Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xrjwyBcN1WXHvGMS9Ll6mQ0o0_g.roa
File: xrjwyBcN1WXHvGMS9Ll6mQ0o0_g.roa (raw, json)
Hash identifier: Y/GUPuhXKGdPFJ2GJd8DDvxhmJfpAWxuB+OzKTGL0w4=
Subject key identifier: C6:B8:F0:C8:17:0D:D5:65:C7:BC:63:12:F4:B9:7A:99:0D:28:D3:F8
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315FD0F67C72727A3ED23A02EBB7A13
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xrjwyBcN1WXHvGMS9Ll6mQ0o0_g.roa
Signing time: Mon 02 Jan 2023 15:24:58 +0000
ROA not before: Mon 02 Jan 2023 15:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197741
IP address blocks: 82.119.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:fd:0f:67:c7:27:27:a3:ed:23:a0:2e:bb:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6b8f0c8170dd565c7bc6312f4b97a990d28d3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:77:6a:d9:f3:e5:42:54:f5:f7:6c:88:88:
5f:53:fc:a1:5a:24:a1:3c:11:e7:b9:25:c8:fd:f5:
c2:30:5a:75:52:72:2b:8d:7b:b0:d9:d1:e6:51:02:
97:88:ce:e4:0e:90:7d:6b:c3:6d:2b:c8:19:2b:a3:
1c:57:55:6f:10:08:b4:62:b0:da:5a:a5:f8:53:60:
6c:e3:eb:ed:e8:7c:ee:7e:c8:67:46:54:a4:f2:26:
e1:fe:dc:6b:19:2a:bf:1b:4c:8c:b4:40:aa:be:0e:
e0:5d:fb:65:64:53:4c:e0:3b:c2:64:4c:ad:3f:ba:
29:60:e9:7f:5a:0e:78:bc:c8:73:73:ff:91:bc:c8:
ce:3d:18:fe:40:07:ce:9e:c3:14:3a:bf:26:62:d9:
d7:7d:2b:0e:15:50:24:64:ed:cd:22:25:2b:ad:25:
20:11:4f:6e:78:ef:6a:50:a7:37:ae:1f:c6:e7:aa:
c9:95:17:31:24:99:c4:b9:58:a9:e9:2c:96:db:96:
e5:82:94:e7:9a:6c:68:90:e0:17:8c:65:6a:4c:d5:
09:91:80:b3:bc:44:af:2a:1a:a5:0f:86:eb:ed:e1:
20:42:fb:bb:1a:4f:ab:e4:30:39:43:84:5a:f6:0a:
af:a5:40:25:ca:a2:7f:69:c2:7f:ce:a2:ae:31:cf:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:F0:C8:17:0D:D5:65:C7:BC:63:12:F4:B9:7A:99:0D:28:D3:F8
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xrjwyBcN1WXHvGMS9Ll6mQ0o0_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:fc:c3:49:64:3f:ac:bb:74:e2:19:1b:65:32:3e:09:b3:1f:
89:e2:44:70:d2:a9:07:f2:a5:f6:ff:6f:9a:d0:a9:80:4f:74:
d6:86:4c:43:74:97:5d:88:45:81:16:22:c0:b0:7e:78:00:06:
8e:3f:ee:03:5b:a2:23:b4:91:fd:57:0a:48:9e:20:cb:73:af:
cc:7b:9a:f9:97:62:f0:f5:58:ae:7d:4e:20:72:1b:f8:f3:94:
6f:02:e1:65:b9:2b:cb:bc:a9:6f:d7:78:0f:9d:ee:90:c9:43:
6a:d9:76:13:fd:18:cd:c6:16:d5:15:ee:03:ef:72:8f:27:a3:
23:79:e8:e9:73:19:b0:d8:fa:f1:bf:2f:c2:b8:6a:93:76:70:
26:94:d1:05:67:8f:e8:fa:d7:4a:b5:76:e7:fa:d3:dc:09:1d:
b4:db:46:86:21:52:ab:0a:72:8f:d5:f3:01:26:87:4f:52:bb:
ef:50:eb:c1:57:15:52:da:ae:c8:2d:2d:05:f5:91:35:89:a9:
c4:a5:9e:ef:ce:f6:89:c2:cb:e0:d8:39:7f:eb:86:76:dd:e1:
0b:4e:70:99:a7:da:5c:f4:71:52:da:e9:d6:4b:42:3f:ed:18:
6d:bb:27:61:1a:7c:d4:42:d0:6e:e5:33:4f:5e:ac:64:33:0b:
1b:81:72:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFf0PZ8cnJ6PtI6Auu3oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjMwMTAyMTUyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmI4ZjBjODE3MGRkNTY1YzdiYzYzMTJmNGI5N2E5OTBkMjhkM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE13atnz5UJU9fdsiIhfU/yhWiSh
PBHnuSXI/fXCMFp1UnIrjXuw2dHmUQKXiM7kDpB9a8NtK8gZK6McV1VvEAi0YrDa
WqX4U2Bs4+vt6HzufshnRlSk8ibh/txrGSq/G0yMtECqvg7gXftlZFNM4DvCZEyt
P7opYOl/Wg54vMhzc/+RvMjOPRj+QAfOnsMUOr8mYtnXfSsOFVAkZO3NIiUrrSUg
EU9ueO9qUKc3rh/G56rJlRcxJJnEuVip6SyW25blgpTnmmxokOAXjGVqTNUJkYCz
vESvKhqlD4br7eEgQvu7Gk+r5DA5Q4Ra9gqvpUAlyqJ/acJ/zqKuMc8qwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMa48MgXDdVlx7xjEvS5epkNKNP4MB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEveHJqd3lCY04xV1hIdkdNUzlMbDZtUTBvMF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndRMA0G
CSqGSIb3DQEBCwUAA4IBAQDG/MNJZD+su3TiGRtlMj4Jsx+J4kRw0qkH8qX2/2+a
0KmAT3TWhkxDdJddiEWBFiLAsH54AAaOP+4DW6IjtJH9VwpIniDLc6/Me5r5l2Lw
9ViufU4gchv485RvAuFluSvLvKlv13gPne6QyUNq2XYT/RjNxhbVFe4D73KPJ6Mj
eejpcxmw2Prxvy/CuGqTdnAmlNEFZ4/o+tdKtXbn+tPcCR2020aGIVKrCnKP1fMB
JodPUrvvUOvBVxVS2q7ILS0F9ZE1ianEpZ7vzvaJwsvg2Dl/64Z23eELTnCZp9pc
9HFS2unWS0I/7RhtuydhGnzUQtBu5TNPXqxkMwsbgXIw
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net