Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/27WPR-nCB--frgxD1FkKw4imZPw.roa
File: 27WPR-nCB--frgxD1FkKw4imZPw.roa (raw, json)
Hash identifier: ZwTTppaj/xNY07OU6kvzzRQw19XvO17ktk4xCD9Jj9o=
Subject key identifier: DB:B5:8F:47:E9:C2:07:EF:9F:AE:0C:43:D4:59:0A:C3:88:A6:64:FC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0189220E01D410DF26BF660D042DD93A3BFD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/27WPR-nCB--frgxD1FkKw4imZPw.roa
Signing time: Tue 04 Jul 2023 17:58:10 +0000
ROA not before: Tue 04 Jul 2023 17:58:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.147.45.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:22:0e:01:d4:10:df:26:bf:66:0d:04:2d:d9:3a:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 4 17:58:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb58f47e9c207ef9fae0c43d4590ac388a664fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:6e:bc:7a:45:2b:32:63:ca:4c:dd:bd:7c:
92:11:50:a9:d7:e4:87:d5:43:0c:dc:76:e8:f6:b4:
ad:ab:64:e3:1b:b0:8a:fb:3c:a6:6e:45:b0:1f:12:
b9:a8:2a:c1:38:2d:64:7b:ca:64:cf:69:83:92:e4:
72:c2:c2:95:59:ba:e6:6b:7f:02:3c:21:b7:c8:d2:
eb:90:ec:18:a8:7c:2f:8f:be:d5:49:c8:b5:1f:59:
f6:04:b7:61:db:4f:81:c6:7d:74:a6:22:d7:3c:05:
54:30:fb:9d:97:41:07:d8:17:d9:07:f2:9d:21:87:
16:34:66:d4:a9:13:12:8f:fa:4b:bb:cb:91:2a:e9:
37:c5:3a:71:72:43:d5:f7:dd:14:a5:58:25:29:83:
a3:ed:a6:2a:d4:30:18:2c:c1:e8:c9:87:98:7e:c2:
31:7e:66:73:30:22:5f:14:2f:31:3e:88:b8:31:03:
b5:96:d6:ad:57:c2:27:ce:07:d8:eb:fe:ef:0f:69:
5f:ba:c2:e7:e4:8e:24:1e:21:6a:90:2b:4f:b7:37:
a3:74:ea:11:91:be:1a:b4:55:83:d6:2b:7e:c5:cd:
cf:0b:a5:dd:2f:29:c3:09:a4:3a:7f:96:1a:0b:e9:
c4:1c:e3:3b:64:49:77:a9:37:00:fa:e5:f4:9a:ea:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:8F:47:E9:C2:07:EF:9F:AE:0C:43:D4:59:0A:C3:88:A6:64:FC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/27WPR-nCB--frgxD1FkKw4imZPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6d:9f:cd:93:fb:2e:f6:13:f2:68:43:08:bd:f4:8d:1f:3f:
4a:3d:7e:6e:3b:82:f9:24:0c:88:78:c2:45:85:db:ad:0d:6e:
63:07:03:ef:71:e6:8a:4c:63:8d:48:fa:31:b5:c8:b3:45:f0:
58:18:c6:a8:54:9c:4c:ca:67:f1:f2:c6:d2:f6:6e:d9:53:a8:
27:e7:69:61:a3:9b:dc:41:b7:e4:eb:30:5a:e1:d6:ba:f5:8d:
8b:aa:8a:05:dc:a9:7c:67:e2:0a:e5:23:f2:f1:14:e2:18:be:
87:05:f8:77:b0:ef:2f:65:c4:77:72:97:f6:23:d9:3c:b2:67:
44:8b:65:87:cb:e0:c3:2d:85:41:54:2c:92:fa:5c:16:67:79:
a6:1c:63:18:df:59:c6:f9:94:d0:14:14:18:b8:71:a8:88:ff:
25:8a:ed:9d:f0:67:c8:37:30:05:9f:07:8c:f7:01:98:bc:0d:
d7:f9:bd:b9:f2:b7:01:24:9f:7c:62:1a:bd:b5:60:61:4c:f0:
8e:30:f9:d2:ef:be:d5:45:57:24:5f:35:55:20:75:b2:df:21:
3a:52:d8:de:03:77:29:6f:3b:7d:78:15:b7:cf:79:8d:a0:a8:
92:13:db:c0:a0:67:64:55:ce:ba:49:87:bb:30:2d:90:b5:af:
66:7b:f1:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkiDgHUEN8mv2YNBC3ZOjv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwNzA0MTc1ODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmI1OGY0N2U5YzIwN2VmOWZhZTBjNDNkNDU5MGFjMzg4YTY2NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhBuvHpFKzJjykzdvXySEVCp1+SH
1UMM3Hbo9rStq2TjG7CK+zymbkWwHxK5qCrBOC1ke8pkz2mDkuRywsKVWbrma38C
PCG3yNLrkOwYqHwvj77VSci1H1n2BLdh20+Bxn10piLXPAVUMPudl0EH2BfZB/Kd
IYcWNGbUqRMSj/pLu8uRKuk3xTpxckPV990UpVglKYOj7aYq1DAYLMHoyYeYfsIx
fmZzMCJfFC8xPoi4MQO1ltatV8InzgfY6/7vD2lfusLn5I4kHiFqkCtPtzejdOoR
kb4atFWD1it+xc3PC6XdLynDCaQ6f5YaC+nEHOM7ZEl3qTcA+uX0muqUyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNu1j0fpwgfvn64MQ9RZCsOIpmT8MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMjdXUFItbkNCLS1mcmd4RDFGa0t3NGltWlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbRoAwQA
LZMtMA0GCSqGSIb3DQEBCwUAA4IBAQCFbZ/Nk/su9hPyaEMIvfSNHz9KPX5uO4L5
JAyIeMJFhdutDW5jBwPvceaKTGONSPoxtcizRfBYGMaoVJxMymfx8sbS9m7ZU6gn
52lho5vcQbfk6zBa4da69Y2LqooF3Kl8Z+IK5SPy8RTiGL6HBfh3sO8vZcR3cpf2
I9k8smdEi2WHy+DDLYVBVCyS+lwWZ3mmHGMY31nG+ZTQFBQYuHGoiP8liu2d8GfI
NzAFnweM9wGYvA3X+b258rcBJJ98Yhq9tWBhTPCOMPnS777VRVckXzVVIHWy3yE6
UtjeA3cpbzt9eBW3z3mNoKiSE9vAoGdkVc66SYe7MC2Qta9me/ED
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net