Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rwIA8n9D30-4pO4HJMkLVVahBDE.roa
File: rwIA8n9D30-4pO4HJMkLVVahBDE.roa (raw, json)
Hash identifier: 9YhsOepIZ2DG5f+Wn3hOlaiInsVGz39RSbUdqWjdPVI=
Subject key identifier: AF:02:00:F2:7F:43:DF:4F:B8:A4:EE:07:24:C9:0B:55:56:A1:04:31
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AFDB627A5CF642181242F8BF8EFB
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rwIA8n9D30-4pO4HJMkLVVahBDE.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62025
IP address blocks: 195.136.123.0/24 maxlen: 24
82.177.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:af:db:62:7a:5c:f6:42:18:12:42:f8:bf:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0200f27f43df4fb8a4ee0724c90b5556a10431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:cd:5f:10:17:20:70:62:ca:27:0b:ec:d1:
7a:a8:c8:40:c6:49:70:1b:c5:04:7e:37:11:e9:f3:
11:25:d7:b7:10:b4:d5:56:84:de:12:21:6a:44:18:
2b:af:40:dd:71:b2:db:b9:87:5b:74:14:09:a8:af:
f9:3b:b8:ba:05:d1:c6:d7:93:c8:dd:5c:16:0a:3a:
e9:b3:d0:42:7b:92:6f:7b:b1:cf:cc:e8:36:ee:a4:
a5:ac:6b:9c:41:16:e3:2c:1c:97:3a:ef:2e:ba:dc:
c5:d2:ee:60:57:aa:30:d9:dc:a5:5d:d3:60:2a:ac:
45:08:89:27:98:14:f2:8e:ae:ca:f2:76:68:6d:be:
cc:1d:ed:33:04:4a:74:04:f2:e0:fb:26:d6:ea:e0:
94:db:b4:23:73:5a:6a:f6:61:92:f7:70:a4:99:72:
31:00:34:bd:33:f8:9a:26:c0:3c:91:da:6c:4e:7f:
16:bb:65:86:89:b6:c6:24:9d:5d:14:a3:45:58:71:
7f:a9:74:97:be:3e:d3:31:ae:c9:25:9d:77:06:05:
97:7c:0e:6c:60:df:6e:6d:45:72:f5:2d:c0:cb:51:
c0:d3:ef:2c:50:60:43:37:3d:db:aa:eb:1a:35:1e:
8c:b8:45:2a:51:63:2c:03:78:d3:07:c9:8a:a1:07:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:00:F2:7F:43:DF:4F:B8:A4:EE:07:24:C9:0B:55:56:A1:04:31
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rwIA8n9D30-4pO4HJMkLVVahBDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.8.0/24
195.136.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c4:c7:5a:b5:40:4a:b7:a4:c5:0a:ae:dd:70:40:f3:17:0e:
12:14:ab:33:d5:9a:14:cd:bb:d0:74:4d:c6:3b:65:52:a5:4b:
6e:cc:74:aa:07:28:7b:5a:82:4f:f3:13:4c:11:fe:f6:40:0e:
76:10:4b:33:66:50:f7:af:18:cd:82:25:7e:82:7d:b2:84:53:
aa:38:4f:75:93:d1:88:22:04:ed:90:59:f0:77:1d:44:39:f7:
b4:c2:c5:68:3b:8c:1e:e6:99:f9:e9:f6:d0:ef:03:17:a9:18:
0b:85:04:85:cf:36:37:71:84:fc:e0:d9:f2:39:01:22:36:61:
bd:f4:42:69:e3:b0:64:99:5c:b8:cc:a6:e3:92:b3:23:9d:34:
37:43:e4:c2:61:8e:0e:cc:6a:71:e2:ab:12:5e:bd:ce:78:2d:
15:d9:25:cb:1d:53:72:ae:0a:61:8c:c2:0b:dc:08:37:cf:f2:
97:fc:51:8c:76:78:46:33:b0:c6:96:e1:35:84:7a:d7:33:e1:
3e:d3:8f:10:49:7f:03:fd:22:da:65:ef:58:3e:1d:16:02:12:
8e:ce:dd:1e:37:17:34:f2:a6:38:1f:95:c4:43:65:57:1e:2e:
51:2e:9b:9c:3c:fd:6a:69:b1:7f:18:06:8e:65:86:00:9f:0e:
b6:b4:b9:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw8K/bYnpc9kIYEkL4v477MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjAyMDBmMjdmNDNkZjRmYjhhNGVlMDcyNGM5MGI1NTU2YTEwNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7bNXxAXIHBiyicL7NF6qMhAxklw
G8UEfjcR6fMRJde3ELTVVoTeEiFqRBgrr0DdcbLbuYdbdBQJqK/5O7i6BdHG15PI
3VwWCjrps9BCe5Jve7HPzOg27qSlrGucQRbjLByXOu8uutzF0u5gV6ow2dylXdNg
KqxFCIknmBTyjq7K8nZobb7MHe0zBEp0BPLg+ybW6uCU27Qjc1pq9mGS93CkmXIx
ADS9M/iaJsA8kdpsTn8Wu2WGibbGJJ1dFKNFWHF/qXSXvj7TMa7JJZ13BgWXfA5s
YN9ubUVy9S3Ay1HA0+8sUGBDNz3bqusaNR6MuEUqUWMsA3jTB8mKoQeOjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8CAPJ/Q99PuKTuByTJC1VWoQQxMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvcndJQThuOUQzMC00cE80SEpNa0xWVmFoQkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUrEIAwQA
w4h7MA0GCSqGSIb3DQEBCwUAA4IBAQDHxMdatUBKt6TFCq7dcEDzFw4SFKsz1ZoU
zbvQdE3GO2VSpUtuzHSqByh7WoJP8xNMEf72QA52EEszZlD3rxjNgiV+gn2yhFOq
OE91k9GIIgTtkFnwdx1EOfe0wsVoO4we5pn56fbQ7wMXqRgLhQSFzzY3cYT84Nny
OQEiNmG99EJp47BkmVy4zKbjkrMjnTQ3Q+TCYY4OzGpx4qsSXr3OeC0V2SXLHVNy
rgphjMIL3Ag3z/KX/FGMdnhGM7DGluE1hHrXM+E+048QSX8D/SLaZe9YPh0WAhKO
zt0eNxc08qY4H5XEQ2VXHi5RLpucPP1qabF/GAaOZYYAnw62tLlW
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net