Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/J1RXvZL44VJiEOmPjDGKsYl_T6I.roa
File: J1RXvZL44VJiEOmPjDGKsYl_T6I.roa (raw, json)
Hash identifier: DX9EO123i3tyDjuqT5nbmd+z7B6OZzg6rHFHQw4dOsY=
Subject key identifier: 27:54:57:BD:92:F8:E1:52:62:10:E9:8F:8C:31:8A:B1:89:7F:4F:A2
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0188F65DB7BAFE7C988864DA4F689ABAC6D4
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/J1RXvZL44VJiEOmPjDGKsYl_T6I.roa
Signing time: Mon 26 Jun 2023 06:21:56 +0000
ROA not before: Mon 26 Jun 2023 06:21:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8697
IP address blocks: 185.98.220.0/22 maxlen: 24
217.23.32.0/20 maxlen: 24
194.165.128.0/19 maxlen: 24
213.186.160.0/19 maxlen: 24
94.249.0.0/17 maxlen: 24
37.202.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:5d:b7:ba:fe:7c:98:88:64:da:4f:68:9a:ba:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Jun 26 06:21:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275457bd92f8e1526210e98f8c318ab1897f4fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:38:ad:0d:ab:1b:85:92:24:97:c1:45:11:
ee:1d:b2:63:97:df:22:55:fe:f1:7a:fb:ca:10:8e:
59:bb:a2:05:3a:b9:03:5c:f7:7f:5d:2c:d5:5d:85:
09:9c:0c:54:a0:a7:6b:92:2a:03:8d:d1:c7:b6:7e:
c0:46:f7:1d:b8:e1:34:03:ab:61:8a:1d:5f:6c:ac:
63:33:e7:8f:3a:5f:11:2a:c2:a5:83:e7:b6:93:4b:
21:56:2b:09:f1:0a:4c:3e:f2:2e:bc:59:45:87:c2:
71:b9:c9:64:ed:12:a0:bc:f5:99:1f:c5:87:b6:33:
5a:56:07:14:42:be:e2:f3:3d:cd:fa:48:d5:e9:d1:
1e:0e:b2:97:5e:af:c0:fe:33:95:51:ed:64:15:5b:
5b:12:de:a6:af:ca:6e:c8:bd:39:e4:cb:72:20:b9:
99:1d:62:00:07:23:e8:31:da:0b:45:10:00:63:de:
46:a9:b0:f6:b2:c1:59:11:89:1e:4d:7f:9d:75:76:
98:49:7a:ec:bf:04:7b:9b:6e:a9:30:9a:8a:b8:46:
4e:b5:44:b2:8f:13:fd:dc:2f:09:53:7f:51:3c:6c:
dc:3b:3f:5a:b7:c8:fa:4f:70:20:b6:4e:e4:66:4c:
39:fd:31:8b:50:af:40:ae:0a:cc:4a:6c:62:0c:a0:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:57:BD:92:F8:E1:52:62:10:E9:8F:8C:31:8A:B1:89:7F:4F:A2
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/J1RXvZL44VJiEOmPjDGKsYl_T6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
94.249.0.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:32:03:1b:37:82:97:9f:1b:1c:56:5c:2c:43:a9:cf:81:29:
32:d9:a2:e4:b7:7c:c0:52:9c:a9:e8:93:82:cf:8c:46:50:2b:
09:a9:eb:23:53:87:ce:a0:3f:ea:c7:86:04:b4:57:2a:3b:6b:
cf:20:96:82:ed:12:b9:02:83:8c:d8:cf:8b:41:c0:f1:85:e8:
af:29:23:a6:cd:49:78:80:a7:3b:a8:56:89:68:04:9c:da:ee:
75:a7:f4:53:6e:48:32:22:d3:07:de:0a:b3:fb:ff:10:66:e1:
b4:56:76:c9:aa:63:cc:2b:c7:b3:14:1e:cd:93:f2:51:1c:20:
89:11:3e:98:32:9f:5c:1e:17:6e:2b:cb:23:43:62:43:8a:13:
88:54:51:f7:37:ad:50:ad:55:7e:96:cf:cb:92:da:d3:ab:ac:
59:73:42:f5:c4:f5:5c:7a:ff:f8:88:12:cd:c6:aa:c3:18:8a:
a7:08:8d:62:f8:fe:13:b9:89:3d:4f:87:a4:a5:76:7a:71:bf:
e5:df:ba:94:6a:4a:e1:00:73:b7:ff:88:22:dd:bd:03:64:fe:
44:31:12:67:fa:56:08:7f:04:23:0a:4f:46:14:e2:1d:6a:b8:
4e:c1:81:a4:7d:b1:61:cb:44:00:91:4a:60:54:3c:df:95:71:
8f:4f:00:cd
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYj2Xbe6/nyYiGTaT2iausbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz
NmNiYzYwHhcNMjMwNjI2MDYyMTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzU0NTdiZDkyZjhlMTUyNjIxMGU5OGY4YzMxOGFiMTg5N2Y0ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk884rQ2rG4WSJJfBRRHuHbJjl98i
Vf7xevvKEI5Zu6IFOrkDXPd/XSzVXYUJnAxUoKdrkioDjdHHtn7ARvcduOE0A6th
ih1fbKxjM+ePOl8RKsKlg+e2k0shVisJ8QpMPvIuvFlFh8Jxuclk7RKgvPWZH8WH
tjNaVgcUQr7i8z3N+kjV6dEeDrKXXq/A/jOVUe1kFVtbEt6mr8puyL055MtyILmZ
HWIAByPoMdoLRRAAY95GqbD2ssFZEYkeTX+ddXaYSXrsvwR7m26pMJqKuEZOtUSy
jxP93C8JU39RPGzcOz9at8j6T3Agtk7kZkw5/TGLUK9ArgrMSmxiDKDN5QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCdUV72S+OFSYhDpj4wxirGJf0+iMB8GA1UdIwQY
MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt
OGI4ZDcyMTcyMDkwLzEvSjFSWHZaTDQ0VkppRU9tUGpER0tzWWxfVDZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw
LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGJcpAAwQH
XvkAAwQCuWLcAwQFwqWAAwQF1bqgAwQE2RcgMA0GCSqGSIb3DQEBCwUAA4IBAQAO
MgMbN4KXnxscVlwsQ6nPgSky2aLkt3zAUpyp6JOCz4xGUCsJqesjU4fOoD/qx4YE
tFcqO2vPIJaC7RK5AoOM2M+LQcDxheivKSOmzUl4gKc7qFaJaASc2u51p/RTbkgy
ItMH3gqz+/8QZuG0VnbJqmPMK8ezFB7Nk/JRHCCJET6YMp9cHhduK8sjQ2JDihOI
VFH3N61QrVV+ls/LktrTq6xZc0L1xPVcev/4iBLNxqrDGIqnCI1i+P4TuYk9T4ek
pXZ6cb/l37qUakrhAHO3/4gi3b0DZP5EMRJn+lYIfwQjCk9GFOIdarhOwYGkfbFh
y0QAkUpgVDzflXGPTwDN
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net