Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/0Koe4tj1xuWEGCxc9PAwzn-0c14.roa
File: 0Koe4tj1xuWEGCxc9PAwzn-0c14.roa (raw, json)
Hash identifier: myDJE/W164SFXG5SYNqdgpni81v0xvC3EqLFkofkqOY=
Subject key identifier: D0:AA:1E:E2:D8:F5:C6:E5:84:18:2C:5C:F4:F0:30:CE:7F:B4:73:5E
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 018572A7F56D1365105F8794CB8469854C20
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/0Koe4tj1xuWEGCxc9PAwzn-0c14.roa
Signing time: Mon 02 Jan 2023 13:24:48 +0000
ROA not before: Mon 02 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1770
IP address blocks: 195.177.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f5:6d:13:65:10:5f:87:94:cb:84:69:85:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jan 2 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0aa1ee2d8f5c6e584182c5cf4f030ce7fb4735e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:5c:bf:ec:04:16:3e:6c:53:4b:39:92:10:
93:08:6c:d6:53:c1:32:20:85:fd:7e:94:89:f5:c8:
3e:f4:17:44:60:37:cd:14:c7:28:2a:be:1b:bc:cb:
42:18:ce:ab:5f:d5:e4:47:61:9d:3b:f2:21:46:3e:
48:a8:48:4e:26:91:38:cd:49:65:b9:29:0d:a6:5a:
32:de:7d:2f:e1:63:3a:cc:5c:5f:4c:68:f3:41:d5:
85:ad:c9:4c:68:04:76:ee:10:c3:f6:d3:20:53:d9:
60:56:13:d9:b9:8a:5a:aa:9e:df:f2:56:73:11:1f:
26:26:38:8d:26:ec:60:eb:22:28:0c:9a:0e:ab:c1:
3e:32:2f:0a:bf:0a:c6:41:ad:72:65:18:9c:1f:15:
f0:ab:4f:25:39:b5:29:47:02:5d:12:e6:ec:d8:cf:
7e:7e:35:cd:e0:fc:5d:81:7b:a7:23:47:6a:bb:95:
b2:87:8f:52:d0:c8:83:3d:d6:5f:61:1a:bd:c9:e0:
e2:e5:6d:af:f8:d2:46:c2:9a:97:76:c1:7b:37:9c:
83:6e:94:5d:48:58:43:a3:77:fd:d9:c4:07:27:a3:
99:b5:e7:9c:bc:7a:41:96:3c:4e:32:21:01:47:ef:
be:29:50:63:08:cf:26:a0:77:ec:a8:4d:ff:66:b1:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:1E:E2:D8:F5:C6:E5:84:18:2C:5C:F4:F0:30:CE:7F:B4:73:5E
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/0Koe4tj1xuWEGCxc9PAwzn-0c14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:16:1a:64:da:d1:f4:29:46:05:4f:3e:a5:1d:49:a4:15:a5:
b9:d9:18:25:a8:dc:99:46:c8:06:0c:2d:c3:19:68:d5:d4:3e:
23:7b:73:9a:8c:63:b9:80:1a:cd:4c:f9:bb:be:cb:75:37:fd:
a5:ba:b9:de:43:a9:4b:81:58:e6:e3:92:34:bd:f0:d6:83:fe:
d7:e7:2c:fb:7c:6b:4f:bf:87:50:cb:cb:f4:15:95:fe:45:04:
09:ec:af:e5:ed:ff:b1:f5:e6:7d:5c:a0:6e:2e:ec:23:ce:92:
bc:91:25:27:e9:dd:b6:3c:11:3c:a2:27:ce:4f:08:61:29:35:
ec:e7:af:d9:dc:09:5a:66:a6:c8:a7:46:a0:8a:5b:42:73:b7:
1a:ed:a2:dc:c2:de:d8:27:8c:27:54:76:65:36:df:63:e9:3e:
9a:e6:3e:98:c0:d7:a7:74:31:c7:4e:f5:c7:fc:20:57:ea:05:
40:8c:c7:c4:2f:8d:af:1b:bd:4b:3d:45:63:89:ae:82:86:ff:
12:cb:05:3e:ee:aa:52:ee:c6:10:0e:ce:ea:77:4b:0c:14:68:
9d:ec:c4:c5:a3:b9:97:6a:ac:14:4f:a7:32:6c:55:97:07:33:
3a:9f:97:00:1c:00:fb:2c:9c:a7:d0:21:f5:2b:2c:4e:c8:af:
44:eb:51:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyp/VtE2UQX4eUy4RphUwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4
NmQyYTgwHhcNMjMwMTAyMTMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGFhMWVlMmQ4ZjVjNmU1ODQxODJjNWNmNGYwMzBjZTdmYjQ3MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYpcv+wEFj5sU0s5khCTCGzWU8Ey
IIX9fpSJ9cg+9BdEYDfNFMcoKr4bvMtCGM6rX9XkR2GdO/IhRj5IqEhOJpE4zUll
uSkNploy3n0v4WM6zFxfTGjzQdWFrclMaAR27hDD9tMgU9lgVhPZuYpaqp7f8lZz
ER8mJjiNJuxg6yIoDJoOq8E+Mi8KvwrGQa1yZRicHxXwq08lObUpRwJdEubs2M9+
fjXN4PxdgXunI0dqu5Wyh49S0MiDPdZfYRq9yeDi5W2v+NJGwpqXdsF7N5yDbpRd
SFhDo3f92cQHJ6OZteecvHpBljxOMiEBR+++KVBjCM8moHfsqE3/ZrERdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCqHuLY9cblhBgsXPTwMM5/tHNeMB8GA1UdIwQY
MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt
NDQ1N2ViZWE1YTQ1LzEvMEtvZTR0ajF4dVdFR0N4YzlQQXd6bi0wYzE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1
LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7HKMA0G
CSqGSIb3DQEBCwUAA4IBAQAsFhpk2tH0KUYFTz6lHUmkFaW52RglqNyZRsgGDC3D
GWjV1D4je3OajGO5gBrNTPm7vst1N/2lurneQ6lLgVjm45I0vfDWg/7X5yz7fGtP
v4dQy8v0FZX+RQQJ7K/l7f+x9eZ9XKBuLuwjzpK8kSUn6d22PBE8oifOTwhhKTXs
56/Z3AlaZqbIp0agiltCc7ca7aLcwt7YJ4wnVHZlNt9j6T6a5j6YwNendDHHTvXH
/CBX6gVAjMfEL42vG71LPUVjia6Chv8SywU+7qpS7sYQDs7qd0sMFGid7MTFo7mX
aqwUT6cybFWXBzM6n5cAHAD7LJyn0CH1KyxOyK9E61GJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:33 2024 by rpki-client on console.sobornost.net