Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/a4p5wCdtHpAl2al6bl4Y6U9KATQ.roa
File: a4p5wCdtHpAl2al6bl4Y6U9KATQ.roa (raw, json)
Hash identifier: ZS+043waG/dhHRCb8/gMvCHmgVTIaBOdQp02rII5JTU=
Subject key identifier: 6B:8A:79:C0:27:6D:1E:90:25:D9:A9:7A:6E:5E:18:E9:4F:4A:01:34
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018A35B9BD75472289F7CDFAAE3A71C7F15B
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/a4p5wCdtHpAl2al6bl4Y6U9KATQ.roa
Signing time: Sun 27 Aug 2023 06:41:19 +0000
ROA not before: Sun 27 Aug 2023 06:41:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:b9:bd:75:47:22:89:f7:cd:fa:ae:3a:71:c7:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 27 06:41:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8a79c0276d1e9025d9a97a6e5e18e94f4a0134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:a9:7b:7e:03:8d:6f:79:63:ad:af:08:81:
b7:fb:99:ef:77:e3:0e:7d:2d:2a:ec:cb:45:50:89:
76:bb:15:9a:4a:38:67:06:b6:38:b1:1d:43:83:36:
ec:82:b7:f7:02:33:ad:aa:30:2f:1f:94:31:93:4b:
d4:e7:38:fa:fe:18:2f:85:af:a2:eb:ff:46:b9:5e:
f1:03:9b:52:10:77:c6:5c:fe:c3:7e:43:e3:a3:06:
e4:14:d8:24:02:bf:7f:b3:fb:26:8a:41:f6:8b:09:
e6:ed:f1:65:12:db:8f:15:8a:af:10:8e:e7:53:50:
85:da:37:3d:d5:c4:76:5f:38:b7:a7:94:73:f5:ad:
02:76:75:19:cd:6e:bd:61:70:93:68:18:ed:81:58:
36:f8:cc:9b:ac:50:bc:17:84:0d:8c:1a:82:de:4e:
8d:21:89:0b:7a:78:69:88:70:35:b7:8b:86:7d:87:
42:8e:13:06:da:72:3f:75:48:c3:3d:1e:0e:70:bb:
f8:b8:67:ea:aa:8a:82:fb:a3:30:80:b5:4e:d3:98:
91:6a:b1:e9:92:bd:4d:65:70:55:74:f2:f1:52:49:
27:1c:ec:4b:e1:b1:e4:95:08:77:19:e6:0f:77:e1:
b6:f7:39:63:0b:62:ff:c1:b4:6f:03:a5:b4:22:be:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:79:C0:27:6D:1E:90:25:D9:A9:7A:6E:5E:18:E9:4F:4A:01:34
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/a4p5wCdtHpAl2al6bl4Y6U9KATQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:15:a7:39:a5:ab:44:e5:f7:77:b4:ac:ee:b5:1e:dd:38:76:
a0:21:d8:9e:33:86:45:16:d4:17:2a:b3:c7:c0:cd:7e:61:a9:
1b:b3:e3:88:fb:ff:cb:ba:4b:30:f0:aa:42:13:50:28:20:41:
d7:a0:54:1a:4c:56:ce:5c:83:53:1b:f3:a7:4c:4d:91:fd:a4:
94:60:16:44:ad:bb:96:0a:b2:27:da:ef:17:83:36:5a:f5:a8:
fa:76:76:b6:79:fd:6b:c2:d2:ef:a3:cf:8c:e1:f3:4a:5c:e3:
bb:25:db:09:29:57:7b:6a:3a:95:29:9b:c2:2f:66:ad:aa:77:
5d:29:6a:19:ec:a8:f5:a2:d1:09:86:49:73:74:ea:bd:9a:2c:
04:42:bf:78:c4:f2:11:3f:cd:d5:e8:70:fa:34:89:81:f1:78:
ae:e3:08:db:d1:00:68:bb:1b:16:4a:04:32:ea:0a:99:1a:1b:
07:82:3e:0d:13:a9:dd:83:09:99:59:b2:10:e8:9b:83:25:c8:
80:3a:76:bd:c5:92:d9:88:44:eb:83:90:61:d4:c4:74:56:92:
7b:27:bd:1b:e1:d9:fd:f0:56:83:66:7e:79:bf:96:f6:3a:6e:
0e:bb:d5:22:1d:0f:bf:7d:bd:9c:12:5d:49:ca:0d:51:ad:14:
a6:42:92:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo1ub11RyKJ9836rjpxx/FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjMwODI3MDY0MTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjhhNzljMDI3NmQxZTkwMjVkOWE5N2E2ZTVlMThlOTRmNGEwMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSqpe34DjW95Y62vCIG3+5nvd+MO
fS0q7MtFUIl2uxWaSjhnBrY4sR1Dgzbsgrf3AjOtqjAvH5Qxk0vU5zj6/hgvha+i
6/9GuV7xA5tSEHfGXP7DfkPjowbkFNgkAr9/s/smikH2iwnm7fFlEtuPFYqvEI7n
U1CF2jc91cR2Xzi3p5Rz9a0CdnUZzW69YXCTaBjtgVg2+MybrFC8F4QNjBqC3k6N
IYkLenhpiHA1t4uGfYdCjhMG2nI/dUjDPR4OcLv4uGfqqoqC+6MwgLVO05iRarHp
kr1NZXBVdPLxUkknHOxL4bHklQh3GeYPd+G29zljC2L/wbRvA6W0Ir4bqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuKecAnbR6QJdmpem5eGOlPSgE0MB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvYTRwNXdDZHRIcEFsMmFsNmJsNFk2VTlLQVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXyaQMA0G
CSqGSIb3DQEBCwUAA4IBAQCaFac5patE5fd3tKzutR7dOHagIdieM4ZFFtQXKrPH
wM1+Yakbs+OI+//Luksw8KpCE1AoIEHXoFQaTFbOXINTG/OnTE2R/aSUYBZErbuW
CrIn2u8XgzZa9aj6dna2ef1rwtLvo8+M4fNKXOO7JdsJKVd7ajqVKZvCL2atqndd
KWoZ7Kj1otEJhklzdOq9miwEQr94xPIRP83V6HD6NImB8Xiu4wjb0QBouxsWSgQy
6gqZGhsHgj4NE6ndgwmZWbIQ6JuDJciAOna9xZLZiETrg5Bh1MR0VpJ7J70b4dn9
8FaDZn55v5b2Om4Ou9UiHQ+/fb2cEl1Jyg1RrRSmQpJ5
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net