Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S4vTymbKtOO7a5_9ADLtEVNfMrs.roa
File: S4vTymbKtOO7a5_9ADLtEVNfMrs.roa (raw, json)
Hash identifier: It+Ox1CF4M/jHfsz6q3bKgG6WH3qibyDxiW7HEWFAcU=
Subject key identifier: 4B:8B:D3:CA:66:CA:B4:E3:BB:6B:9F:FD:00:32:ED:11:53:5F:32:BB
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01896478EBB63142728F82913EB2CD3A0D0D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S4vTymbKtOO7a5_9ADLtEVNfMrs.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 193.142.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:eb:b6:31:42:72:8f:82:91:3e:b2:cd:3a:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b8bd3ca66cab4e3bb6b9ffd0032ed11535f32bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:0b:f0:fc:68:e2:0b:39:8d:06:8e:76:ab:
a1:4a:cf:42:df:48:61:07:90:01:14:6d:be:f3:fb:
e6:15:79:42:c4:d0:c5:9e:6b:a1:fa:82:f0:e0:e7:
ed:93:e5:b5:48:78:0e:95:49:90:3b:9e:fa:0f:9f:
ac:53:fc:ed:cc:5a:03:e1:8c:76:3c:55:89:bf:ce:
36:8f:69:5e:f4:10:6e:27:67:1a:bb:f8:ed:d8:56:
56:47:d3:1c:d0:a0:86:14:01:0b:00:a6:61:b3:a0:
2a:a9:5d:04:11:59:2b:3a:ad:10:90:cc:61:fc:c9:
e9:36:3f:c9:2a:24:5c:0b:2a:fe:8a:6e:f4:2d:ea:
f1:b5:d1:79:cc:de:79:50:c3:d9:6e:52:d7:ec:0f:
6a:08:5a:8d:d7:77:66:fa:34:4e:d7:71:52:f8:64:
df:2e:83:98:30:65:97:3d:93:51:fe:00:4c:40:fa:
1a:f0:a0:d0:d3:ef:74:17:34:1f:6f:80:8d:9d:4b:
24:a9:72:ea:ca:0e:be:80:3e:c4:a2:dc:c0:64:90:
36:9b:41:ab:2f:9d:d8:5c:30:43:16:09:e5:99:f8:
b9:b9:e2:35:eb:e6:68:12:5b:52:6a:8d:4c:3d:09:
93:87:b2:fb:e2:82:0d:f2:3f:4f:0a:f4:33:0f:68:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:D3:CA:66:CA:B4:E3:BB:6B:9F:FD:00:32:ED:11:53:5F:32:BB
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S4vTymbKtOO7a5_9ADLtEVNfMrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3e:fb:d4:6d:f7:1b:b1:b5:fc:de:b9:cd:d6:c5:d5:f0:4d:
46:69:92:76:85:59:19:d0:bb:9b:ad:1c:2f:ab:e9:7c:a3:be:
7b:b1:da:d7:19:c1:07:cf:55:df:b1:e2:6c:5d:67:fb:96:70:
53:13:20:1a:28:a5:c5:60:c1:c6:a3:a6:89:84:58:73:b7:1e:
58:c9:b0:29:01:69:6d:95:cc:4a:08:ab:7f:5b:4a:3e:5a:18:
50:7d:e9:68:f7:f2:a8:05:f8:43:a4:8c:9c:40:71:d8:86:39:
0b:6a:2a:7a:41:97:ee:bf:d2:a0:54:f9:ff:e0:7e:65:de:9f:
2a:4d:75:fb:e3:85:14:5c:8b:a3:2d:19:7c:60:a0:83:74:3b:
81:05:3c:c2:68:59:2b:26:56:07:8a:1e:c9:6d:cd:47:8c:fa:
05:6c:6d:75:22:b7:78:0a:4d:17:20:01:6b:e6:50:bc:23:6f:
d8:37:cd:f9:2a:65:58:df:c5:63:ac:75:c9:a5:8d:25:ad:99:
b0:a3:b2:8a:13:5a:ba:e9:1d:48:bd:d1:75:36:c4:a7:eb:85:
5e:43:ba:61:64:ea:e5:58:20:b1:3f:da:a6:31:c9:12:66:a8:
c0:50:35:16:83:aa:8a:12:54:6b:53:17:dd:94:f0:ab:9b:5f:
cb:e8:61:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOu2MUJyj4KRPrLNOg0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwNzE3MTUyOTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjhiZDNjYTY2Y2FiNGUzYmI2YjlmZmQwMDMyZWQxMTUzNWYzMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ML8Pxo4gs5jQaOdquhSs9C30hh
B5ABFG2+8/vmFXlCxNDFnmuh+oLw4Oftk+W1SHgOlUmQO576D5+sU/ztzFoD4Yx2
PFWJv842j2le9BBuJ2cau/jt2FZWR9Mc0KCGFAELAKZhs6AqqV0EEVkrOq0QkMxh
/MnpNj/JKiRcCyr+im70LerxtdF5zN55UMPZblLX7A9qCFqN13dm+jRO13FS+GTf
LoOYMGWXPZNR/gBMQPoa8KDQ0+90FzQfb4CNnUskqXLqyg6+gD7EotzAZJA2m0Gr
L53YXDBDFgnlmfi5ueI16+ZoEltSao1MPQmTh7L74oIN8j9PCvQzD2jkVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuL08pmyrTju2uf/QAy7RFTXzK7MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvUzR2VHltYkt0T083YTVfOUFETHRFVk5mTXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY79MA0G
CSqGSIb3DQEBCwUAA4IBAQDCPvvUbfcbsbX83rnN1sXV8E1GaZJ2hVkZ0LubrRwv
q+l8o757sdrXGcEHz1XfseJsXWf7lnBTEyAaKKXFYMHGo6aJhFhztx5YybApAWlt
lcxKCKt/W0o+WhhQfelo9/KoBfhDpIycQHHYhjkLaip6QZfuv9KgVPn/4H5l3p8q
TXX744UUXIujLRl8YKCDdDuBBTzCaFkrJlYHih7Jbc1HjPoFbG11Ird4Ck0XIAFr
5lC8I2/YN835KmVY38VjrHXJpY0lrZmwo7KKE1q66R1IvdF1NsSn64VeQ7phZOrl
WCCxP9qmMckSZqjAUDUWg6qKElRrUxfdlPCrm1/L6GGY
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net