Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/eV022jWgMGcD02rIU2pjRPToIus.roa
File: eV022jWgMGcD02rIU2pjRPToIus.roa (raw, json)
Hash identifier: oEoEmkclFomb6/dZdMJK0kuHOjkqZmzYfa1sHGJpyWM=
Subject key identifier: 79:5D:36:DA:35:A0:30:67:03:D3:6A:C8:53:6A:63:44:F4:E8:22:EB
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0185730391980F14D18D2D407F779009CCAA
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/eV022jWgMGcD02rIU2pjRPToIus.roa
Signing time: Mon 02 Jan 2023 15:04:51 +0000
ROA not before: Mon 02 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58204
IP address blocks: 91.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:91:98:0f:14:d1:8d:2d:40:7f:77:90:09:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jan 2 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795d36da35a0306703d36ac8536a6344f4e822eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:90:37:5e:bb:4b:d1:81:f8:2e:8e:7e:a9:
b0:41:c2:58:f3:02:e3:fa:ea:ae:48:dc:df:f2:af:
be:87:38:3c:54:07:70:59:b8:c0:93:5d:2b:a3:fe:
ef:7d:90:6d:b7:e8:fc:23:6c:2a:ea:b2:af:98:ef:
62:f4:d8:df:e6:1d:83:79:7f:4d:65:44:9b:59:6d:
c2:c8:fb:8e:8b:22:d1:cd:82:b0:a6:ce:87:cf:99:
97:db:d4:6f:7b:b4:e9:e2:e5:87:f7:11:f9:cc:e0:
60:2e:00:2d:5f:fa:de:17:43:37:57:ef:47:36:b0:
a7:6b:8d:cf:d5:92:32:f3:5e:cf:23:41:87:e9:64:
19:56:7c:c7:bd:d8:d2:2c:9e:88:06:e8:eb:5a:51:
6f:a1:0d:57:6d:3c:f2:5a:b6:6a:f6:26:5d:0c:c3:
ba:d1:ae:71:55:8c:9b:be:41:42:a4:1f:79:da:26:
7a:08:9f:0a:a7:82:7f:0d:8d:dc:2a:2e:15:0c:1a:
0b:03:fa:7f:a6:73:d3:4c:7b:5e:c0:db:9e:60:2d:
1e:94:21:8f:8d:e4:4b:f4:f9:1d:88:a9:74:73:90:
0c:a1:b9:a3:14:f4:28:f7:a9:d9:5b:27:4a:6e:17:
32:13:db:65:62:16:66:ad:06:3a:94:41:58:f6:67:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:36:DA:35:A0:30:67:03:D3:6A:C8:53:6A:63:44:F4:E8:22:EB
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/eV022jWgMGcD02rIU2pjRPToIus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.194.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b0:ab:59:a9:c5:e7:8e:75:d2:fa:82:23:77:67:72:f7:3c:
fb:37:7a:2a:1d:fe:aa:4e:1d:6f:5f:4a:62:a4:a8:02:1d:32:
65:99:df:46:29:1f:a6:fb:7f:48:d5:62:a4:14:9e:ef:91:55:
64:9c:40:c0:e0:53:56:99:56:e8:bb:e9:72:f6:b9:70:3d:88:
b9:08:1b:90:8e:93:fd:e8:68:a9:fe:f2:f3:e4:15:4c:c3:15:
9c:59:02:16:25:9b:ed:bd:75:ac:d9:a0:7f:d1:51:ee:da:33:
6b:f8:80:c7:9d:c7:c8:cf:8a:74:97:8f:ee:ec:02:a0:a6:19:
43:3a:ad:06:d4:0e:f9:14:62:2e:f4:41:70:dc:70:fb:de:f5:
25:10:1b:18:bd:47:f6:78:2a:aa:6c:0d:2c:4a:17:a5:7f:7e:
38:a5:d0:63:6b:3b:0f:56:81:ab:7a:f7:db:66:45:7f:28:a4:
e3:70:9c:a9:41:3a:f6:f0:7c:9a:aa:34:78:0e:1d:6c:2e:24:
2a:5a:bd:a3:2c:36:81:27:0d:f2:95:32:fd:a6:cc:4c:5b:92:
d0:a5:a1:a8:0d:e5:fd:a3:d9:27:f4:4d:df:39:8a:c5:a0:9e:
eb:5c:2d:c1:89:b7:bb:3d:92:22:6e:b0:e3:6c:8f:d1:69:fb:
3d:e5:25:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzA5GYDxTRjS1Af3eQCcyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Zjk4YmIxYThjN2YxZDY2NzQyNDhjNDdlMGYwNGFlMDQ5
YWZhNTEwHhcNMjMwMTAyMTUwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTVkMzZkYTM1YTAzMDY3MDNkMzZhYzg1MzZhNjM0NGY0ZTgyMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkmQN167S9GB+C6OfqmwQcJY8wLj
+uquSNzf8q++hzg8VAdwWbjAk10ro/7vfZBtt+j8I2wq6rKvmO9i9Njf5h2DeX9N
ZUSbWW3CyPuOiyLRzYKwps6Hz5mX29Rve7Tp4uWH9xH5zOBgLgAtX/reF0M3V+9H
NrCna43P1ZIy817PI0GH6WQZVnzHvdjSLJ6IBujrWlFvoQ1XbTzyWrZq9iZdDMO6
0a5xVYybvkFCpB952iZ6CJ8Kp4J/DY3cKi4VDBoLA/p/pnPTTHtewNueYC0elCGP
jeRL9PkdiKl0c5AMobmjFPQo96nZWydKbhcyE9tlYhZmrQY6lEFY9meuTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHldNto1oDBnA9NqyFNqY0T06CLrMB8GA1UdIwQY
MBaAFIT5i7Gox/HWZ0JIxH4PBK4EmvpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAt
NGUzNTk0YjJkYTdmLzEvZVYwMjJqV2dNR2NEMDJySVUycGpSUFRvSXVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAtNGUzNTk0YjJkYTdm
LzEvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/CMA0G
CSqGSIb3DQEBCwUAA4IBAQBpsKtZqcXnjnXS+oIjd2dy9zz7N3oqHf6qTh1vX0pi
pKgCHTJlmd9GKR+m+39I1WKkFJ7vkVVknEDA4FNWmVbou+ly9rlwPYi5CBuQjpP9
6Gip/vLz5BVMwxWcWQIWJZvtvXWs2aB/0VHu2jNr+IDHncfIz4p0l4/u7AKgphlD
Oq0G1A75FGIu9EFw3HD73vUlEBsYvUf2eCqqbA0sShelf344pdBjazsPVoGrevfb
ZkV/KKTjcJypQTr28HyaqjR4Dh1sLiQqWr2jLDaBJw3ylTL9psxMW5LQpaGoDeX9
o9kn9E3fOYrFoJ7rXC3Bibe7PZIibrDjbI/Rafs95SVK
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net