Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/ocCxVWTghdrXG0a1IAZezY_KmB0.roa
File: ocCxVWTghdrXG0a1IAZezY_KmB0.roa (raw, json)
Hash identifier: bwxYvTm8TU/IbcF/qDAnnyRIG97Luxem2HmFPdMnACc=
Subject key identifier: A1:C0:B1:55:64:E0:85:DA:D7:1B:46:B5:20:06:5E:CD:8F:CA:98:1D
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 01857246F2E8B66E6B2ECC672960F650FF6A
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/ocCxVWTghdrXG0a1IAZezY_KmB0.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64493
IP address blocks: 195.128.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f2:e8:b6:6e:6b:2e:cc:67:29:60:f6:50:ff:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1c0b15564e085dad71b46b520065ecd8fca981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:d0:cd:e2:9c:56:40:37:d0:17:25:f1:e3:
f2:f7:bd:51:44:03:87:ab:de:f4:4b:db:b1:fb:ec:
d1:b5:a9:31:fd:2a:87:1b:31:0e:c6:26:5b:e1:d4:
16:61:75:5c:0a:54:67:14:48:66:7b:9a:52:97:99:
4d:c1:ab:95:9f:a0:9b:ea:5b:15:83:9d:63:3d:e2:
50:28:7d:e1:80:21:9b:97:ef:39:2c:c5:d1:0b:85:
10:e0:7c:5f:11:67:6c:7e:02:ad:e9:74:6a:90:f5:
07:63:3f:3d:33:8e:75:2a:d9:40:f5:7c:0f:df:4d:
c7:fd:ff:83:d1:c3:93:f8:ba:ad:14:29:9b:1d:70:
a5:65:92:46:e4:ee:de:48:6c:6c:67:ec:79:92:6a:
07:87:80:ec:d2:03:17:1c:9d:5c:3d:ca:26:52:76:
b1:33:e4:91:4e:4d:08:84:92:1f:e2:32:24:7c:a6:
37:f4:00:b4:43:50:36:34:74:cf:6b:f0:48:ce:e3:
c7:bd:54:17:52:1a:78:be:14:1b:ab:b7:4e:b6:02:
ab:0f:9e:92:bb:48:7c:66:c0:93:1d:11:b3:2f:55:
10:e8:af:be:09:47:5d:d7:1f:64:30:ff:95:9e:66:
d5:a0:dd:19:64:ec:14:d0:e4:c1:5c:bc:e3:9d:29:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:B1:55:64:E0:85:DA:D7:1B:46:B5:20:06:5E:CD:8F:CA:98:1D
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/ocCxVWTghdrXG0a1IAZezY_KmB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.133.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b1:cb:c8:be:35:6a:31:7e:57:3e:00:a8:fc:8f:be:61:e8:
51:2b:db:7c:87:43:0c:3f:4d:35:3d:30:39:c6:68:01:c8:c8:
44:29:51:b6:74:43:ea:af:31:0d:54:94:1d:bb:c5:29:49:a8:
9c:92:8b:f6:67:77:7b:5d:fc:b0:44:ba:31:38:68:a2:38:31:
7b:70:3c:ba:b9:24:d3:e5:c3:e2:a7:36:54:d6:8a:fc:fc:d6:
49:4d:cf:9b:8b:26:da:d4:6a:00:dd:32:e7:25:d8:b0:33:5f:
25:71:6f:dd:60:54:3b:23:68:48:24:ee:cf:85:c8:6c:16:9c:
85:ac:3d:9e:17:7f:32:7c:06:f3:b6:36:b8:1c:b2:a1:c5:32:
12:3f:01:fa:68:38:74:1b:8f:e9:1a:ef:0b:98:aa:37:aa:7c:
20:19:c8:ce:5f:20:cc:2c:46:b3:fa:55:e4:a8:a3:3e:7f:37:
14:9d:f0:72:0c:ea:cc:77:ea:c6:2a:b6:95:71:4a:d6:34:e2:
c6:12:6c:fe:1c:83:e9:37:89:3a:69:82:d6:ba:7f:2a:c9:67:
9b:ba:8d:da:dd:ed:ee:94:1d:b9:32:db:13:1c:45:97:8e:6c:
9c:fe:b6:f1:4e:69:70:b7:71:84:71:fe:55:00:51:33:08:a4:
e5:70:6e:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRvLotm5rLsxnKWD2UP9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDAxZTU4ODkwYmYyMzBkY2FlNWQwMzA1MTE5ZmYyYzJi
OGQ0MzMwHhcNMjMwMTAyMTEzODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWMwYjE1NTY0ZTA4NWRhZDcxYjQ2YjUyMDA2NWVjZDhmY2E5ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCrQzeKcVkA30Bcl8ePy971RRAOH
q970S9ux++zRtakx/SqHGzEOxiZb4dQWYXVcClRnFEhme5pSl5lNwauVn6Cb6lsV
g51jPeJQKH3hgCGbl+85LMXRC4UQ4HxfEWdsfgKt6XRqkPUHYz89M451KtlA9XwP
303H/f+D0cOT+LqtFCmbHXClZZJG5O7eSGxsZ+x5kmoHh4Ds0gMXHJ1cPcomUnax
M+SRTk0IhJIf4jIkfKY39AC0Q1A2NHTPa/BIzuPHvVQXUhp4vhQbq7dOtgKrD56S
u0h8ZsCTHRGzL1UQ6K++CUdd1x9kMP+VnmbVoN0ZZOwU0OTBXLzjnSlAewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHAsVVk4IXa1xtGtSAGXs2PypgdMB8GA1UdIwQY
MBaAFDhAHliJC/Iw3K5dAwURn/LCuNQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYt
OGI5Y2RkYjczNDA4LzEvb2NDeFZXVGdoZHJYRzBhMUlBWmV6WV9LbUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYtOGI5Y2RkYjczNDA4
LzEvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4CFMA0G
CSqGSIb3DQEBCwUAA4IBAQC+scvIvjVqMX5XPgCo/I++YehRK9t8h0MMP001PTA5
xmgByMhEKVG2dEPqrzENVJQdu8UpSaickov2Z3d7XfywRLoxOGiiODF7cDy6uSTT
5cPipzZU1or8/NZJTc+biyba1GoA3TLnJdiwM18lcW/dYFQ7I2hIJO7PhchsFpyF
rD2eF38yfAbztja4HLKhxTISPwH6aDh0G4/pGu8LmKo3qnwgGcjOXyDMLEaz+lXk
qKM+fzcUnfByDOrMd+rGKraVcUrWNOLGEmz+HIPpN4k6aYLWun8qyWebuo3a3e3u
lB25MtsTHEWXjmyc/rbxTmlwt3GEcf5VAFEzCKTlcG7N
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:12 2024 by rpki-client on console.sobornost.net