Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/FkmXBBwRCredbtKsjUzLCEwiyMc.roa
File: FkmXBBwRCredbtKsjUzLCEwiyMc.roa (raw, json)
Hash identifier: wx5i0sPHWv8nOgBQuxwIJttLPb6jM2YYGcXeNMTINO4=
Subject key identifier: 16:49:97:04:1C:11:0A:B7:9D:6E:D2:AC:8D:4C:CB:08:4C:22:C8:C7
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018CAA0B54256EA00D8D4BF2813974CC0621
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/FkmXBBwRCredbtKsjUzLCEwiyMc.roa
Signing time: Wed 27 Dec 2023 06:51:58 +0000
ROA not before: Wed 27 Dec 2023 06:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
94.142.164.0/22 maxlen: 22
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
45.86.192.0/22 maxlen: 22
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
195.244.14.0/23 maxlen: 23
91.239.24.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
91.238.217.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:0b:54:25:6e:a0:0d:8d:4b:f2:81:39:74:cc:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Dec 27 06:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164997041c110ab79d6ed2ac8d4ccb084c22c8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:b7:74:ca:97:cb:19:f5:61:dc:7e:4a:ce:
b3:cc:ab:58:18:a0:e0:72:b6:58:6d:a9:f7:02:fb:
d1:9e:4d:c6:79:b9:35:07:0b:41:d2:75:9b:8f:35:
ee:f5:4d:57:a2:10:d1:61:9f:a7:31:58:75:3e:86:
64:c5:8a:cc:a1:d6:37:ec:cb:18:c1:da:09:91:62:
36:33:3e:17:af:d7:2c:d4:91:fe:b9:48:83:4a:24:
96:50:3b:51:6c:fc:44:58:b5:89:95:1c:a8:bd:96:
8a:02:2b:66:b6:03:b1:91:52:83:cf:3e:c6:f0:56:
85:b0:37:fb:1e:2c:47:86:ef:70:b2:55:4b:ee:92:
1b:9a:66:a4:06:d3:d6:0d:80:94:19:51:43:d8:02:
ec:a9:04:48:5a:90:da:e4:95:4d:8d:87:3d:56:ad:
33:a1:3e:ae:63:c0:11:34:0c:e8:f0:d2:eb:60:99:
43:54:a3:78:ce:b5:ec:91:05:4c:84:a7:60:15:d2:
72:49:39:92:6a:c3:1b:46:7c:ed:43:45:b0:7e:a4:
72:ec:77:59:19:5f:cf:b3:3c:cb:b0:00:e9:7e:16:
ef:3c:64:7e:8c:c6:cc:d8:26:db:57:93:fa:fa:ad:
67:ad:2e:85:b1:a3:6c:83:87:c8:f5:98:4c:ee:fd:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:97:04:1C:11:0A:B7:9D:6E:D2:AC:8D:4C:CB:08:4C:22:C8:C7
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/FkmXBBwRCredbtKsjUzLCEwiyMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.151.204.0/22
91.227.240.0/23
91.238.217.0/24
91.239.24.0/24
94.142.164.0/22
185.57.176.0/22
195.244.14.0/23
Signature Algorithm: sha256WithRSAEncryption
21:bb:8d:54:e5:cc:82:7c:d0:4f:5c:f1:20:47:bd:3a:a0:0f:
19:f7:38:9c:ce:bc:21:6a:a6:fa:30:13:ef:c2:27:c4:c2:1c:
56:ce:22:b1:9e:72:eb:6c:bc:d5:ea:9e:8a:34:66:27:19:99:
06:dc:b7:1b:ea:66:e4:30:86:ba:f5:c8:b4:a2:b9:31:f0:ea:
c7:b6:35:41:05:39:9b:e2:49:67:68:a7:d3:e4:11:5d:c8:5a:
e7:39:e3:c3:ae:56:56:c4:09:1c:88:26:58:bd:bd:48:7d:df:
13:b7:ef:2c:38:42:34:d5:98:71:3c:0e:a8:cc:9c:dd:2e:78:
75:00:dd:9f:2f:46:e8:da:d7:16:95:8b:5d:43:eb:cd:de:e3:
2a:4b:13:b7:84:2d:a0:38:e3:28:e9:41:93:4c:ae:26:e4:5b:
07:55:da:03:bb:23:bf:da:5c:34:35:55:b9:a1:f8:db:7d:91:
ba:f4:ad:f5:4a:a8:b9:bd:27:93:c0:22:0b:f5:b3:4d:3a:3a:
fe:9c:c7:21:f9:27:96:6b:6f:d9:5a:dc:d6:cb:66:c9:d5:f4:
34:dc:f6:37:b4:a2:e0:68:7f:5d:c9:42:76:de:79:44:4c:8d:
ca:f6:a1:96:d4:d9:93:ec:b9:d2:89:d6:d3:13:1e:e3:81:80:
6a:92:b2:34
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYyqC1QlbqANjUvygTl0zAYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjMxMjI3MDY1MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQ5OTcwNDFjMTEwYWI3OWQ2ZWQyYWM4ZDRjY2IwODRjMjJjOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH63dMqXyxn1Ydx+Ss6zzKtYGKDg
crZYban3AvvRnk3Gebk1BwtB0nWbjzXu9U1XohDRYZ+nMVh1PoZkxYrModY37MsY
wdoJkWI2Mz4Xr9cs1JH+uUiDSiSWUDtRbPxEWLWJlRyovZaKAitmtgOxkVKDzz7G
8FaFsDf7HixHhu9wslVL7pIbmmakBtPWDYCUGVFD2ALsqQRIWpDa5JVNjYc9Vq0z
oT6uY8ARNAzo8NLrYJlDVKN4zrXskQVMhKdgFdJySTmSasMbRnztQ0WwfqRy7HdZ
GV/PszzLsADpfhbvPGR+jMbM2CbbV5P6+q1nrS6FsaNsg4fI9ZhM7v2zAwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBZJlwQcEQq3nW7SrI1MywhMIsjHMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvRmttWEJCd1JDcmVkYnRLc2pVekxDRXdpeU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCAjm0AwQA
Ajt0AwQCLQwsAwQCLQ80AwQCLUMsAwQCLVbAAwQCLV+MAwQCLZfMAwQBW+PwAwQA
W+7ZAwQAW+8YAwQCXo6kAwQCuTmwAwQBw/QOMA0GCSqGSIb3DQEBCwUAA4IBAQAh
u41U5cyCfNBPXPEgR706oA8Z9ziczrwhaqb6MBPvwifEwhxWziKxnnLrbLzV6p6K
NGYnGZkG3Lcb6mbkMIa69ci0orkx8OrHtjVBBTmb4klnaKfT5BFdyFrnOePDrlZW
xAkciCZYvb1Ifd8Tt+8sOEI01ZhxPA6ozJzdLnh1AN2fL0bo2tcWlYtdQ+vN3uMq
SxO3hC2gOOMo6UGTTK4m5FsHVdoDuyO/2lw0NVW5ofjbfZG69K31Sqi5vSeTwCIL
9bNNOjr+nMch+SeWa2/ZWtzWy2bJ1fQ03PY3tKLgaH9dyUJ23nlETI3K9qGW1NmT
7LnSidbTEx7jgYBqkrI0
Generated at Wed Dec 27 07:52:07 2023 by rpki-client on console.sobornost.net