Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/eYk8E8ThH032EllM3lHwJmLSixc.roa
File: eYk8E8ThH032EllM3lHwJmLSixc.roa (raw, json)
Hash identifier: btwMFKpjGhALhhTSTxlA/eJvM+gWpG9RdzCOKAHLKrc=
Subject key identifier: 79:89:3C:13:C4:E1:1F:4D:F6:12:59:4C:DE:51:F0:26:62:D2:8B:17
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 0187C2EDFDB004940101839624F435F2A16A
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/eYk8E8ThH032EllM3lHwJmLSixc.roa
Signing time: Thu 27 Apr 2023 13:36:29 +0000
ROA not before: Thu 27 Apr 2023 13:36:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399976
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:ed:fd:b0:04:94:01:01:83:96:24:f4:35:f2:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Apr 27 13:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79893c13c4e11f4df612594cde51f02662d28b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:e2:73:66:ca:70:28:7c:d1:93:e8:8e:2f:
1b:4a:1c:4a:26:c2:b7:16:c0:4e:b9:b5:28:51:ab:
39:cc:11:db:d1:5b:4f:66:1b:d7:a4:98:9a:9b:e2:
16:14:36:eb:e4:e1:dd:7b:a8:88:f3:92:6c:fb:4a:
f4:75:ef:13:e4:c5:5b:7a:05:66:8b:80:6d:a5:23:
49:29:cc:17:c3:a7:b4:85:93:e0:7d:dd:eb:76:93:
4a:91:d7:e0:09:c6:89:62:d1:fc:bb:16:15:17:e5:
d7:ca:ef:e4:fc:35:a0:9a:4c:da:ee:d6:72:ac:4d:
54:e5:07:ed:42:61:81:e9:64:50:a3:70:ee:05:3c:
b3:d4:d9:58:52:86:76:ea:0e:96:d5:f9:92:f6:bf:
34:17:d3:77:31:2a:60:a5:8e:00:73:fb:d5:19:6d:
db:40:3d:3e:90:f0:78:64:2f:27:67:ef:c0:e6:ff:
57:dc:a8:75:c7:68:01:a6:7e:4c:3f:af:c5:c9:c7:
0a:97:31:b8:42:3c:ef:e2:f8:4a:8e:e9:74:36:68:
e5:54:18:59:f4:48:da:c2:65:b7:26:99:f5:bd:47:
32:ba:95:0f:91:c8:da:ba:e0:00:b0:dd:2e:51:36:
93:86:82:dd:d4:fa:47:78:ef:7b:6c:2f:87:be:16:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:3C:13:C4:E1:1F:4D:F6:12:59:4C:DE:51:F0:26:62:D2:8B:17
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/eYk8E8ThH032EllM3lHwJmLSixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5d:3c:50:da:03:c5:2c:a6:e4:da:5a:a0:db:db:76:12:19:
bb:46:b2:72:11:a6:b7:77:c4:26:38:18:6c:4c:38:70:be:6c:
dd:b3:cc:04:48:b9:9f:c3:76:99:43:e2:13:e0:78:c2:20:80:
84:80:ac:e9:d1:71:d1:71:47:58:6f:87:be:24:a6:23:50:5a:
eb:da:ff:0e:29:7b:63:cc:ec:11:ea:8a:76:fc:f3:08:37:f6:
83:b0:29:c8:17:5c:5a:6e:b0:43:f0:78:ba:44:ae:17:d7:03:
b7:80:4e:ea:f1:76:77:70:66:58:69:16:73:b6:02:f5:9f:ab:
fe:67:2a:94:09:e7:2d:d5:ff:be:f0:39:24:fb:c6:09:32:f8:
e7:39:76:f0:b6:0c:2b:ac:86:f8:09:c9:41:5c:08:c9:08:99:
26:3a:48:11:0c:40:a7:02:c2:7b:b6:58:09:35:de:14:0f:6b:
fe:4a:82:e2:c5:9e:7c:0b:07:7b:55:c4:43:0a:03:3f:fb:fc:
7a:47:eb:95:21:16:29:cb:ec:89:a9:8f:95:42:8e:06:25:f1:
28:06:5c:06:de:e2:10:e6:d0:30:4e:68:43:df:ac:85:02:ef:
f7:af:bf:e0:8d:c3:ce:f3:ec:29:70:6b:ad:97:d9:19:66:d9:
e5:e9:a0:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfC7f2wBJQBAYOWJPQ18qFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjMwNDI3MTMzNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTg5M2MxM2M0ZTExZjRkZjYxMjU5NGNkZTUxZjAyNjYyZDI4YjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnHic2bKcCh80ZPoji8bShxKJsK3
FsBOubUoUas5zBHb0VtPZhvXpJiam+IWFDbr5OHde6iI85Js+0r0de8T5MVbegVm
i4BtpSNJKcwXw6e0hZPgfd3rdpNKkdfgCcaJYtH8uxYVF+XXyu/k/DWgmkza7tZy
rE1U5QftQmGB6WRQo3DuBTyz1NlYUoZ26g6W1fmS9r80F9N3MSpgpY4Ac/vVGW3b
QD0+kPB4ZC8nZ+/A5v9X3Kh1x2gBpn5MP6/FyccKlzG4Qjzv4vhKjul0NmjlVBhZ
9EjawmW3Jpn1vUcyupUPkcjauuAAsN0uUTaThoLd1PpHeO97bC+HvhaoaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmJPBPE4R9N9hJZTN5R8CZi0osXMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvZVlrOEU4VGhIMDMyRWxsTTNsSHdKbUxTaXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nbMA0G
CSqGSIb3DQEBCwUAA4IBAQAfXTxQ2gPFLKbk2lqg29t2Ehm7RrJyEaa3d8QmOBhs
TDhwvmzds8wESLmfw3aZQ+IT4HjCIICEgKzp0XHRcUdYb4e+JKYjUFrr2v8OKXtj
zOwR6op2/PMIN/aDsCnIF1xabrBD8Hi6RK4X1wO3gE7q8XZ3cGZYaRZztgL1n6v+
ZyqUCect1f++8Dkk+8YJMvjnOXbwtgwrrIb4CclBXAjJCJkmOkgRDECnAsJ7tlgJ
Nd4UD2v+SoLixZ58Cwd7VcRDCgM/+/x6R+uVIRYpy+yJqY+VQo4GJfEoBlwG3uIQ
5tAwTmhD36yFAu/3r7/gjcPO8+wpcGutl9kZZtnl6aAb
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:44 2023 by rpki-client on console.sobornost.net