Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/41Ti7yk86iF2xPF31eByVaR34OE.roa
File: 41Ti7yk86iF2xPF31eByVaR34OE.roa (raw, json)
Hash identifier: z45XDJy3w1S2vnuUw42EIYD/HUPBU+Fy/6mMWFc3f+I=
Subject key identifier: E3:54:E2:EF:29:3C:EA:21:76:C4:F1:77:D5:E0:72:55:A4:77:E0:E1
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 0185724C6ECD809CA81C64F61420B5CD4BB0
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/41Ti7yk86iF2xPF31eByVaR34OE.roa
Signing time: Mon 02 Jan 2023 11:44:49 +0000
ROA not before: Mon 02 Jan 2023 11:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34674
IP address blocks: 128.140.176.0/21 maxlen: 21
128.140.176.0/22 maxlen: 22
128.140.176.0/24 maxlen: 24
128.140.176.0/23 maxlen: 23
128.140.177.0/24 maxlen: 24
128.140.178.0/23 maxlen: 23
128.140.179.0/24 maxlen: 24
128.140.182.0/23 maxlen: 23
128.140.181.0/24 maxlen: 24
128.140.180.0/22 maxlen: 22
128.140.180.0/24 maxlen: 24
128.140.180.0/23 maxlen: 23
128.140.182.0/24 maxlen: 24
128.140.183.0/24 maxlen: 24
128.140.184.0/23 maxlen: 23
128.140.184.0/24 maxlen: 24
128.140.185.0/24 maxlen: 24
128.140.186.0/24 maxlen: 24
128.140.186.0/23 maxlen: 23
128.140.184.0/22 maxlen: 22
128.140.187.0/24 maxlen: 24
185.184.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6e:cd:80:9c:a8:1c:64:f6:14:20:b5:cd:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 2 11:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e354e2ef293cea2176c4f177d5e07255a477e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:c6:6b:76:29:52:60:bd:8b:68:4c:96:af:
4d:2f:c7:19:5c:54:e6:0f:3d:27:85:0d:69:da:54:
4b:9f:b0:96:bd:f7:0f:bc:02:05:bc:28:df:df:44:
53:66:b1:20:2f:b4:13:5d:7f:5c:67:4c:5b:62:aa:
e5:a6:6b:b8:ec:b6:e0:6b:fd:76:c5:95:f0:c5:db:
fd:8a:fe:99:d8:f7:7c:06:55:27:66:83:2d:0b:44:
b1:0f:bf:42:3d:9c:fe:b0:63:5d:9d:4d:23:b7:15:
01:c5:8b:b3:f9:ec:92:62:ee:56:1b:91:1e:8b:a8:
ec:4a:24:a9:b7:f8:4d:3a:15:80:c7:d2:50:64:01:
f2:c4:e1:4d:89:d3:90:0b:94:9c:f5:3f:a6:31:12:
b2:46:8d:e0:c4:76:37:bb:61:d3:82:59:37:a1:e6:
33:a9:ab:76:93:e8:18:45:42:17:c2:19:90:2b:35:
55:90:5f:33:7a:15:66:9c:77:0c:3d:38:ec:57:a3:
40:f4:48:be:c3:1f:05:40:86:28:60:91:8a:af:1f:
cf:fc:18:f3:94:d4:4a:9f:dd:c9:d3:e7:66:97:b6:
fb:61:43:15:b5:f0:ea:0d:ff:1b:9e:88:9b:98:32:
d6:3b:b0:98:34:82:dc:ab:d1:57:81:94:33:0e:ce:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:E2:EF:29:3C:EA:21:76:C4:F1:77:D5:E0:72:55:A4:77:E0:E1
