Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/e6LcdDmyPMwThDpBnj6vvXCL29A.roa
File: e6LcdDmyPMwThDpBnj6vvXCL29A.roa (raw, json)
Hash identifier: sgB55H3XxOHW+EJxbY4wCq3/gl3Ug6L7Y0gMG7+eEqM=
Subject key identifier: 7B:A2:DC:74:39:B2:3C:CC:13:84:3A:41:9E:3E:AF:BD:70:8B:DB:D0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 018573B18C9F7465415C93974D3FC195C131
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/e6LcdDmyPMwThDpBnj6vvXCL29A.roa
Signing time: Mon 02 Jan 2023 18:14:53 +0000
ROA not before: Mon 02 Jan 2023 18:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59521
IP address blocks: 185.171.128.0/22 maxlen: 24
45.80.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:8c:9f:74:65:41:5c:93:97:4d:3f:c1:95:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jan 2 18:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba2dc7439b23ccc13843a419e3eafbd708bdbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:45:f0:44:a4:d1:bc:24:04:c5:8d:42:39:
25:6b:4b:bf:21:cf:70:d9:1d:db:01:7e:2a:07:16:
3d:f8:b6:b5:80:5f:08:38:fb:e3:7c:0c:0e:6d:97:
c4:60:22:87:51:43:20:27:ef:1c:e6:96:3c:d6:af:
a7:fb:e8:3b:b7:c2:79:d8:92:08:d6:36:08:33:3f:
81:05:2a:04:44:21:da:49:10:d5:03:e4:34:4b:00:
9f:97:6e:5b:f7:6f:4b:b6:fb:8e:d1:53:90:e5:02:
ae:8e:7a:a3:64:71:1e:ab:9a:59:fe:fd:eb:4d:74:
58:54:17:67:12:c8:86:1f:f5:11:25:50:8d:31:2a:
b0:9f:d6:8d:a3:3b:85:a0:88:3c:75:15:99:35:7a:
35:d3:bf:68:df:01:5d:dc:27:7b:ec:c6:5c:e0:52:
9e:b7:50:d0:28:b8:e4:53:63:7d:3b:77:e5:35:83:
b4:98:ae:0d:5f:50:ac:c7:da:5e:f1:e8:13:5a:e0:
c8:45:7f:e2:5c:1a:06:ba:da:03:04:98:40:3b:f6:
b6:73:10:a1:3a:00:1d:17:46:48:e3:4b:4f:d2:ce:
e3:89:b1:c5:19:9c:87:ab:ef:49:68:68:f0:6b:98:
b9:0b:b4:91:3e:2f:01:8a:db:e3:24:06:ad:88:17:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:DC:74:39:B2:3C:CC:13:84:3A:41:9E:3E:AF:BD:70:8B:DB:D0
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/e6LcdDmyPMwThDpBnj6vvXCL29A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.38.0/23
185.171.128.0/22
Signature Algorithm: sha256WithRSAEncryption
12:03:84:70:cc:9d:fd:d0:e6:70:15:08:5d:ac:f7:b3:72:3d:
da:41:9d:31:ad:ca:aa:10:dd:a2:c0:49:be:fb:f8:c5:65:24:
ae:df:0e:34:96:52:bf:41:ff:4e:d5:01:9e:a0:4f:bc:e3:f3:
47:d1:55:9f:d8:94:fc:8a:6a:59:74:c8:97:5a:6b:02:df:25:
f9:56:bf:4c:24:80:3c:4f:d0:3d:4e:43:0f:a8:e5:ae:a8:a3:
73:ee:53:22:38:b9:20:c7:0c:ed:f3:48:10:57:e9:79:01:a2:
c1:db:cc:a1:93:b6:7c:a7:ad:21:0b:2d:11:8f:21:a3:bf:60:
a3:68:d2:5e:18:36:71:82:a1:fa:04:01:6c:36:ae:11:29:94:
fe:20:6c:35:b8:ec:9a:d8:01:27:36:d6:03:d7:fd:19:c0:b4:
92:c5:9e:4b:8d:ca:61:fe:06:08:99:90:c6:1d:e4:3a:33:bf:
8c:ba:23:31:b2:27:93:f3:e7:12:ab:a8:d1:28:6f:25:d5:d1:
7d:c3:53:65:a4:f4:c6:81:2a:12:d7:37:c9:7e:a8:dd:9b:2c:
be:65:43:95:c8:15:9e:47:3e:6c:88:ed:6f:61:92:a4:65:30:
9f:4a:2d:4a:e2:e8:91:e3:77:a2:ad:23:1b:15:e8:5c:90:e5:
44:82:d4:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzsYyfdGVBXJOXTT/BlcExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0
ZGE4ZjAwHhcNMjMwMTAyMTgxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmEyZGM3NDM5YjIzY2NjMTM4NDNhNDE5ZTNlYWZiZDcwOGJkYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbRF8ESk0bwkBMWNQjkla0u/Ic9w
2R3bAX4qBxY9+La1gF8IOPvjfAwObZfEYCKHUUMgJ+8c5pY81q+n++g7t8J52JII
1jYIMz+BBSoERCHaSRDVA+Q0SwCfl25b929LtvuO0VOQ5QKujnqjZHEeq5pZ/v3r
TXRYVBdnEsiGH/URJVCNMSqwn9aNozuFoIg8dRWZNXo1079o3wFd3Cd77MZc4FKe
t1DQKLjkU2N9O3flNYO0mK4NX1Csx9pe8egTWuDIRX/iXBoGutoDBJhAO/a2cxCh
OgAdF0ZI40tP0s7jibHFGZyHq+9JaGjwa5i5C7SRPi8BitvjJAatiBfKSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHui3HQ5sjzME4Q6QZ4+r71wi9vQMB8GA1UdIwQY
MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt
ZTI4MGI2NTAxNzA0LzEvZTZMY2REbXlQTXdUaERwQm5qNnZ2WENMMjlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0
LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVAmAwQC
uauAMA0GCSqGSIb3DQEBCwUAA4IBAQASA4RwzJ390OZwFQhdrPezcj3aQZ0xrcqq
EN2iwEm++/jFZSSu3w40llK/Qf9O1QGeoE+84/NH0VWf2JT8impZdMiXWmsC3yX5
Vr9MJIA8T9A9TkMPqOWuqKNz7lMiOLkgxwzt80gQV+l5AaLB28yhk7Z8p60hCy0R
jyGjv2CjaNJeGDZxgqH6BAFsNq4RKZT+IGw1uOya2AEnNtYD1/0ZwLSSxZ5Ljcph
/gYImZDGHeQ6M7+MuiMxsieT8+cSq6jRKG8l1dF9w1NlpPTGgSoS1zfJfqjdmyy+
ZUOVyBWeRz5siO1vYZKkZTCfSi1K4uiR43eirSMbFehckOVEgtRk
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net