Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/R6DzvkJdoqO8FfxM_3860MA2dVI.roa
File: R6DzvkJdoqO8FfxM_3860MA2dVI.roa (raw, json)
Hash identifier: ynUZ0pwDx8nMEbLUZSMStDbmYX0ycCQ4+LBMY+qZClM=
Subject key identifier: 47:A0:F3:BE:42:5D:A2:A3:BC:15:FC:4C:FF:7F:3A:D0:C0:36:75:52
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 01856FD50A8397BD3D91355A22ED64377FA1
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/R6DzvkJdoqO8FfxM_3860MA2dVI.roa
Signing time: Mon 02 Jan 2023 00:15:10 +0000
ROA not before: Mon 02 Jan 2023 00:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206894
IP address blocks: 193.25.96.0/23 maxlen: 23
193.24.38.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:0a:83:97:bd:3d:91:35:5a:22:ed:64:37:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Jan 2 00:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a0f3be425da2a3bc15fc4cff7f3ad0c0367552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:7a:ff:18:e3:b5:7c:59:46:e1:e7:c3:96:
38:ee:94:21:16:46:b5:f3:88:6e:91:e6:15:90:78:
c6:6f:f3:e2:0d:ff:a8:f6:3f:66:0a:7c:ab:0e:b7:
c8:f1:98:49:29:04:97:25:a3:43:4d:55:38:73:9e:
fb:5f:1c:19:b9:5c:ed:6b:40:d0:e4:79:e7:c9:9e:
06:82:04:40:59:8d:c8:d6:bb:d8:24:49:e2:9c:fe:
09:25:c5:03:0f:ea:c9:5f:d6:19:96:0b:e1:6a:bf:
5b:67:78:d5:8e:8d:cc:df:56:9c:39:79:6f:53:ff:
bc:7a:b7:be:69:0b:2e:95:77:58:b2:dd:a0:90:7b:
31:96:8a:65:2f:fd:20:72:65:7b:d6:3f:e0:a4:93:
4e:01:48:9c:58:95:34:9b:d4:33:fd:0a:ca:99:b4:
ba:9b:c9:0a:9e:0b:cc:70:f4:6c:86:35:82:ba:81:
1f:d5:1c:db:0d:c1:43:10:6d:8c:d2:17:b0:8a:71:
1b:a2:72:95:37:5f:fd:ba:ad:8a:98:e2:50:69:02:
e3:cc:f4:e8:bd:9f:5c:ab:e6:5a:88:d0:28:8c:dd:
90:1d:ac:27:31:aa:d9:f0:e5:f1:0c:8f:ff:54:fa:
47:cb:ea:0c:b5:45:b8:c4:10:aa:9f:20:3b:1e:6e:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:F3:BE:42:5D:A2:A3:BC:15:FC:4C:FF:7F:3A:D0:C0:36:75:52
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/R6DzvkJdoqO8FfxM_3860MA2dVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.38.0/23
193.25.96.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c3:5b:7c:27:e0:43:83:8e:20:9b:82:95:38:c6:8b:ea:6c:
cb:fe:b8:6a:26:b6:1f:42:d4:3c:a2:69:f8:ef:f0:38:02:2d:
b6:5a:17:46:8d:9e:77:c0:61:01:d3:11:00:0a:fe:65:3c:18:
ec:a2:d9:ae:5e:d0:bc:68:4d:30:62:c0:55:90:30:6a:b2:60:
89:af:18:9a:89:01:e8:93:14:8b:d9:1b:34:7a:92:0e:6b:0b:
1d:10:80:ca:a4:76:20:3c:cd:9b:bc:4d:85:36:fe:25:58:f9:
59:de:dc:0e:5f:60:3a:8f:3b:0b:46:c5:40:e6:45:de:1c:4b:
fb:3a:d7:a5:2f:47:2d:ff:f0:70:af:63:87:2a:8d:5f:eb:83:
13:ed:23:16:32:27:e1:68:e1:7c:60:1c:e5:77:92:fc:4b:87:
dc:b3:8d:5a:99:aa:fe:fb:f2:02:2e:28:74:34:db:a1:68:7f:
7e:65:a9:17:40:de:59:95:37:a9:da:3f:f5:e7:64:6f:44:03:
ca:ae:84:ab:e8:87:5c:b0:d2:de:0a:31:73:e7:0d:3d:98:60:
d3:b0:5c:6f:26:e4:8a:83:e2:a8:65:a1:40:d5:ea:e1:0d:cf:
5c:15:74:33:7d:b7:42:42:25:b5:c1:15:48:e3:02:9c:04:40:
b3:c4:65:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv1QqDl709kTVaIu1kN3+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj
ZjNkM2IwHhcNMjMwMTAyMDAxNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2EwZjNiZTQyNWRhMmEzYmMxNWZjNGNmZjdmM2FkMGMwMzY3NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbN6/xjjtXxZRuHnw5Y47pQhFka1
84hukeYVkHjGb/PiDf+o9j9mCnyrDrfI8ZhJKQSXJaNDTVU4c577XxwZuVzta0DQ
5HnnyZ4GggRAWY3I1rvYJEninP4JJcUDD+rJX9YZlgvhar9bZ3jVjo3M31acOXlv
U/+8ere+aQsulXdYst2gkHsxloplL/0gcmV71j/gpJNOAUicWJU0m9Qz/QrKmbS6
m8kKngvMcPRshjWCuoEf1RzbDcFDEG2M0hewinEbonKVN1/9uq2KmOJQaQLjzPTo
vZ9cq+ZaiNAojN2QHawnMarZ8OXxDI//VPpHy+oMtUW4xBCqnyA7Hm59vQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEeg875CXaKjvBX8TP9/OtDANnVSMB8GA1UdIwQY
MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct
ZjM4YjI4OWZmOTY5LzEvUjZEenZrSmRvcU84RmZ4TV8zODYwTUEyZFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5
LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwRgmAwQB
wRlgMA0GCSqGSIb3DQEBCwUAA4IBAQAJw1t8J+BDg44gm4KVOMaL6mzL/rhqJrYf
QtQ8omn47/A4Ai22WhdGjZ53wGEB0xEACv5lPBjsotmuXtC8aE0wYsBVkDBqsmCJ
rxiaiQHokxSL2Rs0epIOawsdEIDKpHYgPM2bvE2FNv4lWPlZ3twOX2A6jzsLRsVA
5kXeHEv7OtelL0ct//Bwr2OHKo1f64MT7SMWMifhaOF8YBzld5L8S4fcs41amar+
+/ICLih0NNuhaH9+ZakXQN5ZlTep2j/152RvRAPKroSr6IdcsNLeCjFz5w09mGDT
sFxvJuSKg+KoZaFA1erhDc9cFXQzfbdCQiW1wRVI4wKcBECzxGV5
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net