Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/7Om6AzqgrAw_ieq58eEQ85O_cl0.roa
File: 7Om6AzqgrAw_ieq58eEQ85O_cl0.roa (raw, json)
Hash identifier: kNODxbdCZZAYltyp65so+4brFOqoG/slkk3otM0Lz50=
Subject key identifier: EC:E9:BA:03:3A:A0:AC:0C:3F:89:EA:B9:F1:E1:10:F3:93:BF:72:5D
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 01856D789135680A55968469D775689DEE68
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/7Om6AzqgrAw_ieq58eEQ85O_cl0.roa
Signing time: Sun 01 Jan 2023 13:14:56 +0000
ROA not before: Sun 01 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29500
IP address blocks: 193.135.102.0/23 maxlen: 23
193.134.164.0/24 maxlen: 24
193.134.165.0/24 maxlen: 24
193.26.4.0/24 maxlen: 24
193.134.160.0/20 maxlen: 20
193.134.170.0/24 maxlen: 24
193.31.252.0/23 maxlen: 23
193.246.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:91:35:68:0a:55:96:84:69:d7:75:68:9d:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece9ba033aa0ac0c3f89eab9f1e110f393bf725d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:9f:fa:5c:1f:b1:f9:f9:59:71:c3:41:bd:
3d:50:fb:b0:4e:d2:cf:27:65:c7:76:08:be:b0:af:
41:60:72:8c:b8:c2:fc:35:97:37:ea:3e:3e:45:63:
61:18:59:f2:93:b9:4b:e0:7d:a8:60:ad:d2:1e:e2:
07:39:a5:a9:02:5c:1a:f9:41:c4:c1:44:c7:06:4f:
ba:5b:c3:de:e8:7e:0f:b3:7f:e8:f0:29:96:7e:f4:
90:20:ab:95:8f:e1:13:f3:3d:d8:c6:39:6a:d3:75:
db:da:91:51:46:df:ba:e8:45:b9:bb:e0:eb:cb:52:
88:6c:40:e3:c4:92:12:8c:62:d9:2f:0c:43:3e:85:
da:9b:85:8c:7e:66:bb:38:db:77:d1:79:c4:54:7e:
0b:e8:f0:97:0e:27:b9:6c:e1:58:29:aa:ad:05:35:
35:f9:3c:a9:c2:5e:10:06:22:07:9a:e5:22:06:8c:
03:2d:d0:e1:88:fe:a7:d4:f1:73:97:40:23:55:8c:
33:4d:04:20:e2:a9:8d:21:f6:01:21:1d:d5:f6:97:
f9:bd:ed:99:fe:b1:44:d2:fd:a0:6f:88:14:c0:26:
62:93:e4:13:11:98:16:5c:f0:80:2b:07:6e:10:45:
c7:9d:5e:c5:ec:c9:3f:1b:4f:52:6c:a3:58:35:c9:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:BA:03:3A:A0:AC:0C:3F:89:EA:B9:F1:E1:10:F3:93:BF:72:5D
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/7Om6AzqgrAw_ieq58eEQ85O_cl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.4.0/24
193.31.252.0/23
193.134.160.0/20
193.135.102.0/23
193.246.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:5a:30:e7:42:29:53:db:9e:c8:37:d1:03:c4:c9:82:ea:de:
03:69:e4:30:73:e6:54:93:a4:cd:c6:ac:fa:0f:08:f1:83:e2:
33:f2:8f:4f:17:6b:56:95:2c:84:34:3c:43:a7:bc:df:81:6e:
18:1b:df:69:5b:46:68:54:6b:b6:dc:ac:4a:02:28:49:3a:dc:
83:e1:46:25:02:30:97:45:2f:82:75:1d:32:17:e1:ed:72:38:
30:ed:42:f6:6b:5d:b6:fd:9e:7d:1d:3e:40:33:89:a4:16:47:
09:33:d7:82:3b:46:20:20:3c:88:f5:cd:2d:78:37:dc:a0:e7:
a8:21:61:75:5d:46:d5:3d:45:1b:73:81:64:a4:62:dd:f8:d1:
a8:62:05:14:a9:9d:6f:ca:b6:a6:b9:10:ea:be:10:8b:4d:e9:
bc:01:93:0b:5a:a9:c9:df:6f:81:77:99:8f:c8:3b:3e:9b:23:
04:af:c7:55:2f:c2:aa:32:ec:29:7c:3b:0a:b1:73:65:d1:9f:
8e:ba:94:26:4c:63:ca:41:51:dc:0e:1a:6b:a3:51:5c:80:3f:
dc:1b:14:b4:5f:f0:d8:f2:78:fc:07:12:71:bd:63:2e:65:6f:
91:95:46:c6:1d:df:b4:d3:90:4f:85:da:b7:e4:3e:2c:43:a4:
52:ab:f1:a6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVteJE1aApVloRp13Vone5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWVmNGJkMjk3NmJmMjkyYWI3MzMwNDkwN2Y1MTBjZDAw
Y2M4YTIwHhcNMjMwMTAxMTMxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2U5YmEwMzNhYTBhYzBjM2Y4OWVhYjlmMWUxMTBmMzkzYmY3MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLCf+lwfsfn5WXHDQb09UPuwTtLP
J2XHdgi+sK9BYHKMuML8NZc36j4+RWNhGFnyk7lL4H2oYK3SHuIHOaWpAlwa+UHE
wUTHBk+6W8Pe6H4Ps3/o8CmWfvSQIKuVj+ET8z3Yxjlq03Xb2pFRRt+66EW5u+Dr
y1KIbEDjxJISjGLZLwxDPoXam4WMfma7ONt30XnEVH4L6PCXDie5bOFYKaqtBTU1
+Typwl4QBiIHmuUiBowDLdDhiP6n1PFzl0AjVYwzTQQg4qmNIfYBIR3V9pf5ve2Z
/rFE0v2gb4gUwCZik+QTEZgWXPCAKwduEEXHnV7F7Mk/G09SbKNYNclvuwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOzpugM6oKwMP4nqufHhEPOTv3JdMB8GA1UdIwQY
MBaAFHhe9L0pdr8pKrczBJB/UQzQDMiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmIt
N2Q0ZmE0Y2RjN2EyLzEvN09tNkF6cWdyQXdfaWVxNThlRVE4NU9fY2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmItN2Q0ZmE0Y2RjN2Ey
LzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwRoEAwQB
wR/8AwQEwYagAwQBwYdmAwQEwfbgMA0GCSqGSIb3DQEBCwUAA4IBAQAvWjDnQilT
257IN9EDxMmC6t4DaeQwc+ZUk6TNxqz6Dwjxg+Iz8o9PF2tWlSyENDxDp7zfgW4Y
G99pW0ZoVGu23KxKAihJOtyD4UYlAjCXRS+CdR0yF+Htcjgw7UL2a122/Z59HT5A
M4mkFkcJM9eCO0YgIDyI9c0teDfcoOeoIWF1XUbVPUUbc4FkpGLd+NGoYgUUqZ1v
yramuRDqvhCLTem8AZMLWqnJ32+Bd5mPyDs+myMEr8dVL8KqMuwpfDsKsXNl0Z+O
upQmTGPKQVHcDhpro1FcgD/cGxS0X/DY8nj8BxJxvWMuZW+RlUbGHd+005BPhdq3
5D4sQ6RSq/Gm
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:45 2023 by rpki-client on console.sobornost.net