Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/gwXFPY-lCkJlUL_7ECgxs8ELKbg.roa
File: gwXFPY-lCkJlUL_7ECgxs8ELKbg.roa (raw, json)
Hash identifier: fWqehL2gFhg3XCOE8SJ8jyXhQmHjftN6HNpXHIYdICk=
Subject key identifier: 83:05:C5:3D:8F:A5:0A:42:65:50:BF:FB:10:28:31:B3:C1:0B:29:B8
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 01856D0186B452DA564392D38B8DA591D9A7
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/gwXFPY-lCkJlUL_7ECgxs8ELKbg.roa
Signing time: Sun 01 Jan 2023 11:04:54 +0000
ROA not before: Sun 01 Jan 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:86:b4:52:da:56:43:92:d3:8b:8d:a5:91:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jan 1 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8305c53d8fa50a426550bffb102831b3c10b29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:e1:85:15:95:38:65:b7:2c:1c:28:00:65:
16:1f:24:dc:35:04:cb:6a:61:a4:a1:3c:df:d2:6f:
12:db:b0:30:71:d1:52:c3:54:e4:1d:a6:1c:1c:30:
4e:cc:7f:46:9e:f6:47:fb:11:54:d3:eb:00:bc:ba:
3a:ea:e4:02:62:49:d4:25:8f:5a:90:da:cc:bd:68:
db:03:84:ec:28:a7:e1:de:c7:10:65:38:3a:ed:0d:
74:1c:09:17:ce:2a:17:ba:d9:d0:96:d1:e3:c5:2f:
cb:87:f9:c5:a2:30:cb:30:41:62:91:d9:6f:ab:67:
6c:87:51:ce:d1:94:47:74:1d:22:92:48:6c:f5:b0:
89:34:0c:ce:7b:c0:e3:72:cc:1e:03:27:f8:40:be:
91:18:b6:e7:16:24:b2:77:4b:07:6a:6f:bd:43:d0:
1a:96:8c:55:cf:80:89:50:c8:6d:8a:c5:de:72:ae:
18:4b:cc:14:cd:98:67:a6:b4:19:76:db:6b:40:2e:
ae:a3:02:56:dc:d2:a2:2b:c3:74:b7:75:66:9a:b5:
04:23:9b:c8:db:37:10:86:88:39:d5:71:af:43:d8:
2c:d7:34:65:c3:50:c1:c8:7c:1b:92:ee:26:e1:b0:
d2:26:69:a0:63:0e:1f:c7:c6:6b:13:3e:0e:a2:60:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:C5:3D:8F:A5:0A:42:65:50:BF:FB:10:28:31:B3:C1:0B:29:B8
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/gwXFPY-lCkJlUL_7ECgxs8ELKbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.32.0/19
Signature Algorithm: sha256WithRSAEncryption
39:1b:2a:d6:58:d3:60:6d:fb:a1:38:e6:78:d7:3f:ea:90:9e:
a2:8d:4f:96:3a:55:77:6c:1b:b7:eb:7e:77:c5:c4:65:de:cc:
1a:0f:90:bd:81:42:00:c4:c9:64:f4:cc:0a:15:54:eb:45:bc:
83:3f:85:6a:bc:7d:eb:f7:c7:b6:c7:04:ed:75:67:14:60:58:
a0:9f:5f:6d:e6:a9:d0:2e:86:a9:50:79:a1:9d:49:b6:e1:a1:
fc:50:9e:6c:f4:9d:a4:8b:06:b2:c8:c2:eb:b9:ef:c9:b3:b0:
72:71:a7:c8:ec:77:53:88:85:7f:83:28:ff:dc:70:ef:7c:37:
04:cc:4d:73:fa:75:e5:70:46:e7:47:56:84:ed:51:81:e4:65:
fe:2e:8c:75:2e:33:85:74:85:e8:51:0c:bc:38:b6:46:b7:44:
ec:a1:b2:62:4e:62:50:b0:b2:01:12:0a:82:b2:06:ff:d3:d9:
af:00:aa:3e:91:8c:6f:f3:69:8a:a3:5b:42:50:1f:17:aa:4f:
69:da:aa:dc:e7:0f:ac:ad:99:b1:cd:f0:3a:b7:7e:32:43:be:
cd:b2:f8:bd:88:1b:5d:0a:0a:75:9b:bc:f2:05:b2:6d:db:85:
ac:cb:b9:f7:8c:47:16:21:f4:e4:57:95:91:d0:ea:2c:73:a8:
15:f5:52:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAYa0UtpWQ5LTi42lkdmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm
OGRlYmQwHhcNMjMwMTAxMTEwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzA1YzUzZDhmYTUwYTQyNjU1MGJmZmIxMDI4MzFiM2MxMGIyOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo27hhRWVOGW3LBwoAGUWHyTcNQTL
amGkoTzf0m8S27AwcdFSw1TkHaYcHDBOzH9GnvZH+xFU0+sAvLo66uQCYknUJY9a
kNrMvWjbA4TsKKfh3scQZTg67Q10HAkXzioXutnQltHjxS/Lh/nFojDLMEFikdlv
q2dsh1HO0ZRHdB0ikkhs9bCJNAzOe8DjcsweAyf4QL6RGLbnFiSyd0sHam+9Q9Aa
loxVz4CJUMhtisXecq4YS8wUzZhnprQZdttrQC6uowJW3NKiK8N0t3VmmrUEI5vI
2zcQhog51XGvQ9gs1zRlw1DByHwbku4m4bDSJmmgYw4fx8ZrEz4OomA8RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMFxT2PpQpCZVC/+xAoMbPBCym4MB8GA1UdIwQY
MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt
ZmZhY2QyOWZkYTNhLzEvZ3dYRlBZLWxDa0psVUxfN0VDZ3hzOEVMS2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh
LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwaEgMA0G
CSqGSIb3DQEBCwUAA4IBAQA5GyrWWNNgbfuhOOZ41z/qkJ6ijU+WOlV3bBu36353
xcRl3swaD5C9gUIAxMlk9MwKFVTrRbyDP4VqvH3r98e2xwTtdWcUYFign19t5qnQ
LoapUHmhnUm24aH8UJ5s9J2kiwayyMLrue/Js7BycafI7HdTiIV/gyj/3HDvfDcE
zE1z+nXlcEbnR1aE7VGB5GX+Lox1LjOFdIXoUQy8OLZGt0TsobJiTmJQsLIBEgqC
sgb/09mvAKo+kYxv82mKo1tCUB8Xqk9p2qrc5w+srZmxzfA6t34yQ77Nsvi9iBtd
Cgp1m7zyBbJt24Wsy7n3jEcWIfTkV5WR0Oosc6gV9VLE
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:48 2024 by rpki-client on console.sobornost.net