Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/zeXttUHrAKcl8rJ60mt7P3uqJv4.roa
File: zeXttUHrAKcl8rJ60mt7P3uqJv4.roa (raw, json)
Hash identifier: 7ZJjioJcALAslPn1k0p0j/YbP90uR3gk3+w2NevQW9A=
Subject key identifier: CD:E5:ED:B5:41:EB:00:A7:25:F2:B2:7A:D2:6B:7B:3F:7B:AA:26:FE
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AD7460E05E9562086A77F6B2313F407CF
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/zeXttUHrAKcl8rJ60mt7P3uqJv4.roa
Signing time: Wed 27 Sep 2023 15:33:27 +0000
ROA not before: Wed 27 Sep 2023 15:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 77.233.128.0/19 maxlen: 19
83.107.64.0/18 maxlen: 18
83.107.192.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
80.176.0.0/15 maxlen: 15
83.104.0.0/14 maxlen: 14
83.107.128.0/18 maxlen: 18
212.225.0.0/17 maxlen: 17
62.49.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:46:0e:05:e9:56:20:86:a7:7f:6b:23:13:f4:07:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Sep 27 15:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde5edb541eb00a725f2b27ad26b7b3f7baa26fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:a6:eb:7c:0f:50:79:c6:15:90:9b:9a:3a:
ad:14:9c:eb:40:0b:a8:fb:ee:2d:ab:0a:0f:ee:96:
8a:38:a9:c5:b0:f6:0e:fe:44:5e:d6:8b:eb:d5:78:
64:58:62:8a:cb:d4:6c:fb:e9:75:0f:17:75:4e:64:
45:0f:87:e7:8a:0e:2f:35:0b:04:5b:3b:99:40:9d:
b8:6a:23:be:cf:49:6c:e2:11:46:88:37:0f:21:e2:
58:99:51:8a:c2:c6:e6:5e:cf:30:f4:b6:a9:ff:d9:
74:7f:1d:a0:b8:18:3c:b1:32:3c:73:49:81:07:43:
0d:92:08:0c:cb:09:cf:36:16:f6:f1:38:50:0b:2c:
e8:fa:94:00:15:3b:78:c0:e7:de:3c:7d:de:32:34:
a6:5d:57:fa:99:75:12:22:7e:27:8f:85:b8:c8:bc:
a5:5d:8d:de:f2:ee:0a:0d:b5:95:ad:77:9b:1b:f9:
e1:89:de:bf:8d:c7:54:21:7f:e8:6b:16:99:fd:67:
62:12:dc:b1:5f:c3:d5:82:ea:4c:cc:36:06:13:e5:
bc:f9:30:4d:7f:45:c8:23:0e:f3:bb:65:e4:9a:7e:
28:ec:15:6e:27:0d:99:2e:54:51:6b:60:6e:6c:f2:
95:f5:d2:e4:54:68:1a:2b:8d:ad:6d:fb:08:7e:da:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:ED:B5:41:EB:00:A7:25:F2:B2:7A:D2:6B:7B:3F:7B:AA:26:FE
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/zeXttUHrAKcl8rJ60mt7P3uqJv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
212.225.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6e:2e:49:36:0d:f5:1f:6b:b8:c6:d6:08:88:eb:2b:fa:3c:2b:
f8:e7:aa:db:82:28:ed:ca:6e:94:c8:f7:d5:05:cd:f0:72:9b:
6f:06:12:a2:4d:57:f5:97:4e:28:ac:7c:da:48:26:33:be:9a:
51:91:93:67:3a:de:b3:d7:70:69:76:0e:a5:cb:ad:11:2e:b5:
f5:48:62:34:e1:0e:68:e0:e1:06:1c:00:00:99:b3:6a:39:98:
2e:55:47:2e:b6:58:de:e1:e9:0b:81:b2:08:87:fb:b3:a0:87:
9c:f6:cd:0b:77:eb:ac:0c:ad:90:a5:0d:3c:a3:d7:74:85:51:
28:c2:34:4c:e5:28:b6:16:6c:15:ce:e6:73:de:fd:41:f1:e2:
1e:1e:bf:58:b6:f4:97:c6:cb:02:f9:e8:e2:ef:58:95:58:68:
1c:9f:71:73:95:37:54:78:11:5d:f0:53:74:91:5b:a2:89:cd:
88:56:93:36:24:55:ff:d1:29:8a:0e:b7:bb:83:40:86:c8:00:
3c:46:ab:36:8a:ce:d1:92:97:1d:ce:8a:af:54:cc:2e:d0:5f:
11:6c:cf:ec:7c:f9:9a:b7:45:26:6e:6d:4a:51:01:73:78:06:
38:94:76:49:ae:75:c4:4d:b0:f0:97:9a:c0:86:1c:61:04:9f:
ec:73:6f:90
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYrXRg4F6VYghqd/ayMT9AfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl
ZTkzYzgwHhcNMjMwOTI3MTUzMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGU1ZWRiNTQxZWIwMGE3MjVmMmIyN2FkMjZiN2IzZjdiYWEyNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXem63wPUHnGFZCbmjqtFJzrQAuo
++4tqwoP7paKOKnFsPYO/kRe1ovr1XhkWGKKy9Rs++l1Dxd1TmRFD4fnig4vNQsE
WzuZQJ24aiO+z0ls4hFGiDcPIeJYmVGKwsbmXs8w9Lap/9l0fx2guBg8sTI8c0mB
B0MNkggMywnPNhb28ThQCyzo+pQAFTt4wOfePH3eMjSmXVf6mXUSIn4nj4W4yLyl
XY3e8u4KDbWVrXebG/nhid6/jcdUIX/oaxaZ/WdiEtyxX8PVgupMzDYGE+W8+TBN
f0XIIw7zu2Xkmn4o7BVuJw2ZLlRRa2BubPKV9dLkVGgaK42tbfsIftrYwwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFM3l7bVB6wCnJfKyetJrez97qib+MB8GA1UdIwQY
MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt
NzUyNWQ0ZDQwOGI1LzEvemVYdHRVSHJBS2NsOHJKNjBtdDdQM3VxSnY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1
LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAPjEDBAc+
OAADBAVN6YADAwFQsAMDAlNoAwQH1OEAMA0GCSqGSIb3DQEBCwUAA4IBAQBuLkk2
DfUfa7jG1giI6yv6PCv456rbgijtym6UyPfVBc3wcptvBhKiTVf1l04orHzaSCYz
vppRkZNnOt6z13Bpdg6ly60RLrX1SGI04Q5o4OEGHAAAmbNqOZguVUcutlje4ekL
gbIIh/uzoIec9s0Ld+usDK2QpQ08o9d0hVEowjRM5Si2FmwVzuZz3v1B8eIeHr9Y
tvSXxssC+eji71iVWGgcn3FzlTdUeBFd8FN0kVuiic2IVpM2JFX/0SmKDre7g0CG
yAA8Rqs2is7RkpcdzoqvVMwu0F8RbM/sfPmat0Umbm1KUQFzeAY4lHZJrnXETbDw
l5rAhhxhBJ/sc2+Q
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net