Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/yRVkEEPA2gy7fEP_JSZFtAewxrY.roa
File: yRVkEEPA2gy7fEP_JSZFtAewxrY.roa (raw, json)
Hash identifier: iCF3pKl/iiB0LBDoBM6/Fp2r5aUlSoaFT8pwk0fNl5o=
Subject key identifier: C9:15:64:10:43:C0:DA:0C:BB:7C:43:FF:25:26:45:B4:07:B0:C6:B6
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 01857130808AA6230C36CE1A138CC3885FEE
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/yRVkEEPA2gy7fEP_JSZFtAewxrY.roa
Signing time: Mon 02 Jan 2023 06:34:42 +0000
ROA not before: Mon 02 Jan 2023 06:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3308
IP address blocks: 213.150.32.0/19 maxlen: 19
194.19.192.0/19 maxlen: 19
217.74.128.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
212.97.192.0/18 maxlen: 18
85.235.224.0/19 maxlen: 19
194.19.128.0/18 maxlen: 18
62.198.0.0/15 maxlen: 15
194.255.0.0/16 maxlen: 16
62.44.128.0/18 maxlen: 18
195.184.96.0/19 maxlen: 19
89.233.0.0/18 maxlen: 18
89.233.0.0/24 maxlen: 24
2a01:3a0::/32 maxlen: 32
2a01:3a0::/48 maxlen: 48
2a01:3a0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:80:8a:a6:23:0c:36:ce:1a:13:8c:c3:88:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 2 06:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c915641043c0da0cbb7c43ff252645b407b0c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:73:87:86:b7:b4:0c:9b:a5:8e:c7:dd:c9:
8f:f9:0d:df:3d:06:43:2b:69:a5:85:96:4d:0a:ec:
5d:aa:76:d5:cf:48:4b:62:6c:4e:f0:1b:36:2a:7e:
21:0f:ba:71:a0:ce:ca:83:f7:a6:9e:03:b3:20:55:
8c:cf:9b:c9:ce:52:57:c6:2e:e3:a5:89:dc:ea:70:
18:33:c7:22:da:2c:52:5e:d6:d8:05:f5:4a:ef:96:
1e:b4:aa:6a:a8:d8:2f:e2:25:97:fe:45:99:13:4e:
13:95:88:e5:ba:83:50:b0:5c:b9:0f:ef:92:c6:c7:
92:2c:21:84:bb:8f:42:ab:b1:62:d5:ef:a3:8b:f1:
61:fc:f0:ed:bb:7c:37:bb:76:14:a0:2d:3e:de:7e:
a4:70:e8:74:9d:78:6c:b5:96:d5:7e:1c:6f:53:e4:
2d:a5:6a:a2:e9:52:55:28:53:02:97:e9:17:ac:25:
0e:b4:15:c2:48:71:ea:5c:28:06:b1:57:be:80:a5:
dd:c7:23:1a:44:a2:63:8f:1b:f0:11:6b:b2:4c:e7:
a9:80:a0:50:48:3c:47:a8:59:0e:80:e2:8c:1f:82:
9d:d0:2f:20:28:af:84:b3:10:cf:2e:cf:0d:e3:14:
ad:f6:07:75:f0:14:84:5e:fe:5b:50:96:ee:7b:29:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:64:10:43:C0:DA:0C:BB:7C:43:FF:25:26:45:B4:07:B0:C6:B6
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/yRVkEEPA2gy7fEP_JSZFtAewxrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.128.0/18
62.198.0.0/15
85.235.224.0/19
89.233.0.0/18
194.19.128.0-194.19.223.255
