Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7iNvlQE8vVDeMpb9rJ4G1_lslmE.roa
File: 7iNvlQE8vVDeMpb9rJ4G1_lslmE.roa (raw, json)
Hash identifier: DdkDaN4SMTw5KJayrlfiFCBNDmrTwrYecUbSQGEQY2M=
Subject key identifier: EE:23:6F:95:01:3C:BD:50:DE:32:96:FD:AC:9E:06:D7:F9:6C:96:61
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 0185FA59CE79D1F1F93C48A63AD0E9EE7D8C
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7iNvlQE8vVDeMpb9rJ4G1_lslmE.roa
Signing time: Sat 28 Jan 2023 21:47:47 +0000
ROA not before: Sat 28 Jan 2023 21:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31554
IP address blocks: 91.220.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:59:ce:79:d1:f1:f9:3c:48:a6:3a:d0:e9:ee:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Jan 28 21:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee236f95013cbd50de3296fdac9e06d7f96c9661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:11:04:95:fc:35:f1:18:9e:be:0a:14:54:
f8:4e:e9:17:68:44:13:29:56:77:f2:7a:25:69:13:
4a:fe:1c:98:fa:94:c1:15:5a:70:0a:6f:06:87:58:
90:d5:80:cb:b3:5f:a5:1c:c3:18:69:e9:cb:91:11:
de:fc:48:04:e8:90:96:3d:cb:2e:ac:4f:8b:2a:1a:
db:32:85:f1:c0:dd:76:e9:61:e6:a0:ed:f5:2c:a4:
1a:df:29:b9:70:b1:0b:c0:93:02:ad:9f:f1:74:3c:
78:42:51:b8:ec:76:83:7e:b8:31:88:90:7c:da:95:
fb:13:21:76:11:30:ac:5b:2d:05:82:ee:ca:c6:a5:
28:fb:2a:b3:65:1f:92:8c:2a:4b:98:61:3a:36:ed:
ea:da:52:33:10:55:ce:f1:52:80:f4:9e:74:6f:7d:
de:0f:ab:23:22:1f:4d:66:13:fb:e9:8a:94:88:9f:
cb:bc:22:b8:2f:f3:46:bd:de:54:c2:a6:ca:cf:ac:
e4:e6:19:c6:b2:0e:35:d9:11:30:2c:cb:73:f4:a1:
d0:44:61:60:b0:a3:f0:c8:31:ec:91:31:90:eb:dc:
dd:41:44:d2:17:8f:85:4b:c7:5a:0d:43:12:da:a2:
fc:a5:26:0b:f5:40:8a:6e:39:22:f4:db:fe:81:4d:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:6F:95:01:3C:BD:50:DE:32:96:FD:AC:9E:06:D7:F9:6C:96:61
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7iNvlQE8vVDeMpb9rJ4G1_lslmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.232.0/24
Signature Algorithm: sha256WithRSAEncryption
04:90:45:64:25:ec:16:af:9e:c0:e2:39:85:59:06:d1:0f:d6:
a0:d4:82:e3:a0:3e:a7:36:a5:24:a6:03:d1:82:e3:e4:b8:90:
21:a6:79:5a:9e:4a:46:07:82:14:47:29:ad:a0:d9:08:6a:86:
b9:1d:ee:83:0e:a2:93:0b:aa:0b:5e:9a:61:ab:47:55:73:4b:
03:23:bc:3f:e7:64:7f:fb:28:04:68:f1:19:48:15:2d:a8:81:
23:28:52:ed:06:f4:fe:63:88:cf:b2:21:90:8d:22:77:32:0b:
87:9f:cb:55:98:41:3f:d1:29:0f:64:22:dc:1a:54:82:8d:80:
25:42:0b:94:b3:cf:8f:45:b6:91:8e:bb:8e:cb:42:33:94:cb:
c6:60:c6:3a:43:52:48:cf:ef:bc:03:f0:32:db:91:e9:29:5a:
fc:fa:8e:e2:56:82:1e:1b:5d:6e:c1:84:7a:28:f0:77:de:61:
33:e5:17:cf:94:d7:c4:0a:12:82:6b:00:26:09:42:b7:4f:d1:
1c:9a:1d:a0:2f:94:6f:bf:02:f5:cb:ca:e4:24:7d:0b:e9:29:
bc:e1:03:c5:d1:08:40:bd:e8:f4:91:56:2f:d8:45:70:d8:7b:
28:ba:43:22:f9:99:12:50:ca:9d:29:9f:5c:a0:86:e9:41:d6:
ec:d9:51:db
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYX6Wc550fH5PEimOtDp7n2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5
YWFhOGYwHhcNMjMwMTI4MjE0NzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTIzNmY5NTAxM2NiZDUwZGUzMjk2ZmRhYzllMDZkN2Y5NmM5NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUgRBJX8NfEYnr4KFFT4TukXaEQT
KVZ38nolaRNK/hyY+pTBFVpwCm8Gh1iQ1YDLs1+lHMMYaenLkRHe/EgE6JCWPcsu
rE+LKhrbMoXxwN126WHmoO31LKQa3ym5cLELwJMCrZ/xdDx4QlG47HaDfrgxiJB8
2pX7EyF2ETCsWy0Fgu7KxqUo+yqzZR+SjCpLmGE6Nu3q2lIzEFXO8VKA9J50b33e
D6sjIh9NZhP76YqUiJ/LvCK4L/NGvd5UwqbKz6zk5hnGsg412REwLMtz9KHQRGFg
sKPwyDHskTGQ69zdQUTSF4+FS8daDUMS2qL8pSYL9UCKbjki9Nv+gU2knQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFO4jb5UBPL1Q3jKW/ayeBtf5bJZhMB8GA1UdIwQY
MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2
LTE5Nzc4Yzg3ZmVkNS8xLzdpTnZsUUU4dlZEZU1wYjlySjRHMV9sc2xtRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2LTE5Nzc4Yzg3ZmVk
NS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb3Ogw
DQYJKoZIhvcNAQELBQADggEBAASQRWQl7BavnsDiOYVZBtEP1qDUguOgPqc2pSSm
A9GC4+S4kCGmeVqeSkYHghRHKa2g2Qhqhrkd7oMOopMLqgtemmGrR1VzSwMjvD/n
ZH/7KARo8RlIFS2ogSMoUu0G9P5jiM+yIZCNIncyC4efy1WYQT/RKQ9kItwaVIKN
gCVCC5Szz49FtpGOu47LQjOUy8ZgxjpDUkjP77wD8DLbkekpWvz6juJWgh4bXW7B
hHoo8HfeYTPlF8+U18QKEoJrACYJQrdP0RyaHaAvlG+/AvXLyuQkfQvpKbzhA8XR
CEC96PSRVi/YRXDYeyi6QyL5mRJQyp0pn1yghulB1uzZUds=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:30 2024 by rpki-client on console.sobornost.net