Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa
File: qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa (raw, json)
Hash identifier: prDQROXHKO0BidQLyxYNEqKmThp9mdJXyy8yyx2YJwA=
Subject key identifier: A8:EB:07:13:08:70:7B:C6:C8:6F:07:E5:DF:1A:82:A5:75:F7:69:30
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 01856C53D524ED5CE3A6581B06F4A14D1FF3
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d5:24:ed:5c:e3:a6:58:1b:06:f4:a1:4d:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8eb071308707bc6c86f07e5df1a82a575f76930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:e6:1b:ec:d3:7f:af:c0:8a:95:b3:2c:5c:
fe:41:59:63:1a:6d:4b:5b:7d:91:a7:1e:2e:2f:ea:
c6:f0:91:6b:20:63:65:ef:c2:6f:f7:e3:f7:c4:8c:
75:ce:53:06:99:59:d1:89:ea:ce:dd:1b:95:b8:4b:
7b:ff:6d:6e:19:2d:6f:5c:d9:b9:8c:da:67:cf:32:
d0:e3:59:80:d0:b3:28:b9:d5:91:95:df:5f:f1:45:
0a:a0:03:79:3d:bb:de:94:9e:e6:76:4a:5f:12:96:
0e:fa:2b:de:70:f0:dc:2c:1c:e3:00:8f:6f:cb:cd:
ad:c8:d1:94:50:ee:b7:5d:7f:f3:29:f4:c8:90:a1:
1d:fa:fb:d4:59:32:2e:d0:7c:e2:2a:d0:68:77:5d:
05:56:8a:41:c1:f5:17:c3:9f:a5:4a:45:68:0e:45:
33:5b:2e:fe:c4:19:65:fb:a7:8a:29:b8:5a:61:ea:
ff:21:ba:f7:ad:61:16:63:1f:f0:95:aa:1e:c1:19:
5e:35:be:f1:3e:28:bf:ce:1b:b5:f7:a7:8f:33:c8:
6f:a7:9c:04:0b:dd:1a:94:c9:e7:79:cd:77:0d:ee:
a3:ea:6f:3d:29:7b:d8:8c:74:68:60:dd:78:4a:5d:
e4:76:2f:5e:bc:8a:d6:68:56:4e:55:b8:94:33:e1:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:07:13:08:70:7B:C6:C8:6F:07:E5:DF:1A:82:A5:75:F7:69:30
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:76:0f:ea:9b:cc:62:9b:35:63:5b:07:25:3d:12:cd:ca:ff:
0e:e2:8b:51:d2:b9:ec:a6:ff:a5:94:ca:30:7a:84:78:23:a3:
93:b7:bb:71:0b:a3:2d:12:7a:41:55:a8:74:26:2f:40:b0:8e:
76:20:a4:1a:8c:f6:b2:d2:e7:f2:36:82:0c:c2:6e:1d:b1:c3:
1e:d3:50:2c:ad:6c:ef:c5:1c:54:0a:cc:76:4e:e9:1b:45:50:
46:fa:f7:2a:18:7b:03:80:11:f2:ba:71:d5:bf:f3:44:42:48:
48:31:32:fb:9f:c9:da:a4:e0:1f:29:9c:f5:ea:86:86:ba:06:
97:1b:53:84:18:b8:93:28:0d:df:a7:29:2e:83:74:d7:68:4a:
67:0d:b5:c5:fd:d9:4c:39:fa:a8:8f:a8:82:05:17:a8:6d:d8:
0f:71:af:c3:0f:1a:69:85:b5:64:07:e1:c3:ea:6c:b9:e5:3f:
9d:2f:f4:3f:eb:10:a3:87:6f:59:8d:91:5b:9c:1f:95:06:2f:
21:58:30:81:e0:90:04:7b:ab:4b:e2:5f:0a:83:de:e4:6e:62:
fd:69:97:37:9a:b3:56:cc:df:0e:86:66:55:55:57:13:b3:0a:
7c:ef:73:39:0c:4a:aa:f4:15:58:e3:9f:1e:33:d9:0d:2a:3f:
83:6a:62:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9Uk7VzjplgbBvShTR/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOWJmMjllMWFjYTIzYTUxNWUxMWY2Njk2MGI0ZWI5NWM4
MGNmYjkwHhcNMjMwMTAxMDc1NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGViMDcxMzA4NzA3YmM2Yzg2ZjA3ZTVkZjFhODJhNTc1Zjc2OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDvmG+zTf6/AipWzLFz+QVljGm1L
W32Rpx4uL+rG8JFrIGNl78Jv9+P3xIx1zlMGmVnRierO3RuVuEt7/21uGS1vXNm5
jNpnzzLQ41mA0LMoudWRld9f8UUKoAN5PbvelJ7mdkpfEpYO+ivecPDcLBzjAI9v
y82tyNGUUO63XX/zKfTIkKEd+vvUWTIu0HziKtBod10FVopBwfUXw5+lSkVoDkUz
Wy7+xBll+6eKKbhaYer/Ibr3rWEWYx/wlaoewRleNb7xPii/zhu196ePM8hvp5wE
C90alMnnec13De6j6m89KXvYjHRoYN14Sl3kdi9evIrWaFZOVbiUM+Gp/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjrBxMIcHvGyG8H5d8agqV192kwMB8GA1UdIwQY
MBaAFJGb8p4ayiOlFeEfZpYLTrlcgM+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2Mt
MGJiM2FmZmNjMmQzLzEvcU9zSEV3aHdlOGJJYndmbDN4cUNwWFgzYVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2MtMGJiM2FmZmNjMmQz
LzEva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN4MA0G
CSqGSIb3DQEBCwUAA4IBAQCxdg/qm8ximzVjWwclPRLNyv8O4otR0rnspv+llMow
eoR4I6OTt7txC6MtEnpBVah0Ji9AsI52IKQajPay0ufyNoIMwm4dscMe01AsrWzv
xRxUCsx2TukbRVBG+vcqGHsDgBHyunHVv/NEQkhIMTL7n8napOAfKZz16oaGugaX
G1OEGLiTKA3fpykug3TXaEpnDbXF/dlMOfqoj6iCBReobdgPca/DDxpphbVkB+HD
6my55T+dL/Q/6xCjh29ZjZFbnB+VBi8hWDCB4JAEe6tL4l8Kg97kbmL9aZc3mrNW
zN8OhmZVVVcTswp873M5DEqq9BVY458eM9kNKj+DamJ2
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net