194.255.0.0/16
195.184.96.0/19
212.97.192.0/18
213.150.32.0/19
213.173.224.0/19
217.74.128.0/19
IPv6:
2a01:3a0::/29
Signature Algorithm: sha256WithRSAEncryption
97:7e:66:07:00:ea:42:c6:09:a4:b2:a0:da:c4:40:bf:5a:b5:
cd:55:a3:13:ed:ec:28:9b:ca:f4:e1:af:17:04:9c:5a:33:12:
be:b8:a7:bd:ec:fc:56:8b:96:e4:c2:e9:e5:be:b6:ea:b8:63:
9d:c6:39:70:0a:38:41:b5:07:3b:e5:b3:b5:74:42:bb:eb:4e:
8c:95:b1:9e:e8:7b:77:69:70:4f:0b:c7:0b:9b:59:7d:76:bb:
61:c4:c0:89:04:f6:be:83:80:52:56:72:c8:26:97:c5:31:bb:
28:00:ed:45:65:2d:4d:90:4f:37:af:a0:12:33:e7:8d:9b:14:
f8:e1:e2:be:e8:c3:f8:87:92:cf:12:a9:fb:ad:8d:97:1f:81:
0a:1f:2b:69:8e:b3:0d:bd:48:ec:a7:56:e1:31:d8:df:c5:0f:
6d:95:83:80:c0:82:d3:23:23:f0:0c:fd:3a:4e:e6:36:f7:26:
0e:a3:ff:22:20:be:c9:6d:e7:56:fe:67:d9:3b:70:a3:6e:7b:
6c:af:7a:3a:c7:89:97:6e:50:d5:d4:19:50:2e:1c:a9:50:ba:
50:ea:7d:47:94:49:b6:bd:67:81:76:cc:77:b1:ad:b6:88:2f:
9e:8e:fe:d3:ba:12:dc:1d:46:2b:55:0b:48:f5:d8:9d:60:21:
e5:4f:1f:58
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYVxMICKpiMMNs4aE4zDiF/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjMwMTAyMDYzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTE1NjQxMDQzYzBkYTBjYmI3YzQzZmYyNTI2NDViNDA3YjBjNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5pzh4a3tAybpY7H3cmP+Q3fPQZD
K2mlhZZNCuxdqnbVz0hLYmxO8Bs2Kn4hD7pxoM7Kg/emngOzIFWMz5vJzlJXxi7j
pYnc6nAYM8ci2ixSXtbYBfVK75YetKpqqNgv4iWX/kWZE04TlYjluoNQsFy5D++S
xseSLCGEu49Cq7Fi1e+ji/Fh/PDtu3w3u3YUoC0+3n6kcOh0nXhstZbVfhxvU+Qt
pWqi6VJVKFMCl+kXrCUOtBXCSHHqXCgGsVe+gKXdxyMaRKJjjxvwEWuyTOepgKBQ
SDxHqFkOgOKMH4Kd0C8gKK+EsxDPLs8N4xSt9gd18BSEXv5bUJbueyl8GQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFMkVZBBDwNoMu3xD/yUmRbQHsMa2MB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEveVJWa0VFUEEyZ3k3ZkVQX0pTWkZ0QWV3eHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQGPiyAAwMB
PsYDBAVV6+ADBAZZ6QAwDAMEB8ITgAMEBcITwAMDAML/AwQFw7hgAwQG1GHAAwQF
1ZYgAwQF1a3gAwQF2UqAMA0EAgACMAcDBQMqAQOgMA0GCSqGSIb3DQEBCwUAA4IB
AQCXfmYHAOpCxgmksqDaxEC/WrXNVaMT7ewom8r04a8XBJxaMxK+uKe97PxWi5bk
wunlvrbquGOdxjlwCjhBtQc75bO1dEK7606MlbGe6Ht3aXBPC8cLm1l9drthxMCJ
BPa+g4BSVnLIJpfFMbsoAO1FZS1NkE83r6ASM+eNmxT44eK+6MP4h5LPEqn7rY2X
H4EKHytpjrMNvUjsp1bhMdjfxQ9tlYOAwILTIyPwDP06TuY29yYOo/8iIL7JbedW
/mfZO3Cjbntsr3o6x4mXblDV1BlQLhypULpQ6n1HlEm2vWeBdsx3sa22iC+ejv7T
uhLcHUYrVQtI9didYCHlTx9Y
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:31 2023 by rpki-client on console.sobornost.net