Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/kS4dkZxcqdw4gBxlq5mXXA6bHr8.roa
File: kS4dkZxcqdw4gBxlq5mXXA6bHr8.roa (raw, json)
Hash identifier: rYPQNvxvL8ltUmyAAjqLqMhv2PNm40B6/Zz7giHjbGk=
Subject key identifier: 91:2E:1D:91:9C:5C:A9:DC:38:80:1C:65:AB:99:97:5C:0E:9B:1E:BF
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 01856E6FCE7EF6B32708ED5B09D9DC4F8760
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/kS4dkZxcqdw4gBxlq5mXXA6bHr8.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 195.93.197.0/24 maxlen: 24
195.93.196.0/24 maxlen: 24
95.130.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ce:7e:f6:b3:27:08:ed:5b:09:d9:dc:4f:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912e1d919c5ca9dc38801c65ab99975c0e9b1ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:3d:05:ac:d7:31:de:b4:7d:93:52:c7:af:
53:bd:0b:14:6b:36:b1:2a:b7:5e:cb:05:4b:04:78:
18:f9:06:1c:59:40:c9:45:dd:e6:a0:99:39:cd:26:
c8:af:a1:4d:b9:e3:af:2c:da:88:f0:50:5e:0a:5c:
7e:49:9b:d9:ef:00:a2:69:7b:17:a4:c2:b8:61:7e:
bd:1a:bb:19:25:bd:02:09:fd:f4:32:a3:54:12:54:
02:85:b6:ae:36:8b:fc:8c:e4:5a:4a:2a:a9:c8:89:
97:a1:0f:f9:4b:a0:f8:3d:d8:1e:56:71:93:f9:23:
28:a0:b2:bd:f8:15:56:d3:bc:9d:38:69:65:27:8d:
a9:58:0f:a3:f5:60:35:75:da:5f:a8:a0:02:34:b9:
1f:5d:56:d2:5f:63:fc:08:ec:2a:b7:61:d4:7c:fb:
40:ca:96:43:93:52:27:27:39:48:1d:57:6c:28:a5:
6c:b7:e0:8a:2f:44:54:a0:a7:ca:20:dd:9d:90:a6:
6f:8b:52:d3:27:c9:55:9a:bf:73:47:57:69:fd:2d:
7d:3a:05:bf:fa:89:cb:1c:57:1d:7f:37:60:2c:b2:
ca:28:bc:41:8e:b3:06:c0:f3:b3:cb:3b:2b:7e:33:
b9:03:b6:2b:6d:a8:ce:d0:02:2d:9b:a3:51:43:56:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:1D:91:9C:5C:A9:DC:38:80:1C:65:AB:99:97:5C:0E:9B:1E:BF
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/kS4dkZxcqdw4gBxlq5mXXA6bHr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.110.0/24
195.93.196.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:67:99:3c:61:2e:10:3b:f2:9f:88:75:a2:2f:7f:86:f3:a3:
11:b6:d3:30:8b:12:7c:50:e3:0d:f4:3d:77:bc:57:8a:fd:28:
64:bd:d1:a4:88:81:55:b2:7d:a1:70:98:f5:e4:ee:e2:16:0c:
99:7a:6a:6a:e9:a0:3c:fb:09:dc:30:26:bd:d2:35:d0:a1:9d:
3a:54:6b:3d:39:58:aa:3e:33:6b:97:9b:dd:46:ce:0a:75:b4:
1b:50:15:18:73:e3:8f:49:0e:8b:29:89:4e:84:6a:c9:44:b1:
3e:c3:c3:88:e2:80:f9:e4:6c:4c:ac:dd:81:ad:57:e2:e0:d8:
4a:5e:b7:40:e0:34:f3:c9:b7:47:3f:bb:88:43:18:23:5a:4a:
57:3c:39:3f:d2:23:36:9d:68:27:85:59:6c:dd:b9:a4:fe:b7:
fe:c7:1a:dc:9d:d6:ea:4d:9a:df:2f:59:8f:c7:38:7b:62:74:
97:69:3c:dc:c3:b9:94:5c:74:5e:66:40:2f:67:fb:09:65:dd:
46:29:ec:d2:9f:bd:cf:3d:c5:c6:dc:1d:16:b9:04:40:60:df:
5f:c5:fd:77:f4:ec:9c:3c:ce:d3:03:32:ca:56:af:47:73:51:
56:69:97:37:94:0d:2e:a0:4d:34:d9:89:cd:2a:6e:57:31:cc:
07:a9:d8:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVub85+9rMnCO1bCdncT4dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk
MGRjYmMwHhcNMjMwMTAxMTc0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTJlMWQ5MTljNWNhOWRjMzg4MDFjNjVhYjk5OTc1YzBlOWIxZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F89BazXMd60fZNSx69TvQsUazax
KrdeywVLBHgY+QYcWUDJRd3moJk5zSbIr6FNueOvLNqI8FBeClx+SZvZ7wCiaXsX
pMK4YX69GrsZJb0CCf30MqNUElQChbauNov8jORaSiqpyImXoQ/5S6D4PdgeVnGT
+SMooLK9+BVW07ydOGllJ42pWA+j9WA1ddpfqKACNLkfXVbSX2P8COwqt2HUfPtA
ypZDk1InJzlIHVdsKKVst+CKL0RUoKfKIN2dkKZvi1LTJ8lVmr9zR1dp/S19OgW/
+onLHFcdfzdgLLLKKLxBjrMGwPOzyzsrfjO5A7YrbajO0AItm6NRQ1aBTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJEuHZGcXKncOIAcZauZl1wOmx6/MB8GA1UdIwQY
MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt
YzUyZGY0YWE1MjFkLzEva1M0ZGtaeGNxZHc0Z0J4bHE1bVhYQTZiSHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk
LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4JuAwQB
w13EMA0GCSqGSIb3DQEBCwUAA4IBAQDkZ5k8YS4QO/KfiHWiL3+G86MRttMwixJ8
UOMN9D13vFeK/ShkvdGkiIFVsn2hcJj15O7iFgyZempq6aA8+wncMCa90jXQoZ06
VGs9OViqPjNrl5vdRs4KdbQbUBUYc+OPSQ6LKYlOhGrJRLE+w8OI4oD55GxMrN2B
rVfi4NhKXrdA4DTzybdHP7uIQxgjWkpXPDk/0iM2nWgnhVls3bmk/rf+xxrcndbq
TZrfL1mPxzh7YnSXaTzcw7mUXHReZkAvZ/sJZd1GKezSn73PPcXG3B0WuQRAYN9f
xf139OycPM7TAzLKVq9Hc1FWaZc3lA0uoE002YnNKm5XMcwHqdjl
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net