Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gf7b4KPDecZWjJ0SYPz2kvveiuM.roa
File: Gf7b4KPDecZWjJ0SYPz2kvveiuM.roa (raw, json)
Hash identifier: JJ+9tPj7cSBYQ42RiqaNngTVnXyK51xqYIf8lT7Hby0=
Subject key identifier: 19:FE:DB:E0:A3:C3:79:C6:56:8C:9D:12:60:FC:F6:92:FB:DE:8A:E3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD54471FE1D59E8E3938748B5D24C0B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gf7b4KPDecZWjJ0SYPz2kvveiuM.roa
Signing time: Mon 02 Jan 2023 00:15:25 +0000
ROA not before: Mon 02 Jan 2023 00:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62042
IP address blocks: 188.215.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:44:71:fe:1d:59:e8:e3:93:87:48:b5:d2:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19fedbe0a3c379c6568c9d1260fcf692fbde8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:2f:e0:96:ee:cb:13:3f:68:d9:c7:28:14:
32:3a:dd:ac:da:ff:36:84:00:df:60:e0:bb:96:06:
1a:d9:6b:96:91:91:83:d0:60:5a:0b:4e:45:76:93:
5e:b2:4c:f8:21:a2:0e:42:3a:f4:80:07:f0:c4:2e:
d6:a3:39:c9:59:dd:fb:a8:84:8d:b9:3f:43:5d:c2:
77:cd:8c:fd:4a:34:c0:1d:18:30:52:55:fa:36:ff:
3b:8b:5a:ab:df:60:ae:e3:0f:19:fd:52:d6:fe:79:
20:15:26:37:a9:fa:f6:0f:3d:fe:42:85:1e:0b:67:
a8:be:1c:04:f1:74:d6:c8:a2:c7:b5:c4:32:b6:d6:
30:52:5d:c8:d6:80:78:cd:79:01:0a:d5:81:8e:61:
6c:df:cf:65:c1:f8:08:4e:c8:7b:02:fb:c8:ff:de:
6b:75:6a:02:55:d6:8c:1d:0d:15:d2:c2:40:00:09:
ae:ba:fb:2f:0c:7b:df:7e:a5:aa:e9:d8:c2:89:c4:
c1:81:db:25:b2:7a:9c:6e:b9:78:88:4a:b4:06:9f:
fc:4e:10:45:03:2d:d8:7b:83:57:ed:03:11:01:20:
4d:fb:d3:f6:fb:77:ba:65:40:f2:3f:dd:5f:fe:b8:
a4:6a:c5:08:3d:32:48:a0:39:b4:c8:08:de:d4:e5:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:DB:E0:A3:C3:79:C6:56:8C:9D:12:60:FC:F6:92:FB:DE:8A:E3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gf7b4KPDecZWjJ0SYPz2kvveiuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f5:91:34:d7:39:b9:d0:c9:a4:3e:b8:0f:33:68:7c:12:dd:
88:70:bf:10:f3:48:7a:0a:5b:3b:0e:e5:b7:84:73:17:07:b3:
1e:3c:6e:9c:41:b4:c8:aa:d0:c5:8e:be:37:b0:25:d1:b7:b2:
c1:cb:4f:4a:ed:e0:84:47:cc:8f:24:72:e3:49:b4:c1:20:11:
4d:59:25:3d:c3:f9:26:21:59:16:2e:1f:c1:7c:7b:83:25:79:
ed:36:f0:52:86:d9:46:7d:74:08:17:b0:2c:03:a7:1c:26:a7:
a8:70:10:03:bd:42:52:6f:79:1d:84:7a:4c:cf:94:91:2d:37:
7b:0b:3e:bc:9a:e4:87:68:ee:fa:bc:45:42:2e:68:bd:a4:3d:
e0:1c:70:4d:7b:b3:2a:4d:8f:5a:ba:42:40:5b:ed:fb:84:cc:
2b:1f:54:f1:a3:98:5c:f6:01:c6:dd:be:35:88:50:e3:c3:35:
5b:72:5e:e2:70:50:e7:56:76:29:9a:c3:bc:eb:db:24:0d:10:
87:f3:d4:81:33:b2:04:8b:72:cd:4b:f9:18:ca:56:b2:59:6d:
86:8b:c3:28:60:9e:8a:78:ec:24:ac:9f:05:1b:03:b0:71:49:
11:69:22:ce:f6:b3:11:34:83:3a:ce:9f:4b:1b:0f:da:24:c0:
c5:36:2d:ee
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1URx/h1Z6OOTh0i10kwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWZlZGJlMGEzYzM3OWM2NTY4YzlkMTI2MGZjZjY5MmZiZGU4YWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO0v4JbuyxM/aNnHKBQyOt2s2v82
hADfYOC7lgYa2WuWkZGD0GBaC05FdpNeskz4IaIOQjr0gAfwxC7WoznJWd37qISN
uT9DXcJ3zYz9SjTAHRgwUlX6Nv87i1qr32Cu4w8Z/VLW/nkgFSY3qfr2Dz3+QoUe
C2eovhwE8XTWyKLHtcQyttYwUl3I1oB4zXkBCtWBjmFs389lwfgITsh7AvvI/95r
dWoCVdaMHQ0V0sJAAAmuuvsvDHvffqWq6djCicTBgdslsnqcbrl4iEq0Bp/8ThBF
Ay3Ye4NX7QMRASBN+9P2+3e6ZUDyP91f/rikasUIPTJIoDm0yAje1OUQUQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBn+2+Cjw3nGVoydEmD89pL73orjMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0dmN2I0S1BEZWNaV2pKMFNZUHoya3Z2ZWl1TS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81ycw
DQYJKoZIhvcNAQELBQADggEBAIz1kTTXObnQyaQ+uA8zaHwS3YhwvxDzSHoKWzsO
5beEcxcHsx48bpxBtMiq0MWOvjewJdG3ssHLT0rt4IRHzI8kcuNJtMEgEU1ZJT3D
+SYhWRYuH8F8e4Mlee028FKG2UZ9dAgXsCwDpxwmp6hwEAO9QlJveR2EekzPlJEt
N3sLPrya5Ido7vq8RUIuaL2kPeAccE17sypNj1q6QkBb7fuEzCsfVPGjmFz2Acbd
vjWIUOPDNVtyXuJwUOdWdimaw7zr2yQNEIfz1IEzsgSLcs1L+RjKVrJZbYaLwyhg
nop47CSsnwUbA7BxSRFpIs72sxE0gzrOn0sbD9okwMU2Le4=
-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:28 2024 by rpki-client on console.sobornost.net