Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/8Wy2VkDwN1mIBtuknZD_jKd0jfo.roa
File: 8Wy2VkDwN1mIBtuknZD_jKd0jfo.roa (raw, json)
Hash identifier: Ligg0vDRjaHKXm06jsu/BGkEjEZHI+6wyUNXT4U61bo=
Subject key identifier: F1:6C:B6:56:40:F0:37:59:88:06:DB:A4:9D:90:FF:8C:A7:74:8D:FA
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 018571278298687538B87F4A4B4B255C8664
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/8Wy2VkDwN1mIBtuknZD_jKd0jfo.roa
Signing time: Mon 02 Jan 2023 06:24:52 +0000
ROA not before: Mon 02 Jan 2023 06:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201285
IP address blocks: 185.196.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:82:98:68:75:38:b8:7f:4a:4b:4b:25:5c:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Jan 2 06:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16cb65640f037598806dba49d90ff8ca7748dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:8b:d7:c3:7f:60:e0:2e:f6:1d:95:6e:55:
21:f1:cb:af:be:dc:da:21:42:4b:15:5b:f3:a7:03:
17:53:1d:76:42:3a:79:c0:06:ab:24:f5:16:cc:34:
80:26:be:d4:aa:b3:da:0e:bc:fb:0d:b6:d5:3b:a3:
5b:a8:c8:74:ee:43:42:dd:ae:d1:cd:4a:67:8e:40:
97:a0:27:fb:45:bb:b2:2e:a1:7b:6d:dd:2e:be:e4:
58:71:0f:09:06:58:41:03:e0:d5:79:aa:5e:5a:7e:
ca:a0:c3:1e:5f:14:57:69:ce:b2:ae:35:5f:6d:38:
bf:03:5b:09:be:eb:3d:d2:69:7d:1d:6e:92:b2:cf:
ac:0f:0e:0d:91:1c:20:55:2c:a5:a8:bd:32:47:e2:
d0:c6:f1:ee:a1:b9:41:46:e9:58:d5:66:5b:9b:86:
6b:7c:80:96:04:4b:ac:a8:07:9d:5d:6d:49:cc:0c:
77:24:b2:75:68:59:67:e3:91:7a:5c:03:01:08:ab:
f3:6a:bb:6e:e4:78:51:d6:7f:5e:b6:56:ce:1c:a8:
75:ba:8f:2b:c4:93:fd:b4:3b:0b:1e:42:75:23:ec:
21:22:71:36:7e:e6:74:d3:2c:5d:ce:91:66:0c:a6:
38:a6:ce:7e:4b:67:3d:be:e4:d9:ea:20:c5:3d:3e:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:B6:56:40:F0:37:59:88:06:DB:A4:9D:90:FF:8C:A7:74:8D:FA
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/8Wy2VkDwN1mIBtuknZD_jKd0jfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:1c:03:ab:de:74:8a:52:9b:db:76:34:a0:b4:dc:44:84:
4c:42:70:67:70:31:59:88:ca:bf:3e:51:15:5a:34:f0:85:e2:
8f:3c:1a:fb:20:92:a6:9f:8e:a8:ab:93:2f:4e:06:27:0b:dd:
f0:9c:08:c4:31:07:3e:3b:0e:d3:36:10:50:4b:de:6f:dd:eb:
cd:5a:4e:75:64:f1:3a:60:c5:f6:58:97:79:d1:1f:06:75:df:
97:93:a7:e5:3c:47:a0:bb:93:5d:6b:23:77:f1:82:92:68:05:
55:b1:66:94:47:62:e7:dd:a4:51:bf:6d:cc:ee:24:0c:7a:7f:
5b:65:24:15:bb:1d:72:28:20:72:0c:76:9a:22:bf:25:87:f5:
a8:62:92:af:8a:dc:85:6d:c0:18:81:07:b8:0b:93:26:bc:80:
b2:0e:85:b4:0e:62:2c:f3:36:07:0f:32:c3:0c:d5:d9:13:e5:
43:75:54:2b:e5:77:25:14:81:d2:6d:8d:de:b5:cc:94:35:af:
af:95:ae:74:21:e2:34:ba:65:c3:5b:a6:d3:80:08:f9:ba:6f:
8f:5a:eb:7f:70:50:bd:03:06:43:07:34:07:1e:3a:ad:f5:e6:
67:f3:48:14:02:25:af:cd:66:4c:d6:00:9d:95:3d:8b:f5:89:
5f:64:63:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ4KYaHU4uH9KS0slXIZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZWRmMjE0MDY3NGFlNmZmM2U0NjQ1NjBjNDk1NmFiNmUy
MWFkZWUwHhcNMjMwMTAyMDYyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTZjYjY1NjQwZjAzNzU5ODgwNmRiYTQ5ZDkwZmY4Y2E3NzQ4ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25SL18N/YOAu9h2VblUh8cuvvtza
IUJLFVvzpwMXUx12Qjp5wAarJPUWzDSAJr7UqrPaDrz7DbbVO6NbqMh07kNC3a7R
zUpnjkCXoCf7RbuyLqF7bd0uvuRYcQ8JBlhBA+DVeapeWn7KoMMeXxRXac6yrjVf
bTi/A1sJvus90ml9HW6Sss+sDw4NkRwgVSylqL0yR+LQxvHuoblBRulY1WZbm4Zr
fICWBEusqAedXW1JzAx3JLJ1aFln45F6XAMBCKvzartu5HhR1n9etlbOHKh1uo8r
xJP9tDsLHkJ1I+whInE2fuZ00yxdzpFmDKY4ps5+S2c9vuTZ6iDFPT43DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFstlZA8DdZiAbbpJ2Q/4yndI36MB8GA1UdIwQY
MBaAFP7t8hQGdK5v8+RkVgxJVqtuIa3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3UzeUZBWjBybV96NUdSV0RFbFdxMjRocmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81NTYyYTEtZTFhNC00MTc0LTk5MTgt
YmFhMDVjODE5MGRlLzEvOFd5MlZrRHdOMW1JQnR1a25aRF9qS2QwamZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC81NTYyYTEtZTFhNC00MTc0LTk5MTgtYmFhMDVjODE5MGRl
LzEvX3UzeUZBWjBybV96NUdSV0RFbFdxMjRocmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucQfMA0G
CSqGSIb3DQEBCwUAA4IBAQAF2BwDq950ilKb23Y0oLTcRIRMQnBncDFZiMq/PlEV
WjTwheKPPBr7IJKmn46oq5MvTgYnC93wnAjEMQc+Ow7TNhBQS95v3evNWk51ZPE6
YMX2WJd50R8Gdd+Xk6flPEegu5NdayN38YKSaAVVsWaUR2Ln3aRRv23M7iQMen9b
ZSQVux1yKCByDHaaIr8lh/WoYpKvityFbcAYgQe4C5MmvICyDoW0DmIs8zYHDzLD
DNXZE+VDdVQr5XclFIHSbY3etcyUNa+vla50IeI0umXDW6bTgAj5um+PWut/cFC9
AwZDBzQHHjqt9eZn80gUAiWvzWZM1gCdlT2L9YlfZGP2
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:40 2024 by rpki-client on console.sobornost.net