Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UGg8hCZlq6xew1XIfXXKwhilP2c.roa
File: UGg8hCZlq6xew1XIfXXKwhilP2c.roa (raw, json)
Hash identifier: hTTSu2xI62+gU/+MloUSUzF0+XkPtJnImY2duEuGev8=
Subject key identifier: 50:68:3C:84:26:65:AB:AC:5E:C3:55:C8:7D:75:CA:C2:18:A5:3F:67
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315FE390F9B9BBD4567C0211AECF592
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UGg8hCZlq6xew1XIfXXKwhilP2c.roa
Signing time: Mon 02 Jan 2023 15:24:59 +0000
ROA not before: Mon 02 Jan 2023 15:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200533
IP address blocks: 85.14.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:fe:39:0f:9b:9b:bd:45:67:c0:21:1a:ec:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50683c842665abac5ec355c87d75cac218a53f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:da:df:7f:61:38:ce:b4:8c:11:ba:37:39:
9b:9c:90:fd:ab:52:4b:de:08:dd:52:d8:27:a3:6e:
49:6d:9b:00:68:74:75:30:95:ec:07:5d:59:28:20:
da:49:70:41:41:5e:23:13:25:7c:b8:17:7e:ee:3a:
64:b6:20:e1:44:26:79:43:02:ce:a2:93:a3:59:30:
10:ec:7f:5e:00:49:9b:30:ea:f9:62:a6:c9:10:45:
db:0e:8f:cd:df:48:9b:b9:bf:45:c2:08:b7:40:a8:
7d:57:d6:8b:c4:76:1d:01:7c:8a:b2:a8:b5:27:31:
71:00:0a:13:1c:9e:25:98:90:fd:0f:f7:bb:c7:d6:
53:98:d0:9f:c2:6d:e8:df:8f:37:8a:56:49:e7:ab:
16:c2:41:5a:25:a9:a2:91:f9:fa:76:d3:1b:13:23:
86:69:0d:a0:b5:80:f2:ba:90:4d:ff:f8:ab:79:25:
bc:e2:5b:29:1f:a4:43:dd:3c:6f:36:1e:38:63:bb:
9f:92:04:fb:f4:ad:23:8b:08:10:e0:e3:01:99:82:
9c:0c:7a:ee:c3:fa:13:7b:9b:a5:aa:96:6b:11:f0:
22:ce:9a:24:35:2e:e6:1d:97:a7:ba:3d:1f:db:67:
cb:74:31:5f:95:9a:aa:b3:f7:c5:0a:f0:66:3c:4d:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:3C:84:26:65:AB:AC:5E:C3:55:C8:7D:75:CA:C2:18:A5:3F:67
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UGg8hCZlq6xew1XIfXXKwhilP2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:15:2e:3e:e7:49:60:6b:1a:2a:48:87:e6:5e:0d:75:4e:67:
59:91:66:bd:1c:4e:3e:6a:73:96:70:dd:6d:40:01:04:74:e5:
23:42:39:15:77:47:ef:48:af:7b:20:6c:7f:df:fe:8f:4c:4f:
8a:52:c8:28:34:e2:fd:ef:11:a4:0a:bc:2b:5e:81:aa:3a:74:
41:bb:72:57:38:b8:fb:25:2f:de:bf:40:a9:ab:2e:49:86:22:
18:be:33:ff:bf:00:44:95:af:ba:77:ef:b3:d3:da:58:8b:a8:
97:cc:46:0e:a8:bb:2b:3f:2c:03:6a:87:61:0a:7f:f2:a0:50:
f7:b0:77:84:b5:8a:8e:94:20:b8:5e:7a:ea:d7:85:24:4a:29:
7b:70:8c:0d:a1:dd:68:4b:67:1b:b9:75:31:e1:78:24:bb:80:
5a:b7:f7:55:f1:7f:b8:d7:71:e8:7f:1a:b0:69:71:bd:c6:69:
4d:02:08:66:6f:e7:39:0e:53:53:35:eb:40:a2:98:88:b5:9d:
fa:4b:6f:97:4b:c4:4d:fa:61:77:e4:b9:3e:71:43:e7:4e:79:
80:cf:48:d5:37:5f:e3:a2:83:aa:64:e7:e6:47:9a:48:76:fb:
30:4c:43:81:42:0e:bc:64:b3:4d:f3:53:0a:eb:54:30:87:55:
ae:e7:69:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFf45D5ubvUVnwCEa7PWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjMwMTAyMTUyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDY4M2M4NDI2NjVhYmFjNWVjMzU1Yzg3ZDc1Y2FjMjE4YTUzZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaja339hOM60jBG6NzmbnJD9q1JL
3gjdUtgno25JbZsAaHR1MJXsB11ZKCDaSXBBQV4jEyV8uBd+7jpktiDhRCZ5QwLO
opOjWTAQ7H9eAEmbMOr5YqbJEEXbDo/N30ibub9Fwgi3QKh9V9aLxHYdAXyKsqi1
JzFxAAoTHJ4lmJD9D/e7x9ZTmNCfwm3o3483ilZJ56sWwkFaJamikfn6dtMbEyOG
aQ2gtYDyupBN//ireSW84lspH6RD3TxvNh44Y7ufkgT79K0jiwgQ4OMBmYKcDHru
w/oTe5ulqpZrEfAizpokNS7mHZenuj0f22fLdDFflZqqs/fFCvBmPE3NWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBoPIQmZausXsNVyH11ysIYpT9nMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvVUdnOGhDWmxxNnhldzFYSWZYWEt3aGlsUDJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQ4HMA0G
CSqGSIb3DQEBCwUAA4IBAQDKFS4+50lgaxoqSIfmXg11TmdZkWa9HE4+anOWcN1t
QAEEdOUjQjkVd0fvSK97IGx/3/6PTE+KUsgoNOL97xGkCrwrXoGqOnRBu3JXOLj7
JS/ev0Cpqy5JhiIYvjP/vwBEla+6d++z09pYi6iXzEYOqLsrPywDaodhCn/yoFD3
sHeEtYqOlCC4Xnrq14UkSil7cIwNod1oS2cbuXUx4Xgku4Bat/dV8X+413Hofxqw
aXG9xmlNAghmb+c5DlNTNetAopiItZ36S2+XS8RN+mF35Lk+cUPnTnmAz0jVN1/j
ooOqZOfmR5pIdvswTEOBQg68ZLNN81MK61Qwh1Wu52nP
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net