Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/LiO7qe-06qwKiZF5ZOo7RprGsjA.roa
File: LiO7qe-06qwKiZF5ZOo7RprGsjA.roa (raw, json)
Hash identifier: E3UeT5duYsGPAhauCEACbsRn9LdMO7DjapsLhWYtBf0=
Subject key identifier: 2E:23:BB:A9:EF:B4:EA:AC:0A:89:91:79:64:EA:3B:46:9A:C6:B2:30
Certificate issuer: /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial: 01856B40E92C50990D9FEC691789F2E2C23F
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/LiO7qe-06qwKiZF5ZOo7RprGsjA.roa
Signing time: Sun 01 Jan 2023 02:54:54 +0000
ROA not before: Sun 01 Jan 2023 02:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57099
IP address blocks: 212.162.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:e9:2c:50:99:0d:9f:ec:69:17:89:f2:e2:c2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
Validity
Not Before: Jan 1 02:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e23bba9efb4eaac0a89917964ea3b469ac6b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:02:d7:99:75:1a:18:9a:a4:4a:0f:60:a1:
58:c8:b0:3f:0a:71:71:1a:24:9e:53:91:1d:95:e1:
0e:93:cc:59:9b:7c:58:2b:cc:30:14:4c:bd:bf:22:
e3:5a:04:cf:97:1f:2a:ff:61:7c:63:6c:64:ac:83:
40:55:d6:16:ad:1b:e6:be:63:af:75:e9:ef:f3:58:
a4:d3:19:a7:7b:78:c2:0c:30:05:08:3c:49:6f:21:
4b:dc:28:24:1d:ce:29:d7:70:ad:dc:cb:3f:70:26:
ff:c7:a9:69:47:e5:48:6a:c0:a1:fa:71:9c:87:00:
17:35:f1:84:b7:da:0c:e5:1d:4b:81:c6:d7:86:7a:
3a:38:20:c0:8c:41:8b:c2:ea:a0:71:63:37:e8:f6:
48:ee:d8:bf:e5:0e:38:5a:c0:e5:bb:d4:ad:0b:39:
35:9a:4e:bf:8c:a2:a5:64:e3:89:74:00:18:28:86:
be:d9:ce:d7:62:d2:99:a3:13:65:16:d4:5b:b5:f0:
04:6b:e4:83:5e:08:0f:a5:29:8c:7c:52:d0:ee:1c:
b5:5f:ce:c4:42:8a:57:62:7c:89:ab:d2:7f:47:03:
19:16:8b:c0:88:9e:2b:96:c2:a3:46:6f:23:ba:ba:
9a:d9:87:60:a6:a5:e0:9a:68:a3:a0:7b:6a:c1:88:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:23:BB:A9:EF:B4:EA:AC:0A:89:91:79:64:EA:3B:46:9A:C6:B2:30
X509v3 Authority Key Identifier:
keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/LiO7qe-06qwKiZF5ZOo7RprGsjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8e:43:71:34:95:2f:8c:2d:49:17:80:b2:93:4a:4a:93:65:
8c:31:6a:f4:4c:46:2e:a8:b7:5b:46:94:28:e8:5e:3e:3f:5b:
34:b3:17:64:13:e7:e4:bc:7f:09:45:a2:0d:be:8a:02:6f:aa:
c6:2e:b9:5b:28:67:3d:1b:5c:ee:31:4f:b4:ec:27:4a:50:db:
7b:cb:fc:b3:f5:55:c9:02:ea:89:c0:47:ba:44:90:7f:99:b6:
d9:ae:3c:73:3f:42:a3:6e:88:49:b3:cc:7a:3c:14:9f:f3:fd:
95:ae:06:2f:54:19:17:e0:6f:49:8d:d4:9e:ca:14:94:16:d4:
b1:46:af:52:a0:d7:91:a0:3a:cd:04:07:2d:5d:fd:29:53:bd:
43:17:80:91:18:c6:c9:17:de:4c:2b:36:63:92:58:1a:0c:91:
3f:9c:5c:57:f0:7b:61:0b:1c:74:fe:8b:3b:d3:44:d8:40:38:
e3:0b:a5:02:1e:eb:fd:47:33:9b:b5:fa:74:30:c2:ab:f8:cb:
9b:da:4a:2e:22:10:2c:66:85:10:88:0b:59:dc:7a:ec:26:55:
e0:b8:82:eb:6c:53:9c:fb:1f:e5:40:e5:6d:4e:c3:01:f4:93:
8d:00:ce:fd:9a:00:f2:3a:56:b1:bd:e5:42:f0:4b:81:45:6d:
5c:ef:9c:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrQOksUJkNn+xpF4ny4sI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjZhMGY5ODZmMjE5NDVjODBkODMxNTY3YmFmMjk2MjAx
MDdhZGMwHhcNMjMwMTAxMDI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTIzYmJhOWVmYjRlYWFjMGE4OTkxNzk2NGVhM2I0NjlhYzZiMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UMC15l1GhiapEoPYKFYyLA/CnFx
GiSeU5EdleEOk8xZm3xYK8wwFEy9vyLjWgTPlx8q/2F8Y2xkrINAVdYWrRvmvmOv
denv81ik0xmne3jCDDAFCDxJbyFL3CgkHc4p13Ct3Ms/cCb/x6lpR+VIasCh+nGc
hwAXNfGEt9oM5R1LgcbXhno6OCDAjEGLwuqgcWM36PZI7ti/5Q44WsDlu9StCzk1
mk6/jKKlZOOJdAAYKIa+2c7XYtKZoxNlFtRbtfAEa+SDXggPpSmMfFLQ7hy1X87E
QopXYnyJq9J/RwMZFovAiJ4rlsKjRm8jurqa2YdgpqXgmmijoHtqwYhkuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4ju6nvtOqsComReWTqO0aaxrIwMB8GA1UdIwQY
MBaAFPJmoPmG8hlFyA2DFWe68pYgEHrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hZy1ZYnlHVVhJRFlNVlo3cnlsaUFRZXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ODczYzQtYjVlNS00OTdlLTkyNDIt
ZmUwYjIyMjZjZmIzLzEvTGlPN3FlLTA2cXdLaVpGNVpPbzdScHJHc2pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ODczYzQtYjVlNS00OTdlLTkyNDItZmUwYjIyMjZjZmIz
LzEvOG1hZy1ZYnlHVVhJRFlNVlo3cnlsaUFRZXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KKAMA0G
CSqGSIb3DQEBCwUAA4IBAQCrjkNxNJUvjC1JF4Cyk0pKk2WMMWr0TEYuqLdbRpQo
6F4+P1s0sxdkE+fkvH8JRaINvooCb6rGLrlbKGc9G1zuMU+07CdKUNt7y/yz9VXJ
AuqJwEe6RJB/mbbZrjxzP0KjbohJs8x6PBSf8/2VrgYvVBkX4G9JjdSeyhSUFtSx
Rq9SoNeRoDrNBActXf0pU71DF4CRGMbJF95MKzZjklgaDJE/nFxX8HthCxx0/os7
00TYQDjjC6UCHuv9RzObtfp0MMKr+Mub2kouIhAsZoUQiAtZ3HrsJlXguILrbFOc
+x/lQOVtTsMB9JONAM79mgDyOlaxveVC8EuBRW1c75xY
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:49 2024 by rpki-client on console.sobornost.net