Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/f3VrKL1e0miiGlgw_63it4Ne_8Y.roa
File: f3VrKL1e0miiGlgw_63it4Ne_8Y.roa (raw, json)
Hash identifier: FijNfbITeTmiCSadZO/99cUBlumP7UEA5+ecjj7JCa8=
Subject key identifier: 7F:75:6B:28:BD:5E:D2:68:A2:1A:58:30:FF:AD:E2:B7:83:5E:FF:C6
Certificate issuer: /CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Certificate serial: 01856FCB7EEF7F64896B6B719DCCC14B51D7
Authority key identifier: 7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/f3VrKL1e0miiGlgw_63it4Ne_8Y.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50994
IP address blocks: 178.218.224.0/20 maxlen: 20
87.239.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:7e:ef:7f:64:89:6b:6b:71:9d:cc:c1:4b:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f756b28bd5ed268a21a5830ffade2b7835effc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:21:bf:90:60:dc:3f:c9:47:6a:68:21:35:48:
c7:c4:73:3b:cc:70:3e:82:dd:63:6a:97:fc:f2:34:
3d:34:c5:29:7f:62:a2:ec:ec:f6:25:10:69:3d:33:
28:67:86:1f:cb:89:d9:87:88:7c:a9:c2:3e:09:2f:
ef:dc:e0:e3:57:b3:c5:de:c9:82:f4:59:09:ab:7c:
6d:50:da:6c:bf:6a:c8:a5:79:47:3f:a0:bb:cf:9b:
35:9a:b9:d3:c3:e1:71:3d:a3:a8:92:5d:d5:9c:c4:
45:17:5f:1b:2e:c1:8a:83:f4:a9:1e:8c:e3:90:3c:
1f:be:04:de:44:4c:19:8c:3e:fd:11:2e:a7:2a:13:
cb:1b:ad:5e:c4:76:19:26:b0:8f:db:f5:f8:0f:6c:
5b:8e:00:83:ee:ee:d1:e9:9c:81:fe:5e:87:29:e1:
9f:18:f7:b6:6e:42:1b:7d:39:e8:83:15:25:99:1a:
48:ea:54:51:2c:70:bb:e4:01:fd:06:4c:ca:f2:cd:
b3:09:c6:9c:28:2d:7d:5f:00:3a:9e:f5:d9:5a:93:
b9:32:fa:b8:89:f1:10:91:cb:e1:27:cc:6c:0b:b5:
ed:3c:2b:ec:8f:83:5e:b0:1c:18:cf:f7:82:14:4c:
59:cd:d6:44:ca:a7:fe:0b:fc:15:dd:f2:d9:73:d1:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:6B:28:BD:5E:D2:68:A2:1A:58:30:FF:AD:E2:B7:83:5E:FF:C6
X509v3 Authority Key Identifier:
keyid:7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/f3VrKL1e0miiGlgw_63it4Ne_8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.168.0/21
178.218.224.0/20
Signature Algorithm: sha256WithRSAEncryption
83:df:ce:f3:80:e6:ce:d5:08:7d:3b:0c:2d:be:74:c1:b8:92:
72:1e:e9:a6:26:56:15:b9:ac:b3:a0:d7:47:49:45:c1:4f:8d:
47:3b:25:38:40:95:db:bb:77:e6:2d:2f:a9:2b:30:0f:55:6e:
09:42:6f:dd:bf:7f:15:4b:69:4a:83:4c:47:29:4a:3e:c3:60:
4d:f6:c8:f2:28:25:c6:b1:06:f0:81:4f:34:db:cf:05:54:72:
4d:eb:35:5f:46:4e:15:da:83:49:ca:0e:79:e4:55:08:40:a3:
8f:c1:44:3f:ec:7a:52:eb:55:c5:c7:6a:bd:36:68:7e:34:d8:
98:e0:fd:df:94:b9:56:6a:63:6f:7f:95:1a:0f:ce:70:0f:13:
7d:15:42:83:ce:a3:d2:0a:cc:50:80:f9:ae:3f:06:70:13:6c:
ff:66:e7:27:9e:da:ae:e7:85:12:36:7c:ae:4b:d5:e1:d6:25:
74:6f:7a:15:d7:73:4e:65:e1:ab:a7:14:24:7a:d1:ac:d4:4e:
08:8c:81:c7:17:0d:5e:88:3b:42:cd:59:77:a4:86:9f:be:79:
83:f4:63:87:ca:be:64:66:ed:b3:cb:4e:11:21:64:42:c8:35:
d2:9e:2a:d6:e8:6a:03:71:b7:60:ba:dd:44:da:2c:3a:15:58:
c7:3c:46:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvy37vf2SJa2txnczBS1HXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTM4YTVmNjQ2NTM1ZmUwMDVmN2QxM2RlNGEyYTUwZjRl
NmU0ODIwHhcNMjMwMTAyMDAwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Zjc1NmIyOGJkNWVkMjY4YTIxYTU4MzBmZmFkZTJiNzgzNWVmZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCG/kGDcP8lHamghNUjHxHM7zHA+
gt1japf88jQ9NMUpf2Ki7Oz2JRBpPTMoZ4Yfy4nZh4h8qcI+CS/v3ODjV7PF3smC
9FkJq3xtUNpsv2rIpXlHP6C7z5s1mrnTw+FxPaOokl3VnMRFF18bLsGKg/SpHozj
kDwfvgTeREwZjD79ES6nKhPLG61exHYZJrCP2/X4D2xbjgCD7u7R6ZyB/l6HKeGf
GPe2bkIbfTnogxUlmRpI6lRRLHC75AH9BkzK8s2zCcacKC19XwA6nvXZWpO5Mvq4
ifEQkcvhJ8xsC7XtPCvsj4NesBwYz/eCFExZzdZEyqf+C/wV3fLZc9ER8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH91ayi9XtJoohpYMP+t4reDXv/GMB8GA1UdIwQY
MBaAFHyjil9kZTX+AF99E95KKlD05uSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktPS1gyUmxOZjRBWDMwVDNrb3FVUFRtNUlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lZGE4MTQtM2U0Yi00MDVhLThhNWQt
YzM4ODkyMjcxZThiLzEvZjNWcktMMWUwbWlpR2xnd182M2l0NE5lXzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lZGE4MTQtM2U0Yi00MDVhLThhNWQtYzM4ODkyMjcxZThi
LzEvZktPS1gyUmxOZjRBWDMwVDNrb3FVUFRtNUlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV++oAwQE
strgMA0GCSqGSIb3DQEBCwUAA4IBAQCD387zgObO1Qh9OwwtvnTBuJJyHummJlYV
uayzoNdHSUXBT41HOyU4QJXbu3fmLS+pKzAPVW4JQm/dv38VS2lKg0xHKUo+w2BN
9sjyKCXGsQbwgU80288FVHJN6zVfRk4V2oNJyg555FUIQKOPwUQ/7HpS61XFx2q9
Nmh+NNiY4P3flLlWamNvf5UaD85wDxN9FUKDzqPSCsxQgPmuPwZwE2z/Zucnntqu
54USNnyuS9Xh1iV0b3oV13NOZeGrpxQketGs1E4IjIHHFw1eiDtCzVl3pIafvnmD
9GOHyr5kZu2zy04RIWRCyDXSnirW6GoDcbdgut1E2iw6FVjHPEbz
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net