Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/q_yCpUEXWiEJdHCZeRJYlNRnwCM.roa
File: q_yCpUEXWiEJdHCZeRJYlNRnwCM.roa (raw, json)
Hash identifier: pEojzJAxLaqxZSk0HK0taTKxyZFEuJnBNf6Ejs+8tn8=
Subject key identifier: AB:FC:82:A5:41:17:5A:21:09:74:70:99:79:12:58:94:D4:67:C0:23
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 0185708291BB79E174C3DE6A2572E0B342A2
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/q_yCpUEXWiEJdHCZeRJYlNRnwCM.roa
Signing time: Mon 02 Jan 2023 03:24:43 +0000
ROA not before: Mon 02 Jan 2023 03:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58111
IP address blocks: 193.47.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:91:bb:79:e1:74:c3:de:6a:25:72:e0:b3:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Jan 2 03:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abfc82a541175a210974709979125894d467c023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:c9:60:8a:aa:38:d8:32:ae:dd:ab:59:c9:
fe:94:fd:fb:c2:01:8c:59:5b:88:75:39:06:2c:a2:
79:aa:f4:28:47:bc:af:88:a2:89:f8:91:3e:cf:f6:
8e:14:bc:77:aa:a3:ee:35:a5:2d:dc:7b:e7:30:9e:
0a:4c:7f:2c:a3:28:36:5d:99:43:65:8c:d6:40:54:
1a:53:ae:2e:71:77:63:b0:52:13:5d:d0:05:33:6e:
71:e9:52:45:15:84:84:4d:cc:a4:13:51:c2:49:e4:
7a:15:93:6d:76:6d:3e:25:42:7c:f7:44:d8:6f:95:
ab:10:f7:7c:18:f3:56:b4:26:fd:2b:6e:16:a3:93:
11:33:d6:77:85:c0:d3:4a:23:e3:68:8f:c6:97:d2:
c1:17:5b:7d:ec:71:d8:83:2f:6e:53:14:e1:7b:63:
d2:35:16:fa:38:6a:1e:54:e5:0e:7b:83:10:a6:91:
fd:ff:34:fe:37:b3:58:cd:ab:56:5b:68:de:60:bd:
56:bd:3b:f0:15:55:34:ef:d7:7d:de:58:2f:85:0c:
f1:cd:22:9a:0d:20:24:87:ca:ce:7b:39:cc:e8:da:
96:83:10:70:92:b4:b3:96:0c:e2:cb:1c:5d:1b:cf:
78:70:bc:49:9d:42:be:6d:d5:3a:4a:84:6a:9a:32:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:82:A5:41:17:5A:21:09:74:70:99:79:12:58:94:D4:67:C0:23
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/q_yCpUEXWiEJdHCZeRJYlNRnwCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:06:cd:61:a7:22:30:6c:88:51:f4:8e:92:f9:95:73:7f:fd:
51:20:15:d0:80:e5:4b:50:9d:81:99:c1:93:71:bd:25:f3:ba:
04:c6:09:04:e3:c3:95:d1:14:ee:b7:dc:8b:3d:e0:e1:cf:e3:
f1:2e:d3:19:83:ab:7c:54:f9:4a:c6:f5:2f:d5:1e:12:2c:9d:
c5:28:d7:df:93:59:da:65:89:11:20:30:f3:68:c8:9c:8e:05:
a3:da:e1:ef:d0:76:cd:6d:a6:a0:5e:15:ec:0e:03:06:2c:18:
00:a1:08:57:ad:c2:26:f8:53:ab:3e:cb:81:1e:48:b9:fb:74:
e6:ec:11:eb:44:ee:bb:a4:e8:df:a4:f3:24:30:1f:52:5e:2a:
df:ed:72:b8:c3:bb:b2:f9:81:df:7a:4f:b2:10:aa:46:ff:8f:
42:a9:15:84:be:8d:f0:4f:67:f5:73:01:4e:fc:a8:a6:ca:98:
37:d9:69:5a:89:bd:26:9a:67:79:3d:58:45:6f:b2:a6:48:ae:
8a:a8:e2:8b:65:bb:1d:9d:b8:6b:52:bd:95:9a:44:b3:f5:9c:
8a:22:5a:de:f0:ab:fb:1f:a3:95:07:0e:0d:d7:f4:3a:12:8e:
42:5e:12:d7:1d:d9:65:52:87:00:0e:e3:be:a3:bb:0e:de:78:
d9:01:dd:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgpG7eeF0w95qJXLgs0KiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl
OGE1MjAwHhcNMjMwMTAyMDMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmZjODJhNTQxMTc1YTIxMDk3NDcwOTk3OTEyNTg5NGQ0NjdjMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZrJYIqqONgyrt2rWcn+lP37wgGM
WVuIdTkGLKJ5qvQoR7yviKKJ+JE+z/aOFLx3qqPuNaUt3HvnMJ4KTH8soyg2XZlD
ZYzWQFQaU64ucXdjsFITXdAFM25x6VJFFYSETcykE1HCSeR6FZNtdm0+JUJ890TY
b5WrEPd8GPNWtCb9K24Wo5MRM9Z3hcDTSiPjaI/Gl9LBF1t97HHYgy9uUxThe2PS
NRb6OGoeVOUOe4MQppH9/zT+N7NYzatWW2jeYL1WvTvwFVU079d93lgvhQzxzSKa
DSAkh8rOeznM6NqWgxBwkrSzlgziyxxdG894cLxJnUK+bdU6SoRqmjKxgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKv8gqVBF1ohCXRwmXkSWJTUZ8AjMB8GA1UdIwQY
MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt
MDNmNjA0MzI0ZmNmLzEvcV95Q3BVRVhXaUVKZEhDWmVSSllsTlJud0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm
LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS9HMA0G
CSqGSIb3DQEBCwUAA4IBAQDEBs1hpyIwbIhR9I6S+ZVzf/1RIBXQgOVLUJ2BmcGT
cb0l87oExgkE48OV0RTut9yLPeDhz+PxLtMZg6t8VPlKxvUv1R4SLJ3FKNffk1na
ZYkRIDDzaMicjgWj2uHv0HbNbaagXhXsDgMGLBgAoQhXrcIm+FOrPsuBHki5+3Tm
7BHrRO67pOjfpPMkMB9SXirf7XK4w7uy+YHfek+yEKpG/49CqRWEvo3wT2f1cwFO
/Kimypg32Wlaib0mmmd5PVhFb7KmSK6KqOKLZbsdnbhrUr2VmkSz9ZyKIlre8Kv7
H6OVBw4N1/Q6Eo5CXhLXHdllUocADuO+o7sO3njZAd3l
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:17 2024 by rpki-client on console.sobornost.net