Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/giqIH3rPS9tO6ZOtOYsbcfZSRPo.roa
File: giqIH3rPS9tO6ZOtOYsbcfZSRPo.roa (raw, json)
Hash identifier: +o17OJr/pl6O1I+kk5ZdoC2Lo6+Nf1ED/J7RxPPnxFY=
Subject key identifier: 82:2A:88:1F:7A:CF:4B:DB:4E:E9:93:AD:39:8B:1B:71:F6:52:44:FA
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 018C353E2749685D97365A80391656E9E5F7
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/giqIH3rPS9tO6ZOtOYsbcfZSRPo.roa
Signing time: Mon 04 Dec 2023 14:31:54 +0000
ROA not before: Mon 04 Dec 2023 14:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209273
IP address blocks: 217.145.228.0/24 maxlen: 24
217.145.228.0/23 maxlen: 23
217.145.229.0/24 maxlen: 24
212.15.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:3e:27:49:68:5d:97:36:5a:80:39:16:56:e9:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Dec 4 14:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=822a881f7acf4bdb4ee993ad398b1b71f65244fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:57:4b:82:39:cd:3e:a5:71:5d:a2:4e:63:
4e:3e:2a:33:22:2a:00:00:9d:08:f1:1a:ac:76:76:
57:82:a5:ce:96:ab:c7:cd:e1:c5:7f:f0:87:3b:65:
62:b4:58:03:76:a7:30:c9:26:8d:c7:f2:19:ee:18:
69:f6:69:31:55:d9:f2:fe:bd:64:83:3a:ae:d1:92:
13:d1:d7:e5:53:da:55:3a:c4:49:15:4a:ee:1b:c9:
10:46:fc:14:3a:a0:66:f6:4f:5a:0d:12:e9:11:72:
a0:9e:6d:ae:eb:28:41:03:43:d3:80:d5:aa:49:95:
c2:58:ec:47:88:e6:27:b6:dc:f2:4f:5e:41:91:56:
c9:09:e3:51:2f:b1:ac:31:3d:4e:55:7d:8d:7b:c4:
ae:b2:fb:6f:98:37:b9:15:bc:1d:0f:c4:fd:64:61:
34:4d:c3:5d:ac:e2:50:a4:95:01:20:4c:69:8b:7a:
5a:98:18:d5:43:5e:44:f4:1e:2a:ea:f0:96:4f:cd:
36:d2:86:8c:6f:3f:70:39:94:0e:6d:59:02:d5:92:
77:01:34:a6:e3:63:ab:31:9c:06:60:ea:bb:ad:15:
97:9b:f4:ef:da:7a:b5:b0:80:87:3c:ed:3d:9e:29:
b3:27:1f:7a:8d:cc:2a:c2:e3:63:c1:e6:7d:3b:be:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:88:1F:7A:CF:4B:DB:4E:E9:93:AD:39:8B:1B:71:F6:52:44:FA
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/giqIH3rPS9tO6ZOtOYsbcfZSRPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.80.0/24
217.145.228.0/23
Signature Algorithm: sha256WithRSAEncryption
46:7b:6c:a3:4f:e6:ea:bf:f0:14:9c:39:98:ec:95:f7:74:1b:
54:3e:94:aa:d3:76:8c:bf:f8:18:5e:a6:69:c5:16:82:92:1c:
b8:88:05:f3:6c:2d:90:12:8b:50:0a:0e:d5:82:d6:d4:8d:45:
05:17:06:b3:37:42:b3:a5:05:90:6a:a8:a4:ce:bd:18:88:e6:
7d:c1:a7:33:a6:6a:64:23:43:e2:bd:78:b7:6d:a2:83:92:68:
8b:7a:dd:32:d6:90:b2:8a:7e:ef:3a:11:50:94:eb:9e:e8:dc:
a9:44:3b:e8:7f:87:84:04:9c:60:b5:f6:ce:64:10:1d:17:15:
54:4b:35:35:d8:04:31:b2:d3:ca:c5:d9:87:9c:68:1e:e5:bd:
1c:52:aa:fe:4c:75:53:ce:04:82:e2:46:fb:8c:ce:2f:53:1a:
c2:61:64:83:ef:ae:0d:83:a0:72:ef:ae:a3:39:b7:af:7f:1a:
f8:18:0a:52:47:fe:15:bc:64:ab:f8:43:62:49:ce:1f:5d:3e:
08:49:73:ea:25:62:06:f1:09:7b:08:78:03:9f:32:b5:42:d5:
8d:01:8f:12:46:ef:08:69:ab:1e:80:6c:a8:24:0b:7e:d9:8f:
dc:18:bf:6b:cc:15:d9:fc:89:18:e6:c1:9e:90:8c:63:cc:8d:
5f:ce:7f:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYw1PidJaF2XNlqAORZW6eX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5
OTM0ZjgwHhcNMjMxMjA0MTQzMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjJhODgxZjdhY2Y0YmRiNGVlOTkzYWQzOThiMWI3MWY2NTI0NGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmdXS4I5zT6lcV2iTmNOPiozIioA
AJ0I8RqsdnZXgqXOlqvHzeHFf/CHO2VitFgDdqcwySaNx/IZ7hhp9mkxVdny/r1k
gzqu0ZIT0dflU9pVOsRJFUruG8kQRvwUOqBm9k9aDRLpEXKgnm2u6yhBA0PTgNWq
SZXCWOxHiOYnttzyT15BkVbJCeNRL7GsMT1OVX2Ne8SusvtvmDe5FbwdD8T9ZGE0
TcNdrOJQpJUBIExpi3pamBjVQ15E9B4q6vCWT8020oaMbz9wOZQObVkC1ZJ3ATSm
42OrMZwGYOq7rRWXm/Tv2nq1sICHPO09nimzJx96jcwqwuNjweZ9O762lwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIIqiB96z0vbTumTrTmLG3H2UkT6MB8GA1UdIwQY
MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt
M2FkNTJlOGI5NjI4LzEvZ2lxSUgzclBTOXRPNlpPdE9Zc2JjZlpTUlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4
LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1A9QAwQB
2ZHkMA0GCSqGSIb3DQEBCwUAA4IBAQBGe2yjT+bqv/AUnDmY7JX3dBtUPpSq03aM
v/gYXqZpxRaCkhy4iAXzbC2QEotQCg7VgtbUjUUFFwazN0KzpQWQaqikzr0YiOZ9
waczpmpkI0PivXi3baKDkmiLet0y1pCyin7vOhFQlOue6NypRDvof4eEBJxgtfbO
ZBAdFxVUSzU12AQxstPKxdmHnGge5b0cUqr+THVTzgSC4kb7jM4vUxrCYWSD764N
g6By766jObevfxr4GApSR/4VvGSr+ENiSc4fXT4ISXPqJWIG8Ql7CHgDnzK1QtWN
AY8SRu8IaasegGyoJAt+2Y/cGL9rzBXZ/IkY5sGekIxjzI1fzn9h
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net