Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sY9L6Kqtr4O4mFhmJ9P5aF7lsCQ.roa
File: sY9L6Kqtr4O4mFhmJ9P5aF7lsCQ.roa (raw, json)
Hash identifier: 1G9k9XPLu2zhq6GyepnfhhnGjC3GjGCBYDzIy74YgfY=
Subject key identifier: B1:8F:4B:E8:AA:AD:AF:83:B8:98:58:66:27:D3:F9:68:5E:E5:B0:24
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0185720347A253CA2F5F3643E3879F883F4A
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sY9L6Kqtr4O4mFhmJ9P5aF7lsCQ.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207185
IP address blocks: 213.162.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:47:a2:53:ca:2f:5f:36:43:e3:87:9f:88:3f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b18f4be8aaadaf83b898586627d3f9685ee5b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:5d:e4:14:9d:9a:d5:0d:6a:64:ab:c9:79:
fe:a0:a7:16:e6:21:7f:3d:74:59:d0:8e:c1:12:1e:
3a:2d:01:fa:f8:11:3a:59:36:8f:42:de:f6:d4:24:
c1:02:c2:46:bd:17:dd:cc:c8:e4:3d:36:9e:2a:35:
1d:ec:b5:65:18:0e:bf:ba:7d:51:7b:d5:0a:b7:12:
6d:36:3d:1b:17:13:8b:b2:d2:d7:d7:f3:56:ae:dd:
75:d7:16:a4:d9:c9:27:11:78:d5:10:1e:c5:d9:ee:
1e:2f:5c:73:9b:cf:b1:d2:b9:bc:57:50:5e:7d:ff:
fc:34:6b:a6:6c:5e:00:7a:7f:07:d5:a5:8d:1f:92:
9f:66:d3:0f:fe:6c:fc:ac:10:98:83:88:3b:54:22:
08:2a:77:d4:f3:ae:6b:be:5f:67:aa:6f:b9:f3:69:
47:3a:38:cd:2e:ae:32:c9:27:18:61:26:9f:ff:79:
3b:65:20:bd:f8:37:e6:e1:6a:d3:dc:07:99:40:c9:
fd:c5:04:a7:7c:61:59:4a:46:48:e3:a7:7e:40:5b:
47:9d:1c:f7:9e:41:51:57:d0:d0:08:17:f8:d3:7d:
7b:01:72:5c:9b:9e:c9:c2:ca:1e:99:b7:65:95:d8:
a3:bc:e1:a3:6a:46:a1:3e:8d:ed:57:17:53:31:13:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:4B:E8:AA:AD:AF:83:B8:98:58:66:27:D3:F9:68:5E:E5:B0:24
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sY9L6Kqtr4O4mFhmJ9P5aF7lsCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:16:44:16:03:45:71:3d:d2:f2:49:ef:7b:43:0c:4e:ed:4e:
7d:26:b1:3c:8b:67:fa:67:41:0b:85:50:a3:5d:13:c0:31:03:
37:c0:8f:9b:7c:6a:8b:be:64:51:4d:94:37:24:0d:f1:e4:10:
5b:f3:f4:4c:f3:8d:f6:e2:fc:45:c3:d9:2e:2b:10:87:7d:80:
41:3d:f3:f1:59:06:cd:98:5e:9c:41:55:61:31:05:ae:d1:17:
7f:50:cf:df:29:e0:b1:40:1c:11:5c:f5:c5:0a:c3:90:f2:e7:
db:b1:7e:22:ee:f8:aa:7d:07:e8:4b:48:b4:50:bb:39:25:15:
ee:5c:3d:49:02:84:de:4a:87:ce:7d:09:79:20:68:28:37:db:
bc:da:af:c3:b3:29:8a:cb:90:aa:9a:ac:75:3c:d0:d5:36:64:
19:2e:7b:20:9c:f7:5c:c1:a7:7a:7e:70:72:44:fa:19:de:1c:
45:d3:b8:31:6d:b2:6f:f6:ae:54:60:dd:67:2f:37:56:58:ba:
ed:ee:7d:0f:11:63:de:f3:d7:09:1c:a3:a2:17:3e:77:db:20:
2f:49:e1:c2:d4:f2:f9:52:06:5d:23:5b:77:9c:be:0f:87:54:
56:05:d9:0f:05:e6:57:f9:18:f0:37:a6:af:e9:a4:0c:68:c7:
98:81:8e:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyA0eiU8ovXzZD44efiD9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjMwMTAyMTAyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThmNGJlOGFhYWRhZjgzYjg5ODU4NjYyN2QzZjk2ODVlZTViMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohpd5BSdmtUNamSryXn+oKcW5iF/
PXRZ0I7BEh46LQH6+BE6WTaPQt721CTBAsJGvRfdzMjkPTaeKjUd7LVlGA6/un1R
e9UKtxJtNj0bFxOLstLX1/NWrt111xak2cknEXjVEB7F2e4eL1xzm8+x0rm8V1Be
ff/8NGumbF4Aen8H1aWNH5KfZtMP/mz8rBCYg4g7VCIIKnfU865rvl9nqm+582lH
OjjNLq4yyScYYSaf/3k7ZSC9+Dfm4WrT3AeZQMn9xQSnfGFZSkZI46d+QFtHnRz3
nkFRV9DQCBf40317AXJcm57JwsoembdlldijvOGjakahPo3tVxdTMRMiXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGPS+iqra+DuJhYZifT+Whe5bAkMB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvc1k5TDZLcXRyNE80bUZobUo5UDVhRjdsc0NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aLVMA0G
CSqGSIb3DQEBCwUAA4IBAQB9FkQWA0VxPdLySe97QwxO7U59JrE8i2f6Z0ELhVCj
XRPAMQM3wI+bfGqLvmRRTZQ3JA3x5BBb8/RM84324vxFw9kuKxCHfYBBPfPxWQbN
mF6cQVVhMQWu0Rd/UM/fKeCxQBwRXPXFCsOQ8ufbsX4i7viqfQfoS0i0ULs5JRXu
XD1JAoTeSofOfQl5IGgoN9u82q/DsymKy5Cqmqx1PNDVNmQZLnsgnPdcwad6fnBy
RPoZ3hxF07gxbbJv9q5UYN1nLzdWWLrt7n0PEWPe89cJHKOiFz532yAvSeHC1PL5
UgZdI1t3nL4Ph1RWBdkPBeZX+RjwN6av6aQMaMeYgY7O
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:00 2024 by rpki-client on console.sobornost.net