Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa
File: 1fSGDy6_oterCUwVFgL3l27PNWw.roa (raw, json)
Hash identifier: 0l1qqv8jr4DXbxJw1MeCGha0N9xUDwLgISswH2dx3vQ=
Subject key identifier: D5:F4:86:0F:2E:BF:A2:D7:AB:09:4C:15:16:02:F7:97:6E:CF:35:6C
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 01856D0A83E229D42F3B178CDC9CE915DE08
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa
Signing time: Sun 01 Jan 2023 11:14:43 +0000
ROA not before: Sun 01 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22351
IP address blocks: 185.244.14.0/23 maxlen: 23
185.244.12.0/23 maxlen: 23
80.73.212.0/22 maxlen: 22
80.73.208.0/22 maxlen: 22
80.73.216.0/24 maxlen: 24
80.73.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:83:e2:29:d4:2f:3b:17:8c:dc:9c:e9:15:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Jan 1 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5f4860f2ebfa2d7ab094c151602f7976ecf356c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:07:93:37:35:8f:6e:d9:72:ac:f2:72:08:
cd:19:98:f7:a2:4f:af:05:92:c3:5a:40:f5:3b:0a:
c5:80:c8:8c:0c:00:1b:97:e8:ee:80:f8:1b:df:7a:
7f:6d:81:0e:be:73:46:b6:28:d5:0e:e3:b9:d8:e5:
8e:9a:58:1c:f5:64:51:06:2b:89:14:8c:93:60:0e:
67:a4:5f:f3:21:2d:2d:08:12:71:09:e3:73:fe:a1:
61:6f:8c:66:32:53:01:9e:6f:db:00:78:25:bb:e8:
a7:3c:6c:20:d9:a8:71:1b:56:f4:9a:e6:77:5a:8d:
5a:72:a6:f6:81:e2:eb:0c:86:1c:0e:ae:ed:ae:ca:
c3:0b:28:35:ba:16:b7:58:e9:6a:b4:d9:3f:14:fc:
57:8d:e5:cf:1a:b9:b5:db:fb:ed:2a:67:06:ba:ae:
aa:bd:95:ed:67:b5:73:03:8d:7f:a5:05:d5:27:9b:
6c:4e:6f:98:89:d0:62:62:27:98:30:18:aa:36:35:
fe:34:6c:00:01:f5:0b:0f:51:61:7b:05:f4:e9:bd:
aa:db:36:fb:15:41:dd:5a:f4:58:fc:0d:d8:86:94:
a1:6b:2d:f6:fe:3a:31:f1:4d:9d:4f:d4:2d:f6:5b:
bd:b4:9e:85:ce:48:e9:0f:23:57:c9:8b:2f:1e:89:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:86:0F:2E:BF:A2:D7:AB:09:4C:15:16:02:F7:97:6E:CF:35:6C
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:fe:c7:b9:02:63:0a:77:8f:86:70:f8:29:95:83:95:37:31:
2c:ab:c6:d6:b8:31:87:1b:1f:9a:a1:f0:8d:5a:6a:1d:bb:98:
ad:83:42:64:03:47:4e:cc:4a:95:44:3f:af:70:d7:b2:78:a1:
2d:00:b8:2d:b1:10:2f:e1:cd:df:b1:f3:5c:bb:7f:5c:aa:dc:
f7:9a:f8:84:2f:d5:4e:b8:3f:c1:64:b6:02:9c:ce:95:b3:7c:
ac:cd:22:ae:1a:d6:44:fb:6a:8a:d5:f1:8e:13:d1:41:0d:88:
b0:23:63:16:b6:06:f9:a9:75:40:62:ef:b2:3a:97:97:90:26:
a9:91:8d:be:b5:aa:13:42:3a:94:30:52:f6:47:3b:e8:21:45:
9d:d3:c0:39:9d:25:3a:79:c4:f7:18:1c:f4:73:68:f1:4f:93:
17:eb:53:68:72:71:e8:b1:0f:ee:71:16:e4:a8:5b:8e:08:32:
15:28:a3:df:c6:82:4e:a5:9e:0a:48:e2:fb:47:11:5b:34:05:
b6:fc:10:bf:4a:c4:a8:86:f4:76:0b:9b:4f:78:4f:7e:54:0a:
dd:16:9a:5c:cc:d5:a8:70:3b:fb:d5:9f:0c:3d:c4:bb:3d:bc:
1c:57:22:ce:06:5b:e9:fd:5d:b1:3c:01:34:d4:fd:1a:55:8b:
c0:ba:f4:36
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVtCoPiKdQvOxeM3JzpFd4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm
ZGQ1MDkwHhcNMjMwMTAxMTExNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWY0ODYwZjJlYmZhMmQ3YWIwOTRjMTUxNjAyZjc5NzZlY2YzNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UQHkzc1j27ZcqzycgjNGZj3ok+v
BZLDWkD1OwrFgMiMDAAbl+jugPgb33p/bYEOvnNGtijVDuO52OWOmlgc9WRRBiuJ
FIyTYA5npF/zIS0tCBJxCeNz/qFhb4xmMlMBnm/bAHglu+inPGwg2ahxG1b0muZ3
Wo1acqb2geLrDIYcDq7trsrDCyg1uha3WOlqtNk/FPxXjeXPGrm12/vtKmcGuq6q
vZXtZ7VzA41/pQXVJ5tsTm+YidBiYieYMBiqNjX+NGwAAfULD1FhewX06b2q2zb7
FUHdWvRY/A3YhpShay32/jox8U2dT9Qt9lu9tJ6FzkjpDyNXyYsvHonZJQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNX0hg8uv6LXqwlMFRYC95duzzVsMB8GA1UdIwQY
MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt
OTJkOTRjZDdiMDI0LzEvMWZTR0R5Nl9vdGVyQ1V3VkZnTDNsMjdQTld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0
LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARQSdAD
BAFQSdgDBAK59AwwDQYJKoZIhvcNAQELBQADggEBAKT+x7kCYwp3j4Zw+CmVg5U3
MSyrxta4MYcbH5qh8I1aah27mK2DQmQDR07MSpVEP69w17J4oS0AuC2xEC/hzd+x
81y7f1yq3Pea+IQv1U64P8FktgKczpWzfKzNIq4a1kT7aorV8Y4T0UENiLAjYxa2
BvmpdUBi77I6l5eQJqmRjb61qhNCOpQwUvZHO+ghRZ3TwDmdJTp5xPcYHPRzaPFP
kxfrU2hyceixD+5xFuSoW44IMhUoo9/Ggk6lngpI4vtHEVs0Bbb8EL9KxKiG9HYL
m094T35UCt0WmlzM1ahwO/vVnww9xLs9vBxXIs4GW+n9XbE8ATTU/RpVi8C69DY=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:39 2024 by rpki-client on console.sobornost.net