Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/o9OI3A2kRtvJKDu2Ybvz-fsEZY0.roa
File: o9OI3A2kRtvJKDu2Ybvz-fsEZY0.roa (raw, json)
Hash identifier: W76p3alGyQXKjerwbJyxl0DBz0IeYWK4JPVfsvw4+00=
Subject key identifier: A3:D3:88:DC:0D:A4:46:DB:C9:28:3B:B6:61:BB:F3:F9:FB:04:65:8D
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 0188192537F1ADB353E6C89F4B2AB777EC88
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/o9OI3A2kRtvJKDu2Ybvz-fsEZY0.roa
Signing time: Sun 14 May 2023 07:24:09 +0000
ROA not before: Sun 14 May 2023 07:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 185.205.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:25:37:f1:ad:b3:53:e6:c8:9f:4b:2a:b7:77:ec:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: May 14 07:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3d388dc0da446dbc9283bb661bbf3f9fb04658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:3c:38:2e:45:67:12:24:58:19:3e:99:ea:
5c:ff:01:2f:47:e4:f5:d4:02:16:13:e1:0f:5a:1b:
c1:23:54:53:2e:68:40:77:5a:07:c4:08:f8:bc:7f:
fd:79:dc:f0:e8:1c:98:69:d7:40:07:5e:af:e4:b5:
08:fe:7e:94:fc:ed:a6:30:10:82:0f:0a:ed:ec:81:
f8:c6:2d:6f:08:c8:2c:5e:03:b8:8d:38:bd:19:99:
40:45:fd:3a:6f:34:be:a9:03:1c:03:b0:fc:9b:4c:
fb:78:10:2c:95:1a:6a:1f:80:1d:96:9a:b7:18:91:
e9:21:05:65:ca:8d:8a:c1:28:65:99:65:64:3e:75:
f4:82:2c:92:ac:10:3d:31:3f:27:4f:6d:b8:a2:98:
2e:91:ae:f8:cc:1e:8a:48:97:62:c9:a0:05:e2:56:
16:67:d4:34:64:3d:50:b2:2f:dd:5d:71:93:19:53:
9f:7d:71:32:40:0f:e0:85:9f:48:7c:05:d3:0d:45:
f6:7d:0a:61:59:30:94:ea:1c:72:42:e0:2b:15:47:
55:dd:53:54:6f:2c:d7:0d:56:41:33:c1:e0:c4:47:
bc:dc:8f:d7:bd:d9:87:3f:8f:54:49:1c:9e:af:eb:
eb:06:7e:82:c2:9e:5a:eb:a3:13:8a:63:77:36:81:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:88:DC:0D:A4:46:DB:C9:28:3B:B6:61:BB:F3:F9:FB:04:65:8D
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/o9OI3A2kRtvJKDu2Ybvz-fsEZY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
19:dc:12:52:8f:e5:32:91:fa:09:3d:1b:8d:7d:9f:d4:2f:f1:
f8:0d:50:78:03:9a:f3:52:32:44:f8:46:7c:04:d6:23:bb:85:
4d:c2:f9:8f:7b:4a:6d:86:04:db:d0:d8:fb:c7:9c:60:72:3e:
e1:c1:73:3f:cd:f7:f4:9f:c3:c1:6f:16:05:62:6b:aa:e4:c4:
dd:73:fe:96:eb:3b:ac:f0:bc:20:03:bb:32:e0:1a:8b:35:4c:
b6:31:66:9c:dc:d3:e8:ea:e8:98:fa:5b:9c:48:7f:f1:18:fd:
6a:3d:f4:a7:f4:25:8d:07:22:d9:dd:2f:1a:86:00:38:87:69:
2c:d0:85:7d:91:cc:66:ef:1d:15:46:cb:45:11:a2:c9:8c:08:
86:2b:1b:bc:96:e5:fe:62:1a:7b:67:f5:c0:1c:e4:90:af:78:
2c:8e:cb:b2:82:0c:9c:78:af:70:7a:78:e9:db:87:24:46:36:
f4:f9:a4:6b:ee:a9:3d:90:4e:08:c8:51:4a:e8:10:42:d8:35:
9d:6b:1e:c1:bc:39:2f:2e:a5:59:4d:aa:d5:59:09:aa:52:68:
de:1e:a4:ce:8f:e4:89:1e:3c:8f:91:8b:1c:24:0b:55:7a:4a:
60:c0:69:92:a0:6b:8e:20:04:b2:4e:9d:95:53:37:2a:1c:d1:
67:6c:65:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgZJTfxrbNT5sifSyq3d+yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjMwNTE0MDcyNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2QzODhkYzBkYTQ0NmRiYzkyODNiYjY2MWJiZjNmOWZiMDQ2NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkc8OC5FZxIkWBk+mepc/wEvR+T1
1AIWE+EPWhvBI1RTLmhAd1oHxAj4vH/9edzw6ByYaddAB16v5LUI/n6U/O2mMBCC
Dwrt7IH4xi1vCMgsXgO4jTi9GZlARf06bzS+qQMcA7D8m0z7eBAslRpqH4Adlpq3
GJHpIQVlyo2KwShlmWVkPnX0giySrBA9MT8nT224opguka74zB6KSJdiyaAF4lYW
Z9Q0ZD1Qsi/dXXGTGVOffXEyQA/ghZ9IfAXTDUX2fQphWTCU6hxyQuArFUdV3VNU
byzXDVZBM8HgxEe83I/XvdmHP49USRyer+vrBn6Cwp5a66MTimN3NoFZjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPTiNwNpEbbySg7tmG78/n7BGWNMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvbzlPSTNBMmtSdHZKS0R1MllidnotZnNFWlkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0YMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ3BJSj+UykfoJPRuNfZ/UL/H4DVB4A5rzUjJE+EZ8
BNYju4VNwvmPe0pthgTb0Nj7x5xgcj7hwXM/zff0n8PBbxYFYmuq5MTdc/6W6zus
8LwgA7sy4BqLNUy2MWac3NPo6uiY+lucSH/xGP1qPfSn9CWNByLZ3S8ahgA4h2ks
0IV9kcxm7x0VRstFEaLJjAiGKxu8luX+Yhp7Z/XAHOSQr3gsjsuyggyceK9wenjp
24ckRjb0+aRr7qk9kE4IyFFK6BBC2DWdax7BvDkvLqVZTarVWQmqUmjeHqTOj+SJ
HjyPkYscJAtVekpgwGmSoGuOIASyTp2VUzcqHNFnbGW8
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net