Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/AL8k_gV6iLtodW7epE40xycG9Ag.roa
File: AL8k_gV6iLtodW7epE40xycG9Ag.roa (raw, json)
Hash identifier: CGnEs1oYS/CYC6nS1n7cTiERk9uXfXbxnYqry001uIk=
Subject key identifier: 00:BF:24:FE:05:7A:88:BB:68:75:6E:DE:A4:4E:34:C7:27:06:F4:08
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0187BD3AD488DBB3C91ECA0C9E5151DAAD9F
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/AL8k_gV6iLtodW7epE40xycG9Ag.roa
Signing time: Wed 26 Apr 2023 11:02:41 +0000
ROA not before: Wed 26 Apr 2023 11:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8903
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
185.123.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3a:d4:88:db:b3:c9:1e:ca:0c:9e:51:51:da:ad:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 26 11:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00bf24fe057a88bb68756edea44e34c72706f408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:59:21:12:3c:c6:c2:77:7e:c5:81:14:bf:
40:c2:58:32:56:41:f6:cd:17:9d:b5:a2:26:a6:6b:
cf:00:a0:57:3f:39:31:88:88:7b:bf:ce:00:f1:3b:
28:e6:08:ef:be:55:7c:74:c4:7d:aa:6a:71:e7:07:
57:41:d3:69:7b:aa:79:8f:e1:93:06:c1:64:98:30:
86:31:6a:f4:6f:2b:1c:bc:c1:1a:68:12:c8:fb:d2:
f5:7c:ea:20:03:68:09:78:7c:77:aa:6b:30:dc:88:
d3:2c:56:40:1c:d9:9c:ab:68:e0:dc:5f:0c:a9:24:
52:88:99:e5:3f:73:7a:2a:6e:1e:0e:60:07:8b:11:
fc:fc:cf:97:bc:a3:52:ba:03:0f:2c:e9:2b:1d:61:
e8:08:41:53:b2:83:6c:b1:e1:0c:32:6d:c6:46:d1:
00:c8:90:9d:0d:77:ec:50:36:52:4c:84:d9:3b:e7:
5f:2a:b9:9a:1c:a6:11:47:24:76:be:fc:84:7f:37:
6a:ff:03:f9:e8:43:cd:51:9c:62:73:5b:bc:df:b6:
bd:79:13:7d:98:4c:80:22:5b:bc:d9:49:a9:de:a8:
43:24:51:b0:9b:d4:dc:fa:e8:d5:8c:66:63:eb:67:
01:9d:85:c2:87:7b:87:d0:8a:25:f6:36:84:a1:3c:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BF:24:FE:05:7A:88:BB:68:75:6E:DE:A4:4E:34:C7:27:06:F4:08
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/AL8k_gV6iLtodW7epE40xycG9Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
05:ee:72:09:dc:52:6f:05:3b:4a:f9:49:c0:2e:f5:7e:a2:42:
e3:79:c9:84:a4:dc:ba:b2:b6:17:37:ac:6e:cb:b7:8d:10:a2:
17:d1:8a:c6:e0:c3:5c:e7:3a:7f:2f:aa:64:dc:e3:5b:4d:6b:
c5:c2:2c:00:d0:40:fe:54:17:d7:dc:75:41:f2:18:fc:f7:2a:
53:5e:a4:c7:ae:ea:d1:a0:ae:d7:a7:d1:da:fd:c5:1b:d4:db:
8d:62:e3:d2:3f:b4:fa:46:3c:a9:e1:c5:79:61:34:30:be:17:
7e:83:11:d8:f1:9f:8d:47:ce:0f:72:73:a2:8e:40:f6:e9:85:
7d:c6:28:56:9c:69:19:52:69:51:ea:47:1b:7f:f1:a7:8d:a1:
c0:9f:33:e5:2b:90:3c:1e:fb:57:d4:9e:c2:be:33:d5:b6:7f:
c4:72:c9:52:97:55:c7:d2:a8:bb:8e:57:07:0f:61:97:96:65:
cb:4a:4d:ef:53:01:d8:f3:71:fe:4f:f1:b4:7e:7b:6a:e1:33:
81:d7:0e:ac:79:8a:e9:bf:2f:9a:53:e0:c1:ad:ca:a8:0a:80:
0e:c4:2b:e4:1c:4e:d4:ff:a9:f7:ac:f9:ea:fb:60:c0:2a:20:
9d:52:80:c2:70:be:c8:6b:f9:43:fb:cc:b1:4c:88:3e:e9:f4:
60:88:c6:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYe9OtSI27PJHsoMnlFR2q2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjMwNDI2MTEwMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGJmMjRmZTA1N2E4OGJiNjg3NTZlZGVhNDRlMzRjNzI3MDZmNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1ZIRI8xsJ3fsWBFL9AwlgyVkH2
zRedtaImpmvPAKBXPzkxiIh7v84A8Tso5gjvvlV8dMR9qmpx5wdXQdNpe6p5j+GT
BsFkmDCGMWr0byscvMEaaBLI+9L1fOogA2gJeHx3qmsw3IjTLFZAHNmcq2jg3F8M
qSRSiJnlP3N6Km4eDmAHixH8/M+XvKNSugMPLOkrHWHoCEFTsoNsseEMMm3GRtEA
yJCdDXfsUDZSTITZO+dfKrmaHKYRRyR2vvyEfzdq/wP56EPNUZxic1u837a9eRN9
mEyAIlu82Ump3qhDJFGwm9Tc+ujVjGZj62cBnYXCh3uH0Iol9jaEoTw02QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAC/JP4Feoi7aHVu3qRONMcnBvQIMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvQUw4a19nVjZpTHRvZFc3ZXBFNDB4eWNHOUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuXt4AwQF
1FCgAwQF1aogMA0GCSqGSIb3DQEBCwUAA4IBAQAF7nIJ3FJvBTtK+UnALvV+okLj
ecmEpNy6srYXN6xuy7eNEKIX0YrG4MNc5zp/L6pk3ONbTWvFwiwA0ED+VBfX3HVB
8hj89ypTXqTHrurRoK7Xp9Ha/cUb1NuNYuPSP7T6Rjyp4cV5YTQwvhd+gxHY8Z+N
R84PcnOijkD26YV9xihWnGkZUmlR6kcbf/GnjaHAnzPlK5A8HvtX1J7CvjPVtn/E
cslSl1XH0qi7jlcHD2GXlmXLSk3vUwHY83H+T/G0fntq4TOB1w6seYrpvy+aU+DB
rcqoCoAOxCvkHE7U/6n3rPnq+2DAKiCdUoDCcL7Ia/lD+8yxTIg+6fRgiMZ/
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net