Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/gZK9wKiA8yZjoU78TJTxiK7EnEk.roa
File: gZK9wKiA8yZjoU78TJTxiK7EnEk.roa (raw, json)
Hash identifier: cv51iTQvlLbfoAcSaun6Zh3cGEf0mj0EeWXpJ6rHbuA=
Subject key identifier: 81:92:BD:C0:A8:80:F3:26:63:A1:4E:FC:4C:94:F1:88:AE:C4:9C:49
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 01856E5416D06F4C12A8106A6E681FAB489F
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/gZK9wKiA8yZjoU78TJTxiK7EnEk.roa
Signing time: Sun 01 Jan 2023 17:14:42 +0000
ROA not before: Sun 01 Jan 2023 17:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9044
IP address blocks: 193.27.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:16:d0:6f:4c:12:a8:10:6a:6e:68:1f:ab:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Jan 1 17:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8192bdc0a880f32663a14efc4c94f188aec49c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:69:1e:b9:83:72:45:9e:62:25:27:8c:21:
14:ca:b8:bc:50:07:a9:d9:0d:99:d3:08:0a:6c:f6:
0c:b1:ed:27:67:77:4f:ae:82:b0:e5:86:a7:6b:ff:
9c:cf:6a:7a:2f:39:14:6d:cc:49:fd:3e:32:d3:71:
3a:fa:81:10:e1:53:5e:ac:58:b9:b8:a1:c7:12:b8:
1b:47:48:4f:53:cc:49:86:b4:b5:a6:d3:35:14:77:
4f:85:85:c9:f2:25:63:39:a0:55:1e:7e:ee:4e:1e:
4e:83:32:57:98:5a:07:f9:71:e2:f6:dd:f3:85:27:
4d:7b:ca:e8:f0:b7:3b:95:3d:d8:22:e4:19:46:f2:
df:58:60:59:0a:ff:38:3b:d0:d1:bb:e8:87:2d:b5:
55:54:f3:a4:20:be:dc:b0:80:98:08:48:d2:1e:15:
f0:01:96:1f:57:35:bb:64:c4:d1:bb:dd:fe:78:64:
c4:dd:7c:d7:fc:4c:bd:bf:69:b7:95:47:76:c7:06:
13:18:0e:11:94:78:31:d6:0b:5a:f0:b1:15:75:49:
e3:34:cb:21:2c:c4:16:65:a8:19:2b:39:84:6e:2f:
b4:71:f9:bc:f6:fb:e7:3b:e7:c7:a3:26:e8:4f:63:
9e:b0:bd:8d:0b:42:ed:e9:43:8e:bb:92:72:84:40:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:BD:C0:A8:80:F3:26:63:A1:4E:FC:4C:94:F1:88:AE:C4:9C:49
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/gZK9wKiA8yZjoU78TJTxiK7EnEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:60:e4:e6:f0:2c:47:98:48:b5:46:f1:08:46:44:db:25:
5a:6e:14:f2:c7:c2:f5:6f:ee:9e:41:35:e2:5e:ed:f7:c9:e5:
1a:ea:b8:e9:e4:de:9a:24:70:72:fc:bc:50:f2:81:06:0b:50:
ae:ea:c7:06:fc:50:cd:ce:3b:1d:f6:3e:cd:72:e0:20:65:d9:
46:6f:a9:b9:07:64:b1:ba:8a:c3:16:6c:6e:d5:23:b9:08:4f:
21:96:4a:db:c8:2d:ab:ae:2c:1e:d6:b0:4f:5b:9b:33:a7:9f:
e6:da:0f:91:e9:d7:e0:ef:a9:d7:38:bc:23:55:34:e4:f1:19:
b7:1c:80:b1:77:7d:b6:f8:63:48:8a:af:4b:35:92:d2:88:d6:
9b:ee:1e:3b:4c:b0:c6:0a:98:3f:d2:13:8d:21:dd:a9:2c:8f:
dc:1c:33:3f:12:3e:28:a9:f9:42:20:cf:63:30:13:05:01:c2:
4e:d4:0d:8e:80:cb:4a:18:f6:2b:7b:f5:d9:d7:c8:2a:6e:91:
e7:92:b6:e7:8f:41:72:77:04:ad:52:1e:a5:b5:50:99:36:e9:
9c:4e:61:1f:30:78:5c:d0:c5:a3:72:bd:6f:6f:92:8f:be:43:
7d:82:08:38:d4:a8:b1:08:ca:d4:da:db:af:02:ad:5c:2c:98:
58:d8:d7:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuVBbQb0wSqBBqbmgfq0ifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjMwMTAxMTcxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTkyYmRjMGE4ODBmMzI2NjNhMTRlZmM0Yzk0ZjE4OGFlYzQ5YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxJpHrmDckWeYiUnjCEUyri8UAep
2Q2Z0wgKbPYMse0nZ3dProKw5Yana/+cz2p6LzkUbcxJ/T4y03E6+oEQ4VNerFi5
uKHHErgbR0hPU8xJhrS1ptM1FHdPhYXJ8iVjOaBVHn7uTh5OgzJXmFoH+XHi9t3z
hSdNe8ro8Lc7lT3YIuQZRvLfWGBZCv84O9DRu+iHLbVVVPOkIL7csICYCEjSHhXw
AZYfVzW7ZMTRu93+eGTE3XzX/Ey9v2m3lUd2xwYTGA4RlHgx1gta8LEVdUnjNMsh
LMQWZagZKzmEbi+0cfm89vvnO+fHoyboT2OesL2NC0Lt6UOOu5JyhEBOGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGSvcCogPMmY6FO/EyU8YiuxJxJMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvZ1pLOXdLaUE4eVpqb1U3OFRKVHhpSzdFbkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsrMA0G
CSqGSIb3DQEBCwUAA4IBAQCbhGDk5vAsR5hItUbxCEZE2yVabhTyx8L1b+6eQTXi
Xu33yeUa6rjp5N6aJHBy/LxQ8oEGC1Cu6scG/FDNzjsd9j7NcuAgZdlGb6m5B2Sx
uorDFmxu1SO5CE8hlkrbyC2rriwe1rBPW5szp5/m2g+R6dfg76nXOLwjVTTk8Rm3
HICxd322+GNIiq9LNZLSiNab7h47TLDGCpg/0hONId2pLI/cHDM/Ej4oqflCIM9j
MBMFAcJO1A2OgMtKGPYre/XZ18gqbpHnkrbnj0FydwStUh6ltVCZNumcTmEfMHhc
0MWjcr1vb5KPvkN9ggg41KixCMrU2tuvAq1cLJhY2Nei
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:02 2024 by rpki-client on console.sobornost.net