Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1-zIUNAeZz6aRHDGyUdol3-uc5yo.roa
File: 1-zIUNAeZz6aRHDGyUdol3-uc5yo.roa (raw, json)
Hash identifier: SxK4OzNlPh+l9JkXtk9oMkHVQLzXtjykSpQMk3D706g=
Subject key identifier: FB:32:14:34:07:99:CF:A6:91:1C:31:B2:51:DA:25:DF:EB:9C:E7:2A
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 01857371891E336762A72D2499848CE6571A
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1-zIUNAeZz6aRHDGyUdol3-uc5yo.roa
Signing time: Mon 02 Jan 2023 17:04:58 +0000
ROA not before: Mon 02 Jan 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62141
IP address blocks: 185.38.92.0/22 maxlen: 22
2a04:74c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:89:1e:33:67:62:a7:2d:24:99:84:8c:e6:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Jan 2 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3214340799cfa6911c31b251da25dfeb9ce72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:c0:4c:a8:b5:d5:4c:54:99:86:d5:aa:fa:
d8:ad:6c:4c:81:5c:94:1c:35:e0:a4:70:95:bb:a0:
1c:e8:d0:5a:3f:cb:2e:a1:94:e0:f1:9d:a1:f8:48:
ee:ab:23:b2:5a:65:8c:1f:11:34:5d:f0:11:90:47:
09:ad:e3:9f:e7:98:d1:90:65:a5:cf:7c:1d:bd:a3:
0e:86:16:fc:49:9e:c8:45:c7:6f:44:8c:54:4a:19:
43:8d:77:19:aa:c9:05:2d:a4:61:b9:4a:e8:8e:5f:
f0:5c:b4:ea:bf:73:2f:74:d6:f4:40:fa:8c:02:18:
f4:f4:3d:b9:74:b5:f0:6b:68:bc:44:5d:bd:e4:c7:
ff:30:46:ea:05:f6:28:1a:2a:80:b9:25:48:ec:ad:
76:4e:3b:6c:3d:e0:d0:67:d8:10:a5:e3:82:7c:05:
5d:62:b0:80:8c:5b:36:fb:e3:71:f5:b7:6c:78:c2:
7f:73:23:cb:06:7d:9a:ba:8a:8f:2d:55:ff:3f:ce:
7e:ff:53:49:f7:22:4f:20:27:ee:67:b3:d0:61:d3:
4c:ce:06:c1:6b:bd:4c:b8:2b:c2:55:2d:02:33:c0:
66:78:30:4f:52:54:a4:82:5b:81:26:6d:1c:ab:b2:
bb:d6:5d:0c:06:14:80:c7:b4:0b:ca:ba:d3:35:6a:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:14:34:07:99:CF:A6:91:1C:31:B2:51:DA:25:DF:EB:9C:E7:2A
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1-zIUNAeZz6aRHDGyUdol3-uc5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.92.0/22
IPv6:
2a04:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:42:2e:f5:65:39:31:a5:f8:ac:71:d4:29:ce:6c:93:6f:3b:
ee:2d:9c:5e:4f:b9:0e:c9:77:56:93:6a:6b:06:f4:89:cc:02:
b3:e8:7d:11:ca:b0:de:18:66:96:ea:9d:a2:c7:d7:b2:7e:5e:
a1:fd:a7:07:93:41:de:f7:8e:89:8c:bf:2a:ac:45:1a:78:3f:
88:e8:fe:f1:70:26:ba:e2:bc:5a:9b:ff:75:52:83:1f:0d:fa:
7a:a8:72:a8:d0:b2:8b:48:02:b8:42:64:42:0d:0a:12:5a:99:
24:8e:29:cd:d4:9f:19:5c:72:2d:1d:3d:06:2a:6c:0b:d2:08:
29:8e:2a:e4:4d:0e:92:6c:75:c4:02:4d:36:41:4a:4e:02:b3:
bf:b4:33:72:97:f4:c3:f2:c5:7a:58:a1:93:15:ad:72:6f:eb:
85:45:73:e4:db:6d:b4:16:5f:e5:40:ee:f0:a5:e7:56:5f:80:
b3:ee:f3:c2:1d:d0:c2:c3:af:71:97:0f:f1:1e:59:87:a7:8e:
22:8a:76:28:c5:67:99:11:f7:41:5f:6c:9b:12:54:41:a2:6b:
49:1c:47:11:22:fd:56:d6:4d:7f:62:d3:3f:38:33:cb:56:50:
69:f1:b8:e2:d6:be:06:3c:1f:f2:7e:9c:e2:66:97:fe:ed:cc:
b6:cc:86:ba
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVzcYkeM2dipy0kmYSM5lcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz
ZmIyOGIwHhcNMjMwMTAyMTcwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjMyMTQzNDA3OTljZmE2OTExYzMxYjI1MWRhMjVkZmViOWNlNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeHATKi11UxUmYbVqvrYrWxMgVyU
HDXgpHCVu6Ac6NBaP8suoZTg8Z2h+EjuqyOyWmWMHxE0XfARkEcJreOf55jRkGWl
z3wdvaMOhhb8SZ7IRcdvRIxUShlDjXcZqskFLaRhuUrojl/wXLTqv3MvdNb0QPqM
Ahj09D25dLXwa2i8RF295Mf/MEbqBfYoGiqAuSVI7K12TjtsPeDQZ9gQpeOCfAVd
YrCAjFs2++Nx9bdseMJ/cyPLBn2auoqPLVX/P85+/1NJ9yJPICfuZ7PQYdNMzgbB
a71MuCvCVS0CM8BmeDBPUlSkgluBJm0cq7K71l0MBhSAx7QLyrrTNWqXOwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPsyFDQHmc+mkRwxslHaJd/rnOcqMB8GA1UdIwQY
MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt
N2Y2NzQ0MmY5ZjMyLzEvMS16SVVOQWVaejZhUkhER3lVZG9sMy11YzV5by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmUvMDY4MWJjLWUyNzgtNDZjNS1iMWUzLTdmNjc0NDJmOWYz
Mi8xL2IyV3ktb3U2MWxBY2ZTSHZSMTNFUlVFX3Nvcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkmXDAN
BAIAAjAHAwUDKgR0wDANBgkqhkiG9w0BAQsFAAOCAQEAI0Iu9WU5MaX4rHHUKc5s
k2877i2cXk+5Dsl3VpNqawb0icwCs+h9Ecqw3hhmluqdosfXsn5eof2nB5NB3veO
iYy/KqxFGng/iOj+8XAmuuK8Wpv/dVKDHw36eqhyqNCyi0gCuEJkQg0KElqZJI4p
zdSfGVxyLR09BipsC9IIKY4q5E0Okmx1xAJNNkFKTgKzv7Qzcpf0w/LFelihkxWt
cm/rhUVz5NtttBZf5UDu8KXnVl+As+7zwh3QwsOvcZcP8R5Zh6eOIop2KMVnmRH3
QV9smxJUQaJrSRxHESL9VtZNf2LTPzgzy1ZQafG44ta+Bjwf8n6c4maX/u3MtsyG
ug==
-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:10 2024 by rpki-client on console.sobornost.net