Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/x2oxKd8FLiQ2ncJnUVBVHwtTXxE.roa
File: x2oxKd8FLiQ2ncJnUVBVHwtTXxE.roa (raw, json)
Hash identifier: hXjgbOzI4O1dTRQ159B6Wc8KkHMX9lTvMHjd/kReUuM=
Subject key identifier: C7:6A:31:29:DF:05:2E:24:36:9D:C2:67:51:50:55:1F:0B:53:5F:11
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 018570429310A152BE705D413504E065AB8A
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/x2oxKd8FLiQ2ncJnUVBVHwtTXxE.roa
Signing time: Mon 02 Jan 2023 02:14:49 +0000
ROA not before: Mon 02 Jan 2023 02:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199256
IP address blocks: 217.115.121.0/24 maxlen: 24
217.115.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:93:10:a1:52:be:70:5d:41:35:04:e0:65:ab:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jan 2 02:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c76a3129df052e24369dc2675150551f0b535f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:74:e9:79:89:ff:6f:ca:aa:eb:7e:65:58:
22:ec:00:3f:3b:0f:17:38:22:fb:f6:c3:b3:22:86:
63:37:13:ca:12:75:c4:80:14:0c:1b:bb:44:17:dd:
19:98:f3:e2:95:d3:ce:45:33:88:d1:f3:38:d9:a0:
6c:38:ad:25:5f:3e:a9:72:04:ed:8f:6a:35:08:3a:
a4:10:9d:5b:91:ee:3b:d9:22:0d:66:46:e1:4a:0e:
6f:7e:e3:c2:bf:54:28:5e:7a:b3:b7:86:3f:f5:6c:
20:b6:1f:bc:05:10:72:77:5f:b4:9d:e5:cc:3c:a5:
cf:4c:19:f6:1b:4d:2e:e3:56:99:ae:27:70:4f:01:
2a:b6:50:64:85:30:3e:11:bd:72:6d:09:65:42:69:
17:6a:ec:bc:17:3a:0f:5f:b3:3c:1e:3d:15:bd:6b:
f3:d0:76:6f:7a:c4:a7:d2:80:14:21:7e:36:f3:17:
77:13:62:c4:3a:1a:20:3c:fc:d5:7a:60:b5:e7:e6:
fc:db:06:a7:da:3c:13:bc:e4:63:b6:02:6a:32:de:
7b:9e:87:01:b7:52:65:bf:d4:9e:fa:b4:47:5d:83:
3d:bd:99:28:47:b9:34:19:40:7c:16:39:32:22:08:
79:e6:29:02:5a:be:28:20:07:06:ce:c8:81:bc:fc:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:31:29:DF:05:2E:24:36:9D:C2:67:51:50:55:1F:0B:53:5F:11
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/x2oxKd8FLiQ2ncJnUVBVHwtTXxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.115.121.0/24
217.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
11:86:25:9c:df:75:06:c4:4c:85:6d:3e:98:23:ae:f2:5d:72:
aa:d1:76:ee:ca:83:f6:f2:f1:aa:ed:0f:8a:eb:fc:00:9b:21:
87:96:87:8e:89:77:5b:7b:ba:66:db:73:4e:ab:a2:1b:0a:0c:
75:a9:63:47:07:13:fc:0f:de:94:04:d2:c9:e2:47:0d:9d:aa:
80:27:de:2c:6f:6d:38:8a:de:d2:75:15:df:e5:6e:10:75:c7:
e7:fd:e0:b4:5c:d4:64:2a:36:37:f7:a2:15:3f:2a:e2:12:0a:
80:55:b8:10:27:6d:15:33:3b:f7:52:36:4e:92:33:38:d1:00:
22:5f:af:5d:a8:cd:b1:33:c0:09:49:da:bc:3c:b9:c1:a6:27:
4b:0f:f0:9c:51:28:da:19:47:8a:7d:a8:d2:3c:a9:62:c8:ca:
d5:18:b8:36:aa:c6:2a:18:2f:aa:00:bc:c1:2f:54:26:15:9a:
05:f0:44:9a:eb:8b:f4:3b:5e:06:c7:f9:d7:e8:6b:03:b2:1b:
0b:5a:a2:5d:0f:08:ff:7c:b7:d0:71:ca:4b:8a:2f:68:92:52:
c5:d9:fd:f0:0d:de:87:91:15:fd:b4:cf:a2:4f:ca:e7:45:da:
0d:cb:6e:21:0b:c2:81:13:49:21:9e:a4:4b:23:fa:4d:6b:7a:
67:f1:dd:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwQpMQoVK+cF1BNQTgZauKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx
YzdmNzUwHhcNMjMwMTAyMDIxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzZhMzEyOWRmMDUyZTI0MzY5ZGMyNjc1MTUwNTUxZjBiNTM1ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobZ06XmJ/2/Kqut+ZVgi7AA/Ow8X
OCL79sOzIoZjNxPKEnXEgBQMG7tEF90ZmPPildPORTOI0fM42aBsOK0lXz6pcgTt
j2o1CDqkEJ1bke472SINZkbhSg5vfuPCv1QoXnqzt4Y/9Wwgth+8BRByd1+0neXM
PKXPTBn2G00u41aZridwTwEqtlBkhTA+Eb1ybQllQmkXauy8FzoPX7M8Hj0VvWvz
0HZvesSn0oAUIX428xd3E2LEOhogPPzVemC15+b82wan2jwTvORjtgJqMt57nocB
t1Jlv9Se+rRHXYM9vZkoR7k0GUB8FjkyIgh55ikCWr4oIAcGzsiBvPwijQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdqMSnfBS4kNp3CZ1FQVR8LU18RMB8GA1UdIwQY
MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt
YTM4ZTFlY2E0ZmQ0LzEveDJveEtkOEZMaVEybmNKblVWQlZId3RUWHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0
LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XN5AwQA
2XN8MA0GCSqGSIb3DQEBCwUAA4IBAQARhiWc33UGxEyFbT6YI67yXXKq0XbuyoP2
8vGq7Q+K6/wAmyGHloeOiXdbe7pm23NOq6IbCgx1qWNHBxP8D96UBNLJ4kcNnaqA
J94sb204it7SdRXf5W4Qdcfn/eC0XNRkKjY396IVPyriEgqAVbgQJ20VMzv3UjZO
kjM40QAiX69dqM2xM8AJSdq8PLnBpidLD/CcUSjaGUeKfajSPKliyMrVGLg2qsYq
GC+qALzBL1QmFZoF8ESa64v0O14Gx/nX6GsDshsLWqJdDwj/fLfQccpLii9oklLF
2f3wDd6HkRX9tM+iT8rnRdoNy24hC8KBE0khnqRLI/pNa3pn8d2r
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:38 2024 by rpki-client on console.sobornost.net