Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/b4L5vXTtBkm6trZSK-VNGYiZ9Yo.roa
File: b4L5vXTtBkm6trZSK-VNGYiZ9Yo.roa (raw, json)
Hash identifier: PFVEIQ4dkb4glRVvMK5+n9dJO+0xZ36Gb1UifOu/w9I=
Subject key identifier: 6F:82:F9:BD:74:ED:06:49:BA:B6:B6:52:2B:E5:4D:19:88:99:F5:8A
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 01856C011AA9608F62B9CE90E134EFC8B239
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/b4L5vXTtBkm6trZSK-VNGYiZ9Yo.roa
Signing time: Sun 01 Jan 2023 06:24:49 +0000
ROA not before: Sun 01 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41150
IP address blocks: 195.64.191.0/24 maxlen: 24
195.64.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1a:a9:60:8f:62:b9:ce:90:e1:34:ef:c8:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Jan 1 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f82f9bd74ed0649bab6b6522be54d198899f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:82:03:30:bc:25:e6:60:fd:39:0c:f7:5c:
73:e8:d8:7f:df:7e:de:ce:76:8e:f7:28:8b:2c:b7:
17:70:37:83:32:02:49:03:d8:37:9d:d3:9f:fe:01:
41:4d:58:72:cf:64:28:8c:51:f9:ba:31:75:19:66:
73:3a:23:b7:dc:64:5e:a8:69:c4:c1:2d:06:ff:63:
0d:ad:07:6c:e3:c3:51:26:1f:8c:4b:76:16:c2:5e:
35:1c:56:50:5b:18:da:3a:5c:7c:f9:a0:63:7d:f3:
af:68:8b:dc:b7:b3:e9:95:21:fd:8c:2c:18:10:38:
40:3a:a3:46:32:8b:73:e6:0a:96:83:15:02:cf:31:
2d:7a:98:74:57:6b:5d:34:22:1f:27:66:45:54:80:
a9:7d:33:ab:c3:45:4e:98:78:44:00:9c:4c:2f:1d:
fd:b4:1d:75:cf:1b:01:ae:05:d0:72:26:c8:e5:a7:
51:cb:20:b8:c2:9a:29:7a:c6:1b:84:24:33:9e:4d:
67:5f:0e:1b:31:36:d7:0c:4a:4c:6c:9e:8b:ce:fe:
a4:dd:0e:62:65:c6:e1:ae:b0:80:50:d1:b2:e2:9e:
d0:69:d0:2e:91:04:4e:07:34:47:54:85:ef:9c:f8:
59:ec:94:3d:ca:b8:3d:b2:cb:08:64:f6:75:03:d1:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:F9:BD:74:ED:06:49:BA:B6:B6:52:2B:E5:4D:19:88:99:F5:8A
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/b4L5vXTtBkm6trZSK-VNGYiZ9Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.190.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:27:6c:85:41:35:31:b5:a7:68:49:7e:91:93:0e:94:99:9a:
96:6b:e6:6f:2e:dc:16:3f:40:68:28:40:10:23:34:19:f8:03:
29:02:be:a8:92:05:98:72:7c:b4:fb:42:1b:ee:04:79:62:b6:
18:bf:1c:79:b2:66:86:ec:43:7c:a6:cb:57:72:b7:cb:b3:06:
c8:0e:5f:45:e6:71:bc:58:e6:85:35:ce:93:f5:1d:50:d1:85:
19:6e:d0:9e:c1:86:e4:cf:cb:97:ba:2a:45:6a:76:24:76:b7:
cc:af:b0:0e:7f:80:a1:42:23:5b:69:72:5e:8e:dd:c8:f0:31:
de:38:74:01:67:bf:da:7c:59:89:53:18:f7:41:10:44:71:57:
44:87:16:fa:4f:76:39:dc:5a:0e:41:d9:90:01:36:25:47:88:
4d:ac:3a:28:17:fa:2d:5d:a2:a8:37:15:c6:64:07:2d:28:c9:
23:c8:1e:8e:ec:c6:54:79:f9:f1:d5:6c:1c:ec:d1:bf:2b:1f:
50:92:0b:be:c1:e3:d9:a9:ca:d4:11:a1:f0:63:b6:9e:d8:4f:
16:ba:9a:64:e8:ab:45:00:6c:71:27:11:da:4c:d2:c5:c5:c4:
5e:6f:ed:1f:c4:24:04:aa:ba:b7:3d:ab:e3:0d:19:a5:b1:5a:
ef:4a:2f:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsARqpYI9iuc6Q4TTvyLI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWZmZTdkMjk3ZWU0ZTFkNGQyMzMzNWE5YWI0YTAwODhj
MDI1ZDcwHhcNMjMwMTAxMDYyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjgyZjliZDc0ZWQwNjQ5YmFiNmI2NTIyYmU1NGQxOTg4OTlmNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKWCAzC8JeZg/TkM91xz6Nh/337e
znaO9yiLLLcXcDeDMgJJA9g3ndOf/gFBTVhyz2QojFH5ujF1GWZzOiO33GReqGnE
wS0G/2MNrQds48NRJh+MS3YWwl41HFZQWxjaOlx8+aBjffOvaIvct7PplSH9jCwY
EDhAOqNGMotz5gqWgxUCzzEteph0V2tdNCIfJ2ZFVICpfTOrw0VOmHhEAJxMLx39
tB11zxsBrgXQcibI5adRyyC4wpopesYbhCQznk1nXw4bMTbXDEpMbJ6Lzv6k3Q5i
ZcbhrrCAUNGy4p7QadAukQROBzRHVIXvnPhZ7JQ9yrg9sssIZPZ1A9ELowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+C+b107QZJura2UivlTRmImfWKMB8GA1UdIwQY
MBaAFPQf/n0pfuTh1NIzNamrSgCIwCXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEt
NDNkOGE2ZmQxZjQ1LzEvYjRMNXZYVHRCa202dHJaU0stVk5HWWlaOVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEtNDNkOGE2ZmQxZjQ1
LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0C+MA0G
CSqGSIb3DQEBCwUAA4IBAQBdJ2yFQTUxtadoSX6Rkw6UmZqWa+ZvLtwWP0BoKEAQ
IzQZ+AMpAr6okgWYcny0+0Ib7gR5YrYYvxx5smaG7EN8pstXcrfLswbIDl9F5nG8
WOaFNc6T9R1Q0YUZbtCewYbkz8uXuipFanYkdrfMr7AOf4ChQiNbaXJejt3I8DHe
OHQBZ7/afFmJUxj3QRBEcVdEhxb6T3Y53FoOQdmQATYlR4hNrDooF/otXaKoNxXG
ZActKMkjyB6O7MZUefnx1Wwc7NG/Kx9Qkgu+wePZqcrUEaHwY7ae2E8Wuppk6KtF
AGxxJxHaTNLFxcReb+0fxCQEqrq3PavjDRmlsVrvSi9L
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:05 2024 by rpki-client on console.sobornost.net