Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/i0t4z8KwD_TzAgkC-tQr1GI0vhM.roa
File: i0t4z8KwD_TzAgkC-tQr1GI0vhM.roa (raw, json)
Hash identifier: V1jkjYLevQj86guT/vNIrN+/BjFh4cKwKwG1ymylsy8=
Subject key identifier: 8B:4B:78:CF:C2:B0:0F:F4:F3:02:09:02:FA:D4:2B:D4:62:34:BE:13
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0185703045A7B7C1716DFE10139843E47CB2
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/i0t4z8KwD_TzAgkC-tQr1GI0vhM.roa
Signing time: Mon 02 Jan 2023 01:54:49 +0000
ROA not before: Mon 02 Jan 2023 01:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43507
IP address blocks: 78.156.32.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:45:a7:b7:c1:71:6d:fe:10:13:98:43:e4:7c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Jan 2 01:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b4b78cfc2b00ff4f3020902fad42bd46234be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:c9:95:66:3d:2c:63:97:d7:bb:3a:4e:5b:
ed:4c:bf:b7:2a:81:9c:ac:c3:94:8d:e7:7c:28:6a:
71:4b:32:7e:cd:96:b1:91:71:04:20:97:1c:81:ed:
58:73:e9:7e:10:b0:49:b9:d2:16:21:1c:0b:45:9d:
c5:93:2c:98:6a:7e:9e:f5:b9:97:fa:6f:21:a9:f3:
7b:a0:e2:d5:4b:16:43:1e:38:7c:c0:2d:1a:c3:73:
d7:59:ae:b2:f9:60:56:c9:b0:01:84:8d:b4:02:e2:
2b:09:c8:b0:f1:f1:9b:a2:f7:78:a7:20:9e:56:18:
b2:ef:f5:1a:0b:9b:7f:11:fb:8d:b5:47:d3:7a:02:
d4:af:c8:09:fe:f5:13:e8:51:4c:28:68:6a:19:a1:
b3:c8:68:47:4f:0d:0e:93:0c:4e:d8:06:e5:e4:8f:
11:4f:40:d3:4c:2d:25:b0:b3:fe:4b:1c:fb:d5:fd:
e4:9f:39:4b:0c:40:68:8b:f6:52:09:af:34:37:6c:
84:54:42:68:3c:54:e9:38:75:a3:07:be:ad:7a:9a:
c7:92:ad:c2:e7:3e:41:8b:c3:f3:dc:17:c3:fa:5a:
38:42:cb:15:26:25:89:6d:ea:3b:a7:a7:b5:ab:b7:
6a:9f:ca:24:2e:0a:fe:0b:22:86:e1:eb:ea:9a:d4:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:78:CF:C2:B0:0F:F4:F3:02:09:02:FA:D4:2B:D4:62:34:BE:13
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/i0t4z8KwD_TzAgkC-tQr1GI0vhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:21:4f:fd:44:47:4a:ec:b7:27:e5:8b:63:ad:b1:00:91:81:
1c:45:b5:2a:29:5c:4f:ca:df:42:d0:ef:09:46:9a:5a:78:fa:
fa:6a:76:a8:7d:8c:6a:11:19:5e:b5:c7:41:8d:1f:51:c9:c3:
f5:d8:85:a6:c5:27:6d:f5:d2:6d:56:ed:48:00:39:b3:c8:e3:
f4:4d:5b:fd:1d:7d:20:3e:2b:1c:20:47:a7:2c:1c:6e:1a:16:
ba:b2:b0:c1:d4:4e:23:cb:ac:c5:e9:6b:49:36:30:d7:98:14:
0d:28:b0:5c:89:b5:c9:0a:5b:85:40:86:12:ae:88:bf:93:e3:
59:11:1e:93:b6:c1:d2:b7:99:2e:44:d9:4f:68:65:66:96:a2:
e3:ef:fa:16:0a:02:5f:cf:a4:7e:af:64:ce:a4:bc:fd:e8:6a:
9f:bf:e2:57:6c:f6:74:e5:e6:fc:f9:76:c8:bf:22:8a:de:41:
ba:e7:aa:f5:80:88:38:86:80:4f:99:80:e0:48:c1:7a:d6:7e:
33:1d:61:06:af:db:4d:7a:b0:2f:4a:51:85:61:ed:64:42:66:
d4:a4:c8:24:03:bb:cd:db:e4:f9:77:fb:aa:41:82:94:b6:d4:
fc:a4:1b:d5:3d:06:aa:44:9d:55:85:b1:43:3b:b6:77:82:0a:
75:d5:36:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMEWnt8Fxbf4QE5hD5HyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3
ZDFlMTcwHhcNMjMwMTAyMDE1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjRiNzhjZmMyYjAwZmY0ZjMwMjA5MDJmYWQ0MmJkNDYyMzRiZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPPJlWY9LGOX17s6TlvtTL+3KoGc
rMOUjed8KGpxSzJ+zZaxkXEEIJccge1Yc+l+ELBJudIWIRwLRZ3FkyyYan6e9bmX
+m8hqfN7oOLVSxZDHjh8wC0aw3PXWa6y+WBWybABhI20AuIrCciw8fGbovd4pyCe
Vhiy7/UaC5t/EfuNtUfTegLUr8gJ/vUT6FFMKGhqGaGzyGhHTw0OkwxO2Abl5I8R
T0DTTC0lsLP+Sxz71f3knzlLDEBoi/ZSCa80N2yEVEJoPFTpOHWjB76teprHkq3C
5z5Bi8Pz3BfD+lo4QssVJiWJbeo7p6e1q7dqn8okLgr+CyKG4evqmtTyFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFItLeM/CsA/08wIJAvrUK9RiNL4TMB8GA1UdIwQY
MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt
M2Q3ZTRiNDk2YjIzLzEvaTB0NHo4S3dEX1R6QWdrQy10UXIxR0kwdmhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz
LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTpwgMA0G
CSqGSIb3DQEBCwUAA4IBAQByIU/9REdK7Lcn5YtjrbEAkYEcRbUqKVxPyt9C0O8J
RppaePr6anaofYxqERletcdBjR9RycP12IWmxSdt9dJtVu1IADmzyOP0TVv9HX0g
PiscIEenLBxuGha6srDB1E4jy6zF6WtJNjDXmBQNKLBcibXJCluFQIYSroi/k+NZ
ER6TtsHSt5kuRNlPaGVmlqLj7/oWCgJfz6R+r2TOpLz96Gqfv+JXbPZ05eb8+XbI
vyKK3kG656r1gIg4hoBPmYDgSMF61n4zHWEGr9tNerAvSlGFYe1kQmbUpMgkA7vN
2+T5d/uqQYKUttT8pBvVPQaqRJ1VhbFDO7Z3ggp11TZw
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:52 2024 by rpki-client on console.sobornost.net