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/41Ti7yk86iF2xPF31eByVaR34OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.176.0-128.140.187.255
185.184.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a8:92:a8:75:eb:df:15:12:1b:b5:4a:8e:5e:3d:fe:e4:ef:
33:0a:3f:c7:4b:95:62:f2:58:0a:f8:86:be:84:c7:ef:b7:5f:
47:2f:ac:7c:01:6c:95:78:e1:74:73:75:7b:f0:09:88:d3:d1:
61:1d:bf:54:ec:c0:39:34:0a:d4:0c:3b:0d:20:e3:33:d3:cb:
1a:5d:ed:11:c2:20:14:c0:27:e8:a3:76:32:0f:4c:dd:68:4a:
7e:b8:ad:0b:d3:a7:23:b0:0f:00:1f:01:de:ca:da:a7:13:7b:
b8:f8:31:f1:af:64:d6:0b:26:72:a8:77:00:f0:2b:de:ca:fe:
4c:9d:98:a0:11:05:4c:ac:6b:5b:5b:f8:fa:38:62:5c:25:4d:
1c:3f:18:9b:6e:0c:fe:3a:31:ff:f6:cf:8c:ce:b8:28:48:33:
cd:e6:fb:96:8e:bc:f3:07:93:50:0a:20:ee:d3:79:05:bf:2a:
21:39:8d:0f:2a:f1:47:12:eb:3d:4b:5e:a9:43:1c:e0:cf:a3:
db:7e:89:d5:c0:4e:90:e8:fc:4d:6f:99:22:e6:bb:80:1a:82:
78:44:3b:49:db:fb:a4:41:db:6d:34:aa:20:0f:57:63:46:5a:
d5:08:04:38:e2:72:5f:d7:32:5c:08:ea:d8:f1:1a:fb:d1:74:
cc:c8:a6:81
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVyTG7NgJyoHGT2FCC1zUuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNTY2NGUwMjkzNmNiNWI1NDU0ZDU5NWM1MzgyYjdlN2Ew
Yzc5NDQwHhcNMjMwMTAyMTE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU0ZTJlZjI5M2NlYTIxNzZjNGYxNzdkNWUwNzI1NWE0NzdlMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg3Ga3YpUmC9i2hMlq9NL8cZXFTm
Dz0nhQ1p2lRLn7CWvfcPvAIFvCjf30RTZrEgL7QTXX9cZ0xbYqrlpmu47Lbga/12
xZXwxdv9iv6Z2Pd8BlUnZoMtC0SxD79CPZz+sGNdnU0jtxUBxYuz+eySYu5WG5Ee
i6jsSiSpt/hNOhWAx9JQZAHyxOFNidOQC5Sc9T+mMRKyRo3gxHY3u2HTglk3oeYz
qat2k+gYRUIXwhmQKzVVkF8zehVmnHcMPTjsV6NA9Ei+wx8FQIYoYJGKrx/P/Bjz
lNRKn93J0+dml7b7YUMVtfDqDf8bnoibmDLWO7CYNILcq9FXgZQzDs4nUQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFONU4u8pPOohdsTxd9XgclWkd+DhMB8GA1UdIwQY
MBaAFC5WZOApNstbVFTVlcU4K356DHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMt
ZWY4MWZjYTYzMDI5LzEvNDFUaTd5azg2aUYyeFBGMzFlQnlWYVIzNE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMtZWY4MWZjYTYzMDI5
LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASAjLAD
BAKAjLgDBAC5uDwwDQYJKoZIhvcNAQELBQADggEBAJyokqh1698VEhu1So5ePf7k
7zMKP8dLlWLyWAr4hr6Ex++3X0cvrHwBbJV44XRzdXvwCYjT0WEdv1TswDk0CtQM
Ow0g4zPTyxpd7RHCIBTAJ+ijdjIPTN1oSn64rQvTpyOwDwAfAd7K2qcTe7j4MfGv
ZNYLJnKodwDwK97K/kydmKARBUysa1tb+Po4YlwlTRw/GJtuDP46Mf/2z4zOuChI
M83m+5aOvPMHk1AKIO7TeQW/KiE5jQ8q8UcS6z1LXqlDHODPo9t+idXATpDo/E1v
mSLmu4AagnhEO0nb+6RB2200qiAPV2NGWtUIBDjicl/XMlwI6tjxGvvRdMzIpoE=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net