Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/P8cB-JVx7mVoBtWGe0velTBoAK8.roa
File: P8cB-JVx7mVoBtWGe0velTBoAK8.roa (raw, json)
Hash identifier: N2lL0SJi/zwa9O/5Uuf8tjsZ/sY6Dg9mzpw/1VrfCQE=
Subject key identifier: 3F:C7:01:F8:95:71:EE:65:68:06:D5:86:7B:4B:DE:95:30:68:00:AF
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 0189631ED808ECBB24E0D8D666431435968E
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/P8cB-JVx7mVoBtWGe0velTBoAK8.roa
Signing time: Mon 17 Jul 2023 09:11:53 +0000
ROA not before: Mon 17 Jul 2023 09:11:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34432
IP address blocks: 91.151.23.0/24 maxlen: 24
37.228.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:1e:d8:08:ec:bb:24:e0:d8:d6:66:43:14:35:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: Jul 17 09:11:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fc701f89571ee656806d5867b4bde95306800af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:2e:35:25:5d:17:d8:4d:ba:50:78:72:2c:
eb:ff:e9:3c:3c:e0:8a:7a:6d:32:59:9e:7d:9f:ed:
16:8b:6f:38:e2:3d:f4:a9:2c:e8:02:40:6c:82:fe:
00:bc:d8:f6:ff:db:98:fc:4e:c2:0a:33:81:2e:ea:
2c:59:3a:d8:6c:c6:23:0c:95:5c:81:bc:a6:ba:b0:
df:ee:e0:50:c5:6f:c3:3d:e3:20:ae:11:97:15:09:
62:c6:6b:00:83:d3:3a:e8:4e:b1:23:04:e3:40:c5:
8a:3a:c2:b6:d6:83:ae:3d:d7:03:c8:58:91:4c:2d:
69:78:bb:7c:90:99:f7:9a:ba:21:98:c4:3b:89:68:
35:78:8d:fb:1f:10:b9:4a:03:5b:88:05:de:d4:1e:
d5:5d:f9:fc:63:d0:ac:4c:48:0d:46:27:17:62:74:
90:9c:0d:3e:a1:e9:1a:c2:11:45:f8:d7:c0:06:3b:
55:b2:e7:88:d4:a4:c4:64:3b:de:f8:d7:95:af:0f:
d3:73:58:ff:20:18:6c:4c:fd:c0:e2:a7:89:23:1e:
47:3a:48:8f:36:5f:cb:dd:f6:e5:76:7d:ff:cb:eb:
17:07:e8:53:38:f6:7a:fb:d2:43:36:78:1b:cb:bd:
7f:0d:01:7a:ee:9f:2f:3e:0f:8f:dc:68:0a:c3:be:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:01:F8:95:71:EE:65:68:06:D5:86:7B:4B:DE:95:30:68:00:AF
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/P8cB-JVx7mVoBtWGe0velTBoAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.157.0/24
91.151.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:9b:87:69:82:4b:c5:45:f0:17:06:1b:c6:27:7f:5d:f1:
8e:6e:1e:42:b5:05:ff:74:58:e0:63:e9:3d:48:75:42:62:86:
92:4e:8f:3b:17:d5:e6:bf:4d:a4:af:66:7b:96:b7:70:88:06:
5f:08:08:1a:4f:6a:f0:9e:ed:5d:1b:85:3f:5e:c7:9f:27:e1:
eb:c4:60:b6:ce:96:92:76:ce:e4:b4:37:18:ff:49:2d:ad:0e:
21:ee:12:60:cb:4d:db:a3:20:40:2d:a5:fc:3c:cc:a8:18:60:
2f:49:2f:cd:98:86:ce:68:ab:6e:4b:02:44:fa:2c:e5:65:76:
0d:06:21:7d:c4:da:50:54:39:e2:e4:be:c7:0b:02:60:4b:88:
13:57:a4:71:9b:fb:64:8a:0e:22:48:ef:e3:32:52:19:1e:ae:
1f:57:6f:1c:57:4e:90:bf:d3:63:2b:27:65:b4:74:6d:fa:27:
00:b7:e8:f3:47:7d:51:64:72:da:91:d4:8a:5b:51:22:43:f6:
98:ef:22:81:8a:46:87:4d:f8:e3:b2:94:67:8a:e0:c5:f4:c0:
0d:43:6d:ad:a7:4e:03:4d:29:b6:96:12:4d:73:1e:67:f0:15:
f8:af:81:81:64:20:06:12:af:16:0f:ac:29:0b:1c:23:9d:8c:
70:0d:5b:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYljHtgI7Lsk4NjWZkMUNZaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTc4NmU0ODA5MzczYzE5ODU0NTU4NThjNmIwMmIzMGE3
MWFkMWIwHhcNMjMwNzE3MDkxMTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmM3MDFmODk1NzFlZTY1NjgwNmQ1ODY3YjRiZGU5NTMwNjgwMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh8uNSVdF9hNulB4cizr/+k8POCK
em0yWZ59n+0Wi2844j30qSzoAkBsgv4AvNj2/9uY/E7CCjOBLuosWTrYbMYjDJVc
gbymurDf7uBQxW/DPeMgrhGXFQlixmsAg9M66E6xIwTjQMWKOsK21oOuPdcDyFiR
TC1peLt8kJn3mrohmMQ7iWg1eI37HxC5SgNbiAXe1B7VXfn8Y9CsTEgNRicXYnSQ
nA0+oekawhFF+NfABjtVsueI1KTEZDve+NeVrw/Tc1j/IBhsTP3A4qeJIx5HOkiP
Nl/L3fbldn3/y+sXB+hTOPZ6+9JDNngby71/DQF67p8vPg+P3GgKw74i0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD/HAfiVce5laAbVhntL3pUwaACvMB8GA1UdIwQY
MBaAFKTnhuSAk3PBmFRVhYxrArMKca0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9lRzVJQ1RjOEdZVkZXRmpHc0Nzd3B4clJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zY2UzOTUtNjdkYS00MTYxLWFlZjEt
ZjY2OTdiZmQyZDRmLzEvUDhjQi1KVng3bVZvQnRXR2UwdmVsVEJvQUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zY2UzOTUtNjdkYS00MTYxLWFlZjEtZjY2OTdiZmQyZDRm
LzEvcE9lRzVJQ1RjOEdZVkZXRmpHc0Nzd3B4clJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeSdAwQA
W5cXMA0GCSqGSIb3DQEBCwUAA4IBAQBe2ZuHaYJLxUXwFwYbxid/XfGObh5CtQX/
dFjgY+k9SHVCYoaSTo87F9Xmv02kr2Z7lrdwiAZfCAgaT2rwnu1dG4U/XsefJ+Hr
xGC2zpaSds7ktDcY/0ktrQ4h7hJgy03boyBALaX8PMyoGGAvSS/NmIbOaKtuSwJE
+izlZXYNBiF9xNpQVDni5L7HCwJgS4gTV6Rxm/tkig4iSO/jMlIZHq4fV28cV06Q
v9NjKydltHRt+icAt+jzR31RZHLakdSKW1EiQ/aY7yKBikaHTfjjspRniuDF9MAN
Q22tp04DTSm2lhJNcx5n8BX4r4GBZCAGEq8WD6wpCxwjnYxwDVuf
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:50 2024 by rpki-client on console.sobornost.net