Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/xFA3yV_aJteaeoTGXaV9ZYBuufc.roa
File: xFA3yV_aJteaeoTGXaV9ZYBuufc.roa (raw, json)
Hash identifier: w8MhJUDpPCFmnELzUewxT0zz+mcbTU50IblPXNFxZvg=
Subject key identifier: C4:50:37:C9:5F:DA:26:D7:9A:7A:84:C6:5D:A5:7D:65:80:6E:B9:F7
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01856C4A6BC703778E391D14516D0B365643
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/xFA3yV_aJteaeoTGXaV9ZYBuufc.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29247
IP address blocks: 62.103.103.0/24 maxlen: 24
195.167.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6b:c7:03:77:8e:39:1d:14:51:6d:0b:36:56:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45037c95fda26d79a7a84c65da57d65806eb9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:2b:30:ad:37:32:6b:c4:58:09:a0:c7:9e:
b1:54:df:97:12:34:85:a1:99:dc:cf:79:f3:5c:1d:
5b:fa:be:6b:b7:77:38:df:7d:f9:64:59:ea:7a:8b:
52:45:58:b8:9f:73:f6:c2:73:01:ad:c6:aa:83:9f:
70:73:bd:14:6f:56:04:d5:07:2c:7b:d9:7b:14:d0:
78:7e:be:6b:05:15:c3:c3:c3:8a:03:fa:fc:6a:b4:
5b:44:e3:16:69:10:44:e4:2b:4b:27:12:79:68:fe:
df:2b:dd:59:8a:1b:c8:e6:fc:49:42:30:7c:73:56:
af:6e:3c:da:0d:99:d6:3a:e7:35:3f:57:36:b2:14:
85:4b:72:5e:dd:6b:93:8c:2a:c4:51:11:90:a4:57:
0d:20:1a:c6:c9:e8:a3:3c:60:b2:53:ad:c1:7d:46:
ae:df:10:f2:83:76:fa:2a:8f:ee:f6:da:45:8a:64:
ae:00:4d:f0:c3:36:07:44:58:ab:77:28:a5:4a:f6:
57:3f:59:9a:cb:df:4a:1f:88:9a:dd:1d:3f:41:e2:
d3:8d:3f:a8:1d:1a:7d:89:be:2e:ed:3c:60:1a:5b:
92:4e:bc:1e:70:b0:cf:9f:b9:a3:a3:ec:20:1c:1a:
80:79:f1:13:39:48:94:a5:52:41:83:c2:66:bf:23:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:37:C9:5F:DA:26:D7:9A:7A:84:C6:5D:A5:7D:65:80:6E:B9:F7
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/xFA3yV_aJteaeoTGXaV9ZYBuufc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.103.103.0/24
195.167.65.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d2:57:e3:2a:41:c2:1b:93:bf:f1:b8:18:1b:ae:00:75:84:
7e:00:a4:28:a8:79:7d:1c:f8:5c:8d:c3:ba:b9:58:2e:3a:6c:
f7:db:f8:be:5f:16:b2:bb:0d:b6:9d:5b:cd:3c:eb:86:1d:43:
db:7e:49:28:bd:18:b9:09:3e:63:96:a2:c1:a1:aa:da:a9:38:
fd:47:f8:b0:a6:46:3b:28:d0:33:6f:4f:9d:4c:d7:c9:73:7c:
4f:34:83:59:01:8e:2d:1b:9f:4a:56:75:98:90:da:c2:05:48:
47:d9:d0:5c:c6:bd:5d:84:5d:2b:44:f7:93:37:4b:b6:b3:cf:
72:93:d5:84:26:0b:57:b1:3b:77:d1:89:7b:d2:45:f8:5f:7b:
77:aa:a4:c4:76:24:3e:a0:4c:8f:9c:5c:87:75:19:4b:7c:fa:
6a:a2:cd:04:84:e6:d6:32:20:ef:bd:1e:19:73:98:80:a0:68:
fd:f3:e1:8f:29:da:82:2e:2a:21:28:b5:9f:de:53:c8:a0:00:
e3:dc:87:d8:95:dc:b3:84:fa:57:b7:4b:3c:6d:58:6c:fa:96:
5b:3c:c1:42:ae:64:de:11:ab:38:3b:6e:ed:11:13:b7:68:7a:
99:d4:a9:dd:5a:0c:8b:a0:34:00:dd:a5:c9:c9:72:ad:6c:9b:
45:cb:25:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsSmvHA3eOOR0UUW0LNlZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjMwMTAxMDc0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDUwMzdjOTVmZGEyNmQ3OWE3YTg0YzY1ZGE1N2Q2NTgwNmViOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZsrMK03MmvEWAmgx56xVN+XEjSF
oZncz3nzXB1b+r5rt3c43335ZFnqeotSRVi4n3P2wnMBrcaqg59wc70Ub1YE1Qcs
e9l7FNB4fr5rBRXDw8OKA/r8arRbROMWaRBE5CtLJxJ5aP7fK91ZihvI5vxJQjB8
c1avbjzaDZnWOuc1P1c2shSFS3Je3WuTjCrEURGQpFcNIBrGyeijPGCyU63BfUau
3xDyg3b6Ko/u9tpFimSuAE3wwzYHRFirdyilSvZXP1may99KH4ia3R0/QeLTjT+o
HRp9ib4u7TxgGluSTrwecLDPn7mjo+wgHBqAefETOUiUpVJBg8JmvyMsoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMRQN8lf2ibXmnqExl2lfWWAbrn3MB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEveEZBM3lWX2FKdGVhZW9UR1hhVjlaWUJ1dWZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPmdnAwQA
w6dBMA0GCSqGSIb3DQEBCwUAA4IBAQCC0lfjKkHCG5O/8bgYG64AdYR+AKQoqHl9
HPhcjcO6uVguOmz32/i+Xxayuw22nVvNPOuGHUPbfkkovRi5CT5jlqLBoaraqTj9
R/iwpkY7KNAzb0+dTNfJc3xPNINZAY4tG59KVnWYkNrCBUhH2dBcxr1dhF0rRPeT
N0u2s89yk9WEJgtXsTt30Yl70kX4X3t3qqTEdiQ+oEyPnFyHdRlLfPpqos0EhObW
MiDvvR4Zc5iAoGj98+GPKdqCLiohKLWf3lPIoADj3IfYldyzhPpXt0s8bVhs+pZb
PMFCrmTeEas4O27tERO3aHqZ1KndWgyLoDQA3aXJyXKtbJtFyyWf
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net