Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/evPbM1fMPFSMhKPvFntVfvSVPTY.roa
File: evPbM1fMPFSMhKPvFntVfvSVPTY.roa (raw, json)
Hash identifier: W6OFxUsv54ZJ9ww/T0xMc6ispLEMRCkiRhZxYw+81Kw=
Subject key identifier: 7A:F3:DB:33:57:CC:3C:54:8C:84:A3:EF:16:7B:55:7E:F4:95:3D:36
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41DBE9401CEC3E36C8C9559DACFB2C
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/evPbM1fMPFSMhKPvFntVfvSVPTY.roa
Signing time: Sun 01 Jan 2023 16:54:47 +0000
ROA not before: Sun 01 Jan 2023 16:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48881
IP address blocks: 188.212.111.0/24 maxlen: 24
37.156.7.0/24 maxlen: 24
46.102.254.0/24 maxlen: 24
93.113.28.0/24 maxlen: 24
91.250.247.0/24 maxlen: 24
188.209.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:db:e9:40:1c:ec:3e:36:c8:c9:55:9d:ac:fb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af3db3357cc3c548c84a3ef167b557ef4953d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:15:fa:00:30:3c:5a:99:6f:85:7c:c9:f4:
a4:bc:28:5d:d4:b9:f4:67:e3:97:61:0e:27:fc:49:
5c:fc:c2:84:05:e7:22:fb:d8:01:4c:fe:83:5f:33:
a2:4f:ce:2a:a4:da:0d:cb:f7:19:3b:e2:21:d7:ac:
eb:dd:49:4e:b7:f5:4d:39:be:49:3f:ee:2d:a8:2a:
ee:26:d7:6c:bf:58:1d:c9:11:ce:63:6a:b5:d0:47:
c1:74:e4:b8:89:d0:28:ae:a2:b2:36:94:48:65:7c:
a1:07:b6:d1:d5:d7:0e:5f:a5:80:12:3c:41:ae:ae:
fe:2b:04:35:a2:d4:49:a4:17:2f:89:d0:a9:ac:37:
8c:d8:fc:bc:6c:28:f9:1a:05:71:a2:dd:39:5f:6b:
a1:f3:a4:8e:ed:09:c5:6b:27:da:9f:a9:b3:9b:e4:
fd:26:a4:c6:3b:e6:f3:36:a8:7c:a5:7b:d3:9d:33:
78:99:68:c4:b2:7d:b7:68:f1:6b:ca:77:a6:b2:f3:
8a:19:33:80:78:fa:42:2a:fb:b4:19:35:54:a5:c4:
00:79:b4:02:88:77:66:26:f6:ab:6f:55:cf:fe:b1:
03:47:ff:fb:4e:b7:7b:5e:c7:02:6d:f4:8a:80:b0:
a4:f8:0c:07:2f:9c:57:a2:df:8a:7e:71:2c:ce:5b:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F3:DB:33:57:CC:3C:54:8C:84:A3:EF:16:7B:55:7E:F4:95:3D:36
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/evPbM1fMPFSMhKPvFntVfvSVPTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.7.0/24
46.102.254.0/24
91.250.247.0/24
93.113.28.0/24
188.209.212.0/24
188.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:28:46:1c:e5:d0:38:5c:c3:1c:63:af:38:96:77:21:d8:6e:
0d:6d:85:82:98:01:64:9c:6b:34:ad:31:40:d6:db:5c:89:43:
95:4d:00:c5:68:d5:6e:12:33:12:2c:7d:fd:99:b9:6e:4d:27:
d7:b4:53:ff:2a:ea:f2:66:fa:42:dd:a6:ae:cf:ed:d0:5f:44:
63:01:13:a6:b8:31:1d:c2:1a:bb:d2:ca:9a:6f:5e:70:ba:4a:
ea:04:d8:b9:e8:77:4c:1b:83:24:38:1c:2c:c0:3e:d9:9a:3f:
08:a1:36:a8:21:52:f6:20:e9:e3:2c:61:9e:a4:ed:f9:1a:da:
84:18:15:c5:67:dc:b5:c8:37:71:bb:2e:37:dd:d8:b1:95:68:
7a:0d:c3:0a:a3:4a:b2:b6:65:c4:d2:fd:47:2b:ca:79:ae:a3:
a9:e2:f1:4d:8b:c7:fb:7d:74:ed:d2:c7:03:fe:cb:c3:11:ae:
ac:f4:d0:9f:05:7d:81:12:32:18:94:e4:5f:4f:1a:ec:35:f6:
a9:6a:7f:60:21:ea:ec:9f:45:79:e0:80:5a:0a:9d:43:39:f1:
4b:ad:d4:5c:dd:17:f5:cf:37:9f:5a:13:da:e2:d8:da:56:9d:
96:33:20:99:89:d7:2e:7a:57:c8:fe:69:34:5e:9c:70:f3:42:
36:ed:5c:48
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVuQdvpQBzsPjbIyVWdrPssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjMwMTAxMTY1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWYzZGIzMzU3Y2MzYzU0OGM4NGEzZWYxNjdiNTU3ZWY0OTUzZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWQV+gAwPFqZb4V8yfSkvChd1Ln0
Z+OXYQ4n/Elc/MKEBeci+9gBTP6DXzOiT84qpNoNy/cZO+Ih16zr3UlOt/VNOb5J
P+4tqCruJtdsv1gdyRHOY2q10EfBdOS4idAorqKyNpRIZXyhB7bR1dcOX6WAEjxB
rq7+KwQ1otRJpBcvidCprDeM2Py8bCj5GgVxot05X2uh86SO7QnFayfan6mzm+T9
JqTGO+bzNqh8pXvTnTN4mWjEsn23aPFrynemsvOKGTOAePpCKvu0GTVUpcQAebQC
iHdmJvarb1XP/rEDR//7Trd7XscCbfSKgLCk+AwHL5xXot+KfnEszlsc1QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHrz2zNXzDxUjISj7xZ7VX70lT02MB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvZXZQYk0xZk1QRlNNaEtQdkZudFZmdlNWUFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJZwHAwQA
Lmb+AwQAW/r3AwQAXXEcAwQAvNHUAwQAvNRvMA0GCSqGSIb3DQEBCwUAA4IBAQBJ
KEYc5dA4XMMcY684lnch2G4NbYWCmAFknGs0rTFA1ttciUOVTQDFaNVuEjMSLH39
mbluTSfXtFP/KuryZvpC3aauz+3QX0RjAROmuDEdwhq70sqab15wukrqBNi56HdM
G4MkOBwswD7Zmj8IoTaoIVL2IOnjLGGepO35GtqEGBXFZ9y1yDdxuy433dixlWh6
DcMKo0qytmXE0v1HK8p5rqOp4vFNi8f7fXTt0scD/svDEa6s9NCfBX2BEjIYlORf
TxrsNfapan9gIersn0V54IBaCp1DOfFLrdRc3Rf1zzefWhPa4tjaVp2WMyCZidcu
elfI/mk0Xpxw80I27VxI
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net