Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/dvLAws2gG9pIMno7oO2shkxwDsg.roa
File: dvLAws2gG9pIMno7oO2shkxwDsg.roa (raw, json)
Hash identifier: ydn89upN4/XQYbsOUrTrfV/zGd0kMj4+WPtU0jdFRNw=
Subject key identifier: 76:F2:C0:C2:CD:A0:1B:DA:48:32:7A:3B:A0:ED:AC:86:4C:70:0E:C8
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5FA1A909C2DD76ABA82C54236F78A85E
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/dvLAws2gG9pIMno7oO2shkxwDsg.roa
Signing time: Mon 04 Sep 2023 09:59:04 +0000
ROA not before: Mon 04 Sep 2023 09:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
178.83.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:a1:a9:09:c2:dd:76:ab:a8:2c:54:23:6f:78:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 09:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76f2c0c2cda01bda48327a3ba0edac864c700ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:e8:f2:84:d1:73:66:9d:80:78:36:41:a2:
85:00:44:9b:7b:59:9b:6a:b9:c1:43:4b:28:ed:e7:
e3:ef:c4:7b:2b:7e:81:fa:89:39:f2:11:ed:8d:f7:
cd:90:74:5e:02:15:ea:6b:31:e6:77:85:31:e4:4f:
8a:f1:da:53:91:0c:dc:66:a8:28:16:0d:7f:fc:14:
02:69:0c:fd:dd:e1:0b:fd:67:24:35:6d:11:df:44:
19:b7:e0:19:d1:bc:8e:90:24:2f:24:48:b7:af:0c:
a2:af:ec:6e:ad:dd:9a:9b:34:37:3b:34:00:a8:86:
73:fe:9e:e7:35:76:c9:f2:26:e9:45:8c:7f:eb:a7:
10:a7:81:7b:4a:c2:ee:28:a9:99:7c:d4:08:83:80:
ce:92:94:3f:d0:43:49:40:2d:58:f0:6d:fd:b7:98:
d1:6e:de:75:bd:ec:d8:66:ed:f4:bf:1e:78:fb:ad:
72:2d:28:6f:94:79:d7:14:f7:4d:ca:45:e8:03:3a:
e5:b0:d5:74:36:83:2f:ae:6d:24:12:f5:81:d9:45:
55:3a:eb:b4:80:4a:bc:d1:67:02:d7:40:83:fe:5e:
41:2e:d9:92:7f:24:14:cf:de:f9:7c:35:5f:62:bf:
cc:98:a3:84:f8:b8:75:0d:0e:5e:b3:e8:dc:08:ac:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:C0:C2:CD:A0:1B:DA:48:32:7A:3B:A0:ED:AC:86:4C:70:0E:C8
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/dvLAws2gG9pIMno7oO2shkxwDsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:db:ac:cf:5d:45:b0:74:84:97:45:70:0e:ee:f3:e0:d4:49:
c2:8b:c5:ea:3d:7e:b6:95:06:e6:b7:9c:5c:63:e2:4d:69:08:
df:6c:97:56:ff:ef:df:2d:7d:15:80:cc:3f:9a:c2:8a:8e:e8:
a9:41:77:94:c6:fc:81:16:74:a7:c5:aa:5b:4f:cd:11:20:21:
32:cc:04:23:d0:a3:1b:97:de:8d:dc:02:6f:62:aa:67:c4:44:
18:48:62:6b:80:cc:1c:83:6d:cc:98:1e:82:24:86:1d:f7:9b:
d3:d7:e1:bb:71:02:28:30:e6:68:30:0f:77:5b:9c:98:bc:8a:
09:16:d5:d5:e3:4d:26:ac:6a:61:2c:ac:82:79:e8:2b:21:48:
ce:30:e4:ed:12:8b:a9:c9:f0:ee:d1:1d:59:04:ea:4f:81:6f:
fc:e3:db:e7:cf:37:61:a6:6c:d3:4c:77:5f:54:49:21:b6:ec:
f6:5d:e5:7b:c4:f3:55:46:00:24:4b:1c:8d:98:bc:5a:5a:c8:
84:68:c7:52:0a:1d:47:1a:9c:2e:f6:c4:24:d7:8b:fb:a6:b2:
f9:7e:ed:54:23:6b:be:eb:31:55:14:62:bb:3b:d9:7a:de:d4:
60:fd:a9:28:e4:2d:ca:e8:2d:ba:39:40:2a:83:e3:f8:aa:3f:
d5:09:00:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYpfoakJwt12q6gsVCNveKheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjMwOTA0MDk1OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmYyYzBjMmNkYTAxYmRhNDgzMjdhM2JhMGVkYWM4NjRjNzAwZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzfo8oTRc2adgHg2QaKFAESbe1mb
arnBQ0so7efj78R7K36B+ok58hHtjffNkHReAhXqazHmd4Ux5E+K8dpTkQzcZqgo
Fg1//BQCaQz93eEL/WckNW0R30QZt+AZ0byOkCQvJEi3rwyir+xurd2amzQ3OzQA
qIZz/p7nNXbJ8ibpRYx/66cQp4F7SsLuKKmZfNQIg4DOkpQ/0ENJQC1Y8G39t5jR
bt51vezYZu30vx54+61yLShvlHnXFPdNykXoAzrlsNV0NoMvrm0kEvWB2UVVOuu0
gEq80WcC10CD/l5BLtmSfyQUz975fDVfYr/MmKOE+Lh1DQ5es+jcCKxJbwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHbywMLNoBvaSDJ6O6DtrIZMcA7IMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvZHZMQXdzMmdHOXBJTW5vN29PMnNoa3h3RHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQHHwqAAwMB
Ln4DAwAujAMDAD4CAwMBUNoDBAVRB+AwDAMEBVQUIAMEA1QUMAMDAlRIAwMBslID
BAXCHQAwDQYJKoZIhvcNAQELBQADggEBACLbrM9dRbB0hJdFcA7u8+DUScKLxeo9
fraVBua3nFxj4k1pCN9sl1b/798tfRWAzD+awoqO6KlBd5TG/IEWdKfFqltPzREg
ITLMBCPQoxuX3o3cAm9iqmfERBhIYmuAzByDbcyYHoIkhh33m9PX4btxAigw5mgw
D3dbnJi8igkW1dXjTSasamEsrIJ56CshSM4w5O0Si6nJ8O7RHVkE6k+Bb/zj2+fP
N2GmbNNMd19USSG27PZd5XvE81VGACRLHI2YvFpayIRox1IKHUcanC72xCTXi/um
svl+7VQja77rMVUUYrs72Xre1GD9qSjkLcroLbo5QCqD4/iqP9UJAAg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net