Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QeJOU6sdBBVih6Gu1iQ72y1CjsE.roa
File: QeJOU6sdBBVih6Gu1iQ72y1CjsE.roa (raw, json)
Hash identifier: CmC3dulyvH5yDlnuBU7mUev+GFuAc64yPJG3p0V/rek=
Subject key identifier: 41:E2:4E:53:AB:1D:04:15:62:87:A1:AE:D6:24:3B:DB:2D:42:8E:C1
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01890252A547EFBCA5776FDE582AED3102E7
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QeJOU6sdBBVih6Gu1iQ72y1CjsE.roa
Signing time: Wed 28 Jun 2023 14:05:17 +0000
ROA not before: Wed 28 Jun 2023 14:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.143.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:52:a5:47:ef:bc:a5:77:6f:de:58:2a:ed:31:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 28 14:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e24e53ab1d04156287a1aed6243bdb2d428ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:76:1d:cf:f2:5f:de:75:c2:ad:59:7c:89:
ff:62:84:96:ed:97:60:5d:5b:8d:a3:88:7d:e2:ee:
94:e5:7b:3d:80:fc:d1:2f:3f:07:2f:6c:7a:9e:75:
d7:8d:81:a5:4e:ee:34:1f:3e:70:dd:6e:9b:5f:a0:
50:0d:75:fe:7c:41:c4:0b:84:84:5b:a6:e9:8c:82:
64:19:21:67:44:3f:cc:a7:5a:d6:06:2e:76:c1:a1:
7b:56:57:1e:07:4e:7a:7b:5c:6a:7a:11:23:b2:70:
bf:51:b3:4f:97:b8:e2:a2:2d:1a:61:d3:f2:c4:2e:
40:61:2d:18:72:90:56:ba:92:27:4a:a8:94:28:c9:
71:83:4f:91:af:f3:75:51:54:a5:e7:34:a6:1a:4b:
68:60:48:e4:6e:9b:76:37:d5:07:01:4d:a5:a8:3a:
ec:dd:e9:6f:bb:6f:fd:24:e6:ea:f0:7c:ca:91:f6:
ff:00:dc:70:f3:a8:b7:65:ca:ad:85:14:85:72:42:
1e:cd:54:b5:c0:42:f3:c4:01:22:d8:b0:71:1e:c9:
23:57:c7:93:07:cc:d8:2d:57:8d:82:6c:bd:f0:09:
ad:32:f2:ac:ff:2a:30:75:42:f1:5e:73:e6:62:b9:
b7:b5:2f:76:e7:f0:c7:7c:8d:20:d4:7b:e0:61:a5:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:4E:53:AB:1D:04:15:62:87:A1:AE:D6:24:3B:DB:2D:42:8E:C1
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QeJOU6sdBBVih6Gu1iQ72y1CjsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d5:31:04:cd:a9:b8:97:c5:7c:81:a6:82:c2:1a:51:32:7a:
ad:e7:e5:d9:58:98:f2:aa:1f:ae:e5:6f:7c:af:82:05:02:06:
69:22:ca:ce:c2:21:a8:e9:b8:90:74:44:51:d7:dc:e0:76:af:
0d:cc:c1:70:d6:e7:9f:4c:b8:9c:a8:e9:a6:82:5f:ff:fb:8e:
2b:5c:f6:46:0a:c1:9f:34:60:b7:5e:7d:3a:2c:2d:16:5a:01:
3c:78:1c:8c:a2:87:a1:d2:33:f8:9f:56:0f:6c:19:55:c6:32:
07:6e:cd:9b:e2:df:bd:c8:6b:6e:d8:9d:85:d1:82:3b:e4:ea:
0d:58:cd:69:47:3c:00:93:4c:4e:00:e9:cc:40:ec:f8:70:73:
a3:cc:28:a7:cc:ea:62:6c:7b:5a:fd:97:2d:1e:12:5b:85:af:
7c:39:bb:08:8e:bc:24:38:20:7d:00:36:88:a6:0e:8f:a0:24:
85:d4:f7:0b:78:f2:b3:e5:6d:b6:75:cd:d3:4c:91:63:d7:d1:
1d:fb:23:4c:ba:a4:c7:05:da:34:8b:d3:a6:16:e6:53:8c:9b:
79:d6:a2:84:ce:97:00:fc:8b:61:1a:5b:bf:c8:77:8e:91:19:
13:28:27:14:fd:d3:38:6f:f7:c7:2d:bb:c9:12:e6:cf:e4:90:
03:21:bf:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkCUqVH77yld2/eWCrtMQLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwNjI4MTQwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWUyNGU1M2FiMWQwNDE1NjI4N2ExYWVkNjI0M2JkYjJkNDI4ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOl2Hc/yX951wq1ZfIn/YoSW7Zdg
XVuNo4h94u6U5Xs9gPzRLz8HL2x6nnXXjYGlTu40Hz5w3W6bX6BQDXX+fEHEC4SE
W6bpjIJkGSFnRD/Mp1rWBi52waF7VlceB056e1xqehEjsnC/UbNPl7jioi0aYdPy
xC5AYS0YcpBWupInSqiUKMlxg0+Rr/N1UVSl5zSmGktoYEjkbpt2N9UHAU2lqDrs
3elvu2/9JObq8HzKkfb/ANxw86i3ZcqthRSFckIezVS1wELzxAEi2LBxHskjV8eT
B8zYLVeNgmy98AmtMvKs/yowdULxXnPmYrm3tS925/DHfI0g1HvgYaUokwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHiTlOrHQQVYoehrtYkO9stQo7BMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvUWVKT1U2c2RCQlZpaDZHdTFpUTcyeTFDanNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/ZMA0G
CSqGSIb3DQEBCwUAA4IBAQB41TEEzam4l8V8gaaCwhpRMnqt5+XZWJjyqh+u5W98
r4IFAgZpIsrOwiGo6biQdERR19zgdq8NzMFw1uefTLicqOmmgl//+44rXPZGCsGf
NGC3Xn06LC0WWgE8eByMooeh0jP4n1YPbBlVxjIHbs2b4t+9yGtu2J2F0YI75OoN
WM1pRzwAk0xOAOnMQOz4cHOjzCinzOpibHta/ZctHhJbha98ObsIjrwkOCB9ADaI
pg6PoCSF1PcLePKz5W22dc3TTJFj19Ed+yNMuqTHBdo0i9OmFuZTjJt51qKEzpcA
/IthGlu/yHeOkRkTKCcU/dM4b/fHLbvJEubP5JADIb+1
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net