Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/xwE5fDydbwwGKdWmxyiYueprG4Q.roa
File: xwE5fDydbwwGKdWmxyiYueprG4Q.roa (raw, json)
Hash identifier: SxbRDfxyj7LoOJl64W/WsRibPy6Cja7CrMa7fdeCCkI=
Subject key identifier: C7:01:39:7C:3C:9D:6F:0C:06:29:D5:A6:C7:28:98:B9:EA:6B:1B:84
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 01856F2FF8376417E336CBE835D29D60C9DC
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/xwE5fDydbwwGKdWmxyiYueprG4Q.roa
Signing time: Sun 01 Jan 2023 21:14:52 +0000
ROA not before: Sun 01 Jan 2023 21:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48067
IP address blocks: 93.113.192.0/21 maxlen: 21
185.251.30.0/23 maxlen: 23
185.251.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f8:37:64:17:e3:36:cb:e8:35:d2:9d:60:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Jan 1 21:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c701397c3c9d6f0c0629d5a6c72898b9ea6b1b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:36:18:0b:cf:c1:58:34:aa:17:53:29:96:
76:00:d6:9f:08:9c:01:9b:57:79:ff:02:e1:1a:d1:
70:52:cc:ad:33:8f:77:7b:fe:80:e3:59:95:99:6e:
0c:cc:34:9d:21:35:cc:70:b8:74:f2:e7:59:df:3f:
0d:dc:c5:5b:ac:53:9e:37:7a:7a:29:7b:d4:f7:8e:
7c:7c:05:4f:c8:54:4e:8d:d6:ec:af:91:c1:9d:7d:
af:d1:8f:8a:78:39:db:2e:81:dd:09:a7:f5:04:fb:
70:88:9a:58:d2:33:57:b8:7f:56:14:11:8c:3e:d6:
ee:10:d1:f0:29:c4:a2:88:9a:a9:d7:59:d6:6d:fc:
ea:0e:b7:43:7e:b4:22:f3:a7:e1:b3:5a:ff:e8:b4:
2e:17:ab:61:50:66:a6:09:3c:1a:b2:ad:ae:63:3e:
4c:b6:91:23:f4:65:52:f3:79:02:58:77:90:1a:10:
f8:d2:f6:d9:0c:91:38:ca:b8:11:88:c7:0d:91:ad:
00:bd:e1:8c:e0:31:b0:86:bb:af:e5:06:a5:d5:76:
ee:e7:b7:ff:9a:06:d7:c7:4f:68:c9:74:b6:50:25:
65:06:56:2e:7b:ce:62:76:b7:98:fe:61:44:e1:47:
80:27:c1:d3:bf:f1:39:32:33:55:22:a2:ad:20:b1:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:39:7C:3C:9D:6F:0C:06:29:D5:A6:C7:28:98:B9:EA:6B:1B:84
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/xwE5fDydbwwGKdWmxyiYueprG4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.192.0/21
185.251.28.0/22
Signature Algorithm: sha256WithRSAEncryption
06:79:f8:c3:31:ad:43:38:0d:27:0a:6c:b0:60:e6:f2:b8:92:
c9:d4:57:63:5b:5d:89:3f:aa:ee:05:91:fe:51:a1:31:8f:4d:
66:45:82:15:eb:9c:a7:f4:a1:a4:6c:f9:6b:b9:41:d9:63:e7:
e2:4b:0e:e3:de:b1:ac:c9:e4:9c:72:6d:7c:42:62:6d:10:7e:
1e:59:de:fb:b1:60:ae:8f:d9:2c:19:11:5c:d5:99:19:8b:b6:
7e:da:13:f7:06:2d:0a:e6:09:bd:96:66:60:bc:1e:be:2b:d7:
c0:36:1d:62:c9:d6:e1:b1:c4:c1:2e:2e:1e:c3:46:34:26:bf:
bb:c8:8b:11:86:17:e2:c5:8d:68:70:84:5e:9f:69:d3:4b:f9:
58:00:80:31:8d:1f:c6:95:9f:8a:0e:ba:67:68:8a:94:51:4c:
55:12:ff:e5:07:58:b0:29:c5:32:90:80:3d:19:c7:2d:97:18:
dc:1b:e1:91:f6:dd:5b:ce:d6:89:65:53:ef:f9:f0:fa:78:95:
74:76:94:5e:05:c5:14:d0:79:6b:29:84:4c:1e:f9:84:15:89:
96:3e:88:3e:2e:5b:15:cc:5f:46:4f:ad:12:7d:db:0f:cb:97:
1d:0a:73:6a:70:f7:dc:a6:66:ff:e3:99:b9:d3:e7:8a:2e:75:
f7:94:49:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvL/g3ZBfjNsvoNdKdYMncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGJkNjQ5MDczNjQ2YzFmNGMzYjAxY2FjYWE3MmUyMDll
OWRhZmYwHhcNMjMwMTAxMjExNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzAxMzk3YzNjOWQ2ZjBjMDYyOWQ1YTZjNzI4OThiOWVhNmIxYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDQ2GAvPwVg0qhdTKZZ2ANafCJwB
m1d5/wLhGtFwUsytM493e/6A41mVmW4MzDSdITXMcLh08udZ3z8N3MVbrFOeN3p6
KXvU9458fAVPyFROjdbsr5HBnX2v0Y+KeDnbLoHdCaf1BPtwiJpY0jNXuH9WFBGM
PtbuENHwKcSiiJqp11nWbfzqDrdDfrQi86fhs1r/6LQuF6thUGamCTwasq2uYz5M
tpEj9GVS83kCWHeQGhD40vbZDJE4yrgRiMcNka0AveGM4DGwhruv5Qal1Xbu57f/
mgbXx09oyXS2UCVlBlYue85idreY/mFE4UeAJ8HTv/E5MjNVIqKtILHqZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMcBOXw8nW8MBinVpscomLnqaxuEMB8GA1UdIwQY
MBaAFGeL1kkHNkbB9MOwHKyqcuIJ6dr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2Ut
ZWQ3OGNiNzY2NjFjLzEveHdFNWZEeWRid3dHS2RXbXh5aVl1ZXByRzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2UtZWQ3OGNiNzY2NjFj
LzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXXHAAwQC
ufscMA0GCSqGSIb3DQEBCwUAA4IBAQAGefjDMa1DOA0nCmywYObyuJLJ1FdjW12J
P6ruBZH+UaExj01mRYIV65yn9KGkbPlruUHZY+fiSw7j3rGsyeSccm18QmJtEH4e
Wd77sWCuj9ksGRFc1ZkZi7Z+2hP3Bi0K5gm9lmZgvB6+K9fANh1iydbhscTBLi4e
w0Y0Jr+7yIsRhhfixY1ocIRen2nTS/lYAIAxjR/GlZ+KDrpnaIqUUUxVEv/lB1iw
KcUykIA9GcctlxjcG+GR9t1bztaJZVPv+fD6eJV0dpReBcUU0HlrKYRMHvmEFYmW
Pog+LlsVzF9GT60SfdsPy5cdCnNqcPfcpmb/45m50+eKLnX3lEnx
-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:05 2024 by rpki-client on console.sobornost.net