Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/Kr6vZTsaXSQpfB71mcD7Zp-bRN4.roa
File: Kr6vZTsaXSQpfB71mcD7Zp-bRN4.roa (raw, json)
Hash identifier: xkrzyph0ciqumzYfV99161wW4Y47uppB6evfJPaXrHg=
Subject key identifier: 2A:BE:AF:65:3B:1A:5D:24:29:7C:1E:F5:99:C0:FB:66:9F:9B:44:DE
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 0186D52A17DF3BE99E8AA4405E519DCAF575
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/Kr6vZTsaXSQpfB71mcD7Zp-bRN4.roa
Signing time: Sun 12 Mar 2023 09:32:30 +0000
ROA not before: Sun 12 Mar 2023 09:32:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56800
IP address blocks: 185.110.144.0/23 maxlen: 23
185.110.146.0/23 maxlen: 23
176.10.40.0/22 maxlen: 22
176.10.40.0/21 maxlen: 21
176.10.44.0/22 maxlen: 22
2a0b:26c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:2a:17:df:3b:e9:9e:8a:a4:40:5e:51:9d:ca:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Mar 12 09:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2abeaf653b1a5d24297c1ef599c0fb669f9b44de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:f5:76:f0:32:38:a4:d3:f3:1b:5d:92:d3:
1f:43:43:fa:b9:01:60:8b:a4:41:4d:6e:82:1e:8f:
2c:73:0b:ce:95:a3:78:a5:65:7e:01:d8:7e:47:a8:
a9:cf:9e:ea:3d:0e:39:e4:0f:89:59:82:d0:8a:87:
e5:e5:21:53:19:16:3b:4f:7d:db:d9:66:f5:d9:2d:
ec:86:b6:17:35:39:02:cc:48:3c:ec:2c:fd:9e:f4:
2a:dd:c7:22:66:25:5b:69:93:d4:09:d4:d1:d3:b8:
76:f2:a2:96:53:f1:0d:c1:72:9b:df:2d:0f:4b:bc:
12:83:1a:cb:26:60:8b:e7:34:02:5e:7a:de:a3:b4:
24:7a:19:fa:22:7a:0a:26:a9:96:42:ab:df:e6:7e:
0a:b5:66:5c:dd:a3:23:40:cd:2a:4d:13:6a:6d:93:
6c:f3:83:a6:41:0f:97:b9:3b:0e:91:ca:4c:bb:90:
28:32:49:cc:dc:e5:42:db:99:a5:dc:a0:29:9f:24:
c5:90:25:ce:97:0e:ee:25:32:cf:9a:07:36:dc:e5:
b8:48:36:78:be:0e:74:0a:ae:e9:4c:a7:d2:a4:60:
2d:ba:09:27:13:c0:0b:06:70:da:5f:15:8b:e5:04:
57:13:c0:2f:e7:e1:28:0a:26:54:05:29:8e:96:da:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:AF:65:3B:1A:5D:24:29:7C:1E:F5:99:C0:FB:66:9F:9B:44:DE
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/Kr6vZTsaXSQpfB71mcD7Zp-bRN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.40.0/21
185.110.144.0/22
IPv6:
2a0b:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:30:11:8b:9a:fa:dd:7f:38:f2:92:80:58:4b:e1:98:ee:b2:
2e:62:75:db:f1:8c:ea:29:21:ee:7c:31:e0:9e:16:ed:68:a1:
c5:c7:78:eb:e9:25:b9:55:42:27:90:d0:69:68:e6:3e:60:c7:
7f:a3:be:31:a0:e2:5a:cd:bf:d1:86:99:9d:8b:d3:5e:05:f7:
d4:84:80:f6:45:ae:52:dd:04:ce:6c:4e:d5:1c:1c:e8:1d:46:
c4:94:f6:68:0d:2e:b4:fb:45:10:64:9b:ba:1b:cf:d6:5d:da:
4e:d5:b1:64:5a:6e:d1:13:71:75:ad:9d:f8:71:a2:91:a3:dd:
59:1e:48:fd:2e:57:2a:71:f4:78:1e:32:87:68:ac:c2:60:de:
22:e4:1c:5c:fc:fe:89:2d:f0:da:b9:3e:c4:ea:5a:3e:73:a2:
13:24:f3:dc:87:0d:77:fd:2b:df:a9:e9:b1:cc:11:55:46:a2:
52:8d:8e:12:39:99:89:c9:53:4f:bb:7e:6b:ff:f0:01:35:20:
01:e7:15:f2:42:c5:35:5d:dd:e5:c2:d4:ae:e9:c6:5e:07:8f:
5e:13:4d:0b:de:d7:e7:7f:05:42:88:6a:1c:02:8f:02:b3:36:
96:ed:da:ac:93:a5:9c:45:b4:15:2f:c9:7a:63:f4:e1:ef:93:
45:1b:99:8b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYbVKhffO+meiqRAXlGdyvV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjM5YTUxMDg0ZjFiMmI1YzY4NDY0M2NhYzE0NjIxN2M3
OWY4ZDEwHhcNMjMwMzEyMDkzMjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWJlYWY2NTNiMWE1ZDI0Mjk3YzFlZjU5OWMwZmI2NjlmOWI0NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2T1dvAyOKTT8xtdktMfQ0P6uQFg
i6RBTW6CHo8scwvOlaN4pWV+Adh+R6ipz57qPQ455A+JWYLQiofl5SFTGRY7T33b
2Wb12S3shrYXNTkCzEg87Cz9nvQq3cciZiVbaZPUCdTR07h28qKWU/ENwXKb3y0P
S7wSgxrLJmCL5zQCXnreo7Qkehn6InoKJqmWQqvf5n4KtWZc3aMjQM0qTRNqbZNs
84OmQQ+XuTsOkcpMu5AoMknM3OVC25ml3KApnyTFkCXOlw7uJTLPmgc23OW4SDZ4
vg50Cq7pTKfSpGAtugknE8ALBnDaXxWL5QRXE8Av5+EoCiZUBSmOltrofQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCq+r2U7Gl0kKXwe9ZnA+2afm0TeMB8GA1UdIwQY
MBaAFGQjmlEITxsrXGhGQ8rBRiF8efjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYt
NGU5MzA1Y2FmMWEzLzEvS3I2dlpUc2FYU1FwZkI3MW1jRDdacC1iUk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYtNGU5MzA1Y2FmMWEz
LzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsAooAwQC
uW6QMA0EAgACMAcDBQMqCybAMA0GCSqGSIb3DQEBCwUAA4IBAQATMBGLmvrdfzjy
koBYS+GY7rIuYnXb8YzqKSHufDHgnhbtaKHFx3jr6SW5VUInkNBpaOY+YMd/o74x
oOJazb/Rhpmdi9NeBffUhID2Ra5S3QTObE7VHBzoHUbElPZoDS60+0UQZJu6G8/W
XdpO1bFkWm7RE3F1rZ34caKRo91ZHkj9LlcqcfR4HjKHaKzCYN4i5Bxc/P6JLfDa
uT7E6lo+c6ITJPPchw13/SvfqemxzBFVRqJSjY4SOZmJyVNPu35r//ABNSAB5xXy
QsU1Xd3lwtSu6cZeB49eE00L3tfnfwVCiGocAo8CszaW7dqsk6WcRbQVL8l6Y/Th
75NFG5mL
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net