAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTFiY2U1Y2Y2MDI5ZmJjZDRkZTc1NGU0MjUxNDk1MDg2YzcxODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXTpTbsLp3MsBRNWjxVfQVw2il4K
dd25NeaHiu38l4zrOL9TXA3C1DSiRnWVFU2ZWusNYrEH5rBONQ5U9KKiY+tgGETN
fa6ABtFd2H7z+NWeFcV5vhTL25z6nc/cFJ5xBk/EF+dgfjm/dxSrHlOlAubf+Kb7
orQEG5/JGQwAq5uZS3wZVmNg8SPtZRv/GdO7Zm2jf+SEH1mp9WDkzonwkxgERF8I
YrrMC1/b0+NKviDrK4TDzRxUzBbpWE6zd4dhAa5QrxN05YCn4YVXRCdEVg3wkow6
Rk5aSQMuKBLI7c8OXZQMZx2GcqqglqXc+nTuxJ51Vi/bKW3edO4JQmdQaQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFNUbzlz2Ap+81N51TkJRSVCGxxgPMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvMVJ2T1hQWUNuN3pVM25WT1FsRkpVSWJIR0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCsu4AAwQC
wYdgMAwDBADB5MUDBADB5MYwDQQCAAIwBwMFAyoTogAwDQYJKoZIhvcNAQELBQAD
ggEBACSxwhIEY76DCgZ6sHN/RgA9oeKWMLQqyTG2384J5GI7eVBkGxO7KN8XZ8IB
LUuKlxlzM2l6OLYQVo8HkKvdbPExE2Sl/rnMVOl8ZKfteR8GKTYHV+674IXMRYKh
KC+CZN9AGleeQFCoNnlP7vu26BqG34uMf7wNnuHBmVE8ePookWKZ8maCsVvYR6X8
VT0kHua+Ym0CMPik4Ymw8Aw50SIVuTjOItgBz5oe45nkbLgUx/ze3UZLIjJDa7O4
uSP3ysYWeDZA2S7IXzXJIMbgCHFwj7NjH0aYIpUBAFXDt7lEYDVqn95PNA52Puyb
wX/QQ6CgoHbhDSrKAtftKhDx6CU=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:23 2024 by rpki-client on console.sobornost.net