Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/13_qa0BN3dfWBazwy9CoaGeznx0.roa
File: 13_qa0BN3dfWBazwy9CoaGeznx0.roa (raw, json)
Hash identifier: Y7GzijCK62G9YNDYwNYJCk6uSA1oJDP1veK5BgbHr54=
Subject key identifier: D7:7F:EA:6B:40:4D:DD:D7:D6:05:AC:F0:CB:D0:A8:68:67:B3:9F:1D
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 018570672467781E1B36BF89B4EB929DC0AC
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/13_qa0BN3dfWBazwy9CoaGeznx0.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210653
IP address blocks: 194.8.86.0/23 maxlen: 24
194.9.0.0/23 maxlen: 24
2a0f:ee80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:24:67:78:1e:1b:36:bf:89:b4:eb:92:9d:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d77fea6b404dddd7d605acf0cbd0a86867b39f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:38:6e:33:75:5c:d5:08:0c:06:97:59:76:
ae:fa:53:2f:c6:03:d6:eb:f6:a3:7a:be:b9:15:c6:
ad:4e:c0:26:83:ae:86:95:0e:d4:da:a6:c2:31:5b:
77:4b:b4:ad:5e:ae:da:b4:e2:2b:95:b3:b0:19:37:
a9:d9:bb:1a:46:dd:f9:92:9e:da:6f:5a:b6:dc:b2:
b1:7b:5d:ab:b7:fa:10:f0:4e:cb:31:df:70:26:9c:
f8:23:1b:57:74:26:c1:b1:4d:b4:a9:13:42:ff:4c:
7b:55:01:1d:61:7a:04:72:bb:4e:84:e1:a5:79:1a:
53:03:f9:e1:16:95:73:e6:88:25:90:52:82:39:a5:
70:ae:4c:aa:9c:ea:8f:e4:bd:20:c5:a3:d5:3a:ff:
fb:7f:b6:cd:66:92:bd:19:29:84:65:d9:f4:c8:ff:
9e:7d:d5:fe:55:40:c0:c7:8a:1b:96:c4:32:aa:22:
d3:76:7a:46:66:66:cf:5c:1b:a4:4c:b9:e8:10:50:
46:b5:5c:2e:ed:75:14:a7:23:30:d4:eb:7c:75:28:
c5:85:a3:3a:d0:74:3e:a7:87:cf:66:35:67:a1:7d:
24:b3:6f:ed:94:23:76:21:fa:c5:d7:17:0c:62:00:
12:11:01:25:69:57:02:dd:d4:0d:31:d9:d0:43:f9:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:EA:6B:40:4D:DD:D7:D6:05:AC:F0:CB:D0:A8:68:67:B3:9F:1D
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/13_qa0BN3dfWBazwy9CoaGeznx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.86.0/23
194.9.0.0/23
IPv6:
2a0f:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
78:65:d3:51:1e:e3:94:1e:28:08:7c:78:3c:a4:95:dd:d9:4b:
31:32:98:0f:79:8a:0c:1f:ab:b5:dd:27:28:87:1f:4e:d4:18:
7a:0b:eb:94:ff:60:72:21:db:10:c2:22:f4:8a:a6:e0:14:af:
f2:5a:b6:c9:f8:ba:ef:bd:ce:08:df:85:7e:a4:2a:07:0c:50:
c0:69:3c:3d:31:70:2b:a6:d4:03:ee:45:67:bf:aa:28:e2:d5:
2e:ff:ed:6c:91:e2:92:31:6e:fa:f7:78:3f:28:09:c9:80:a2:
6f:17:27:1c:3a:f8:5a:cd:be:18:8a:26:19:b0:09:cc:ee:da:
35:f8:98:f4:69:8a:dd:1a:24:2a:5b:66:f6:dd:9d:45:82:d3:
b8:35:e1:43:93:91:67:66:f9:7b:61:f4:b4:7b:d5:af:37:11:
6f:da:cc:b4:ce:1e:92:8c:b4:05:ca:a3:41:83:ea:b6:83:ef:
21:e1:c9:c7:0a:84:43:cc:f1:34:c0:a3:03:9c:9e:5b:35:99:
16:a1:8c:79:de:64:7a:7b:e6:20:c9:23:0c:74:f8:f6:70:ef:
c4:2d:32:08:36:c2:07:34:17:03:09:a3:ac:c6:6a:6c:65:91:
2e:9d:f9:e1:29:1c:d8:67:af:4b:45:ea:66:07:38:97:2b:50:
d9:7e:43:60
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwZyRneB4bNr+JtOuSncCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4
NzJkMzUwHhcNMjMwMTAyMDI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzdmZWE2YjQwNGRkZGQ3ZDYwNWFjZjBjYmQwYTg2ODY3YjM5ZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3k4bjN1XNUIDAaXWXau+lMvxgPW
6/ajer65FcatTsAmg66GlQ7U2qbCMVt3S7StXq7atOIrlbOwGTep2bsaRt35kp7a
b1q23LKxe12rt/oQ8E7LMd9wJpz4IxtXdCbBsU20qRNC/0x7VQEdYXoEcrtOhOGl
eRpTA/nhFpVz5oglkFKCOaVwrkyqnOqP5L0gxaPVOv/7f7bNZpK9GSmEZdn0yP+e
fdX+VUDAx4oblsQyqiLTdnpGZmbPXBukTLnoEFBGtVwu7XUUpyMw1Ot8dSjFhaM6
0HQ+p4fPZjVnoX0ks2/tlCN2IfrF1xcMYgASEQElaVcC3dQNMdnQQ/lAVQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNd/6mtATd3X1gWs8MvQqGhns58dMB8GA1UdIwQY
MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt
YzAxNjZkOTcwMTBkLzEvMTNfcWEwQk4zZGZXQmF6d3k5Q29hR2V6bngwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk
LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwghWAwQB
wgkAMA0EAgACMAcDBQMqD+6AMA0GCSqGSIb3DQEBCwUAA4IBAQB4ZdNRHuOUHigI
fHg8pJXd2UsxMpgPeYoMH6u13Scohx9O1Bh6C+uU/2ByIdsQwiL0iqbgFK/yWrbJ
+Lrvvc4I34V+pCoHDFDAaTw9MXArptQD7kVnv6oo4tUu/+1skeKSMW7693g/KAnJ
gKJvFyccOvhazb4YiiYZsAnM7to1+Jj0aYrdGiQqW2b23Z1FgtO4NeFDk5FnZvl7
YfS0e9WvNxFv2sy0zh6SjLQFyqNBg+q2g+8h4cnHCoRDzPE0wKMDnJ5bNZkWoYx5
3mR6e+YgySMMdPj2cO/ELTIINsIHNBcDCaOsxmpsZZEunfnhKRzYZ69LRepmBziX
K1DZfkNg
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:11 2024 by rpki-client on console.sobornost.net