Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/4OrKGvhVHwJbFuhi-TjvPu-5n6I.roa
File: 4OrKGvhVHwJbFuhi-TjvPu-5n6I.roa (raw, json)
Hash identifier: Kje+yEggi3NCNtn/6ICRUJ80GMKaMb/fEXfnMcihL8w=
Subject key identifier: E0:EA:CA:1A:F8:55:1F:02:5B:16:E8:62:F9:38:EF:3E:EF:B9:9F:A2
Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial: 018D308F7ABC7FEE48ECAC9C2C3AA1F6CCF1
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/4OrKGvhVHwJbFuhi-TjvPu-5n6I.roa
Signing time: Mon 22 Jan 2024 09:45:25 +0000
ROA not before: Mon 22 Jan 2024 09:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 95.128.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 16:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:8f:7a:bc:7f:ee:48:ec:ac:9c:2c:3a:a1:f6:cc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Validity
Not Before: Jan 22 09:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0eaca1af8551f025b16e862f938ef3eefb99fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:3c:86:c8:1a:34:90:2b:b7:c0:48:f9:a7:
eb:27:cb:a8:2f:cb:4d:b2:eb:76:5d:c4:67:3c:e8:
2c:03:3f:40:b6:89:03:55:a3:11:01:77:5c:f3:62:
f4:7e:4d:9b:d5:fb:20:3f:3e:19:ff:10:a2:b0:e6:
dd:0a:9b:ee:6b:12:b2:88:72:de:b0:9d:58:91:c1:
7a:e1:54:b7:22:75:b2:10:dc:b6:33:78:18:a0:9f:
5b:66:72:e8:9c:2b:36:02:62:df:f0:34:8c:88:19:
0e:47:d5:95:80:28:53:4c:56:a2:ef:17:43:63:96:
8a:1c:9c:ff:56:c0:19:f0:29:5d:51:43:c8:58:b5:
fb:32:68:c8:06:f3:84:2b:2a:8e:ad:ec:a9:18:37:
10:b0:c0:fa:9c:72:ac:98:f8:89:45:4c:7d:4e:87:
b9:90:57:09:44:52:01:1b:0b:f2:c6:3e:5e:40:95:
86:da:cb:dd:79:e6:67:ec:58:c8:88:5d:a8:f9:95:
d3:51:e5:ac:1b:ab:10:0a:61:d4:2f:9c:d7:27:9f:
04:b0:14:c5:8a:28:b6:8c:5c:f3:51:bf:dd:58:e0:
05:19:ca:dd:a6:dc:99:16:c5:51:28:6e:a4:ab:31:
47:df:95:39:92:19:c9:e5:6f:a9:fa:aa:0f:bc:ec:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:CA:1A:F8:55:1F:02:5B:16:E8:62:F9:38:EF:3E:EF:B9:9F:A2
X509v3 Authority Key Identifier:
keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/4OrKGvhVHwJbFuhi-TjvPu-5n6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.196.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6d:4a:85:92:8e:c0:c5:75:06:54:45:c4:d4:96:50:87:bf:
6b:a8:d5:f3:1e:f4:06:c9:10:34:b3:e3:47:53:9f:61:d2:12:
cb:31:92:62:f6:a1:30:9d:c3:97:15:15:d8:b3:40:2e:5d:33:
41:53:04:a5:c9:72:a2:a8:01:39:5e:14:44:23:66:da:9e:d4:
bc:1f:4b:2b:73:c8:b4:9b:5a:4e:68:40:cb:e2:bc:d9:66:9b:
45:9c:37:c9:99:b0:bb:92:65:0b:0e:6d:9f:f8:1e:af:0d:1d:
16:ad:12:31:36:48:2b:40:63:a0:4c:1b:08:a2:48:0e:d6:9b:
9b:5f:77:ec:ab:44:d0:da:63:ed:35:7f:b2:56:cf:2d:41:58:
75:49:4e:a4:4b:3d:6c:73:9e:1a:95:a2:3c:e1:79:ff:37:c5:
87:07:c5:45:f8:3a:38:30:f3:71:4a:fa:67:8d:43:57:93:22:
07:06:ef:6a:2e:c2:ea:d6:48:c6:12:d6:f1:0a:86:30:e2:d5:
68:74:75:5b:0a:6d:84:1f:5d:6d:84:0e:f9:03:69:e2:80:c2:
7f:1c:65:65:7e:e8:23:63:36:aa:4a:eb:f1:f6:b1:15:b3:b2:
53:72:13:d2:e3:5b:d8:70:d1:ca:3a:61:52:1f:4c:b4:c5:63:
41:ec:48:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0wj3q8f+5I7KycLDqh9szxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTFhN2I4ZWU4NDQwNTIyYjBiNTUzMGM4NWRjZTFkNzNm
OTY3YjcwHhcNMjQwMTIyMDk0NTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGVhY2ExYWY4NTUxZjAyNWIxNmU4NjJmOTM4ZWYzZWVmYjk5ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNI8hsgaNJArt8BI+afrJ8uoL8tN
sut2XcRnPOgsAz9AtokDVaMRAXdc82L0fk2b1fsgPz4Z/xCisObdCpvuaxKyiHLe
sJ1YkcF64VS3InWyENy2M3gYoJ9bZnLonCs2AmLf8DSMiBkOR9WVgChTTFai7xdD
Y5aKHJz/VsAZ8CldUUPIWLX7MmjIBvOEKyqOreypGDcQsMD6nHKsmPiJRUx9Toe5
kFcJRFIBGwvyxj5eQJWG2svdeeZn7FjIiF2o+ZXTUeWsG6sQCmHUL5zXJ58EsBTF
iii2jFzzUb/dWOAFGcrdptyZFsVRKG6kqzFH35U5khnJ5W+p+qoPvOx/KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODqyhr4VR8CWxboYvk47z7vuZ+iMB8GA1UdIwQY
MBaAFCeRp7juhEBSKwtVMMhdzh1z+We3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUt
OWVjZDhjYzUwYTg4LzEvNE9yS0d2aFZId0piRnVoaS1UanZQdS01bjZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUtOWVjZDhjYzUwYTg4
LzEvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DEMA0G
CSqGSIb3DQEBCwUAA4IBAQBybUqFko7AxXUGVEXE1JZQh79rqNXzHvQGyRA0s+NH
U59h0hLLMZJi9qEwncOXFRXYs0AuXTNBUwSlyXKiqAE5XhREI2bantS8H0src8i0
m1pOaEDL4rzZZptFnDfJmbC7kmULDm2f+B6vDR0WrRIxNkgrQGOgTBsIokgO1pub
X3fsq0TQ2mPtNX+yVs8tQVh1SU6kSz1sc54alaI84Xn/N8WHB8VF+Do4MPNxSvpn
jUNXkyIHBu9qLsLq1kjGEtbxCoYw4tVodHVbCm2EH11thA75A2nigMJ/HGVlfugj
YzaqSuvx9rEVs7JTchPS41vYcNHKOmFSH0y0xWNB7EiM
-----END CERTIFICATE-----
Generated at Mon Apr 8 20:06:39 2024 by rpki-client on console.sobornost.net