Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/lKB1VXceY43ONzVZayVJv7Rho0c.roa
File: lKB1VXceY43ONzVZayVJv7Rho0c.roa (raw, json)
Hash identifier: R+ljxf2KdGJLuoTzoNq8nMrNYyetsN7hypL1MfAl7Fk=
Subject key identifier: 94:A0:75:55:77:1E:63:8D:CE:37:35:59:6B:25:49:BF:B4:61:A3:47
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 01856C25E388BCE2D455A326D70FBEFE5EED
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/lKB1VXceY43ONzVZayVJv7Rho0c.roa
Signing time: Sun 01 Jan 2023 07:05:00 +0000
ROA not before: Sun 01 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49382
IP address blocks: 134.255.248.0/24 maxlen: 24
185.233.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e3:88:bc:e2:d4:55:a3:26:d7:0f:be:fe:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Jan 1 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a07555771e638dce3735596b2549bfb461a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:d3:14:79:e8:db:53:40:9c:87:18:ba:82:
44:5d:2f:62:de:9e:54:d4:e9:dc:7c:d6:52:e1:a3:
a1:04:24:53:dc:54:ff:fe:99:58:3b:08:19:fa:94:
0b:88:f7:00:0e:95:6c:c1:9a:74:ca:3f:b7:b0:21:
16:13:3d:57:41:22:b5:43:fc:b5:e4:f6:45:7d:a8:
5b:fd:ba:47:2d:48:73:ef:cd:0c:8e:bf:16:fd:ed:
66:a9:4c:c3:3c:f1:fc:25:b3:18:70:7b:21:0f:d0:
53:71:d6:47:d9:b0:e8:3e:53:9b:e3:e9:22:35:51:
eb:e5:a1:e5:d8:67:93:60:eb:90:85:f9:06:97:13:
51:ab:d6:0c:1e:02:5a:c1:c4:44:28:33:ee:a1:ae:
65:4e:e9:e3:5d:9f:24:0b:e0:74:e2:d1:44:70:4f:
80:82:cf:6c:09:89:4a:22:c5:ff:ba:70:a0:a4:8c:
e4:19:24:1b:35:c9:a4:61:ae:a7:ae:a5:48:a5:fa:
49:db:26:95:56:ae:30:d3:2f:a0:17:a2:9c:e1:45:
28:c8:de:1c:85:37:45:2f:10:ea:17:d8:dc:a8:18:
35:02:0a:51:c0:ff:30:ca:5b:92:cf:24:c0:04:fa:
58:39:51:89:94:af:18:da:78:f4:51:e6:59:cf:5f:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:75:55:77:1E:63:8D:CE:37:35:59:6B:25:49:BF:B4:61:A3:47
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/lKB1VXceY43ONzVZayVJv7Rho0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.248.0/24
185.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
90:45:29:26:27:8a:09:81:7f:c4:10:92:76:10:ac:d3:31:78:
ef:b5:7d:f2:97:97:35:e9:fa:59:18:43:3b:e2:6c:43:20:14:
62:7e:4f:bc:c6:e3:9b:2d:04:75:3d:a1:75:c1:28:9d:1e:40:
82:5d:0d:a9:e9:b2:1f:d3:38:10:e7:f3:e0:d8:66:9d:1b:cb:
4c:98:04:5a:fa:13:2b:a6:95:9f:49:03:d4:3c:e8:0d:a7:65:
86:86:46:37:0c:fc:0f:57:18:68:13:aa:65:12:0c:cc:3e:06:
88:17:4f:f7:91:6c:a4:dd:ba:0b:9c:f4:de:91:b0:a6:10:cb:
b0:8d:2b:ce:6d:81:43:a4:d0:07:a5:cb:a6:1c:6a:9d:5b:e1:
dc:e7:7a:46:3c:f2:da:6d:32:e7:99:ec:e9:0d:0f:09:30:b0:
87:30:b2:8b:21:50:70:37:88:7d:6c:c9:61:59:4f:4a:40:66:
34:18:1c:38:9a:86:07:d8:92:b3:0c:5e:78:18:21:d6:86:b0:
29:d5:97:8d:a6:70:e6:3b:3e:6e:24:cc:00:b9:64:46:75:8d:
91:9e:82:9b:60:4c:80:b9:16:e4:4e:06:47:e9:c5:6d:e5:f7:
85:87:5c:85:2f:78:c8:27:96:84:d0:fc:10:08:1f:d4:ae:eb:
ba:54:4a:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsJeOIvOLUVaMm1w++/l7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw
MWQ1YjUwHhcNMjMwMTAxMDcwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGEwNzU1NTc3MWU2MzhkY2UzNzM1NTk2YjI1NDliZmI0NjFhMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFHTFHno21NAnIcYuoJEXS9i3p5U
1OncfNZS4aOhBCRT3FT//plYOwgZ+pQLiPcADpVswZp0yj+3sCEWEz1XQSK1Q/y1
5PZFfahb/bpHLUhz780Mjr8W/e1mqUzDPPH8JbMYcHshD9BTcdZH2bDoPlOb4+ki
NVHr5aHl2GeTYOuQhfkGlxNRq9YMHgJawcREKDPuoa5lTunjXZ8kC+B04tFEcE+A
gs9sCYlKIsX/unCgpIzkGSQbNcmkYa6nrqVIpfpJ2yaVVq4w0y+gF6Kc4UUoyN4c
hTdFLxDqF9jcqBg1AgpRwP8wyluSzyTABPpYOVGJlK8Y2nj0UeZZz1/VawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJSgdVV3HmONzjc1WWslSb+0YaNHMB8GA1UdIwQY
MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt
MjZjOWY5OTMyYmJjLzEvbEtCMVZYY2VZNDNPTnpWWmF5Vkp2N1JobzBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj
LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAhv/4AwQC
uelUMA0GCSqGSIb3DQEBCwUAA4IBAQCQRSkmJ4oJgX/EEJJ2EKzTMXjvtX3yl5c1
6fpZGEM74mxDIBRifk+8xuObLQR1PaF1wSidHkCCXQ2p6bIf0zgQ5/Pg2GadG8tM
mARa+hMrppWfSQPUPOgNp2WGhkY3DPwPVxhoE6plEgzMPgaIF0/3kWyk3boLnPTe
kbCmEMuwjSvObYFDpNAHpcumHGqdW+Hc53pGPPLabTLnmezpDQ8JMLCHMLKLIVBw
N4h9bMlhWU9KQGY0GBw4moYH2JKzDF54GCHWhrAp1ZeNpnDmOz5uJMwAuWRGdY2R
noKbYEyAuRbkTgZH6cVt5feFh1yFL3jIJ5aE0PwQCB/Uruu6VEo/
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:53 2024 by rpki-client on console.sobornost.net