Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/CooCY8mFtFQN8-srbvjeZnHA9ZA.roa
File: CooCY8mFtFQN8-srbvjeZnHA9ZA.roa (raw, json)
Hash identifier: O9+WHM7yPvEKRUAvhNnFzExF4H2s2gMTlgyh/OH4Vsw=
Subject key identifier: 0A:8A:02:63:C9:85:B4:54:0D:F3:EB:2B:6E:F8:DE:66:71:C0:F5:90
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 018C62A7273129D5512763473DA98496F551
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/CooCY8mFtFQN8-srbvjeZnHA9ZA.roa
Signing time: Wed 13 Dec 2023 10:09:30 +0000
ROA not before: Wed 13 Dec 2023 10:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51859
IP address blocks: 87.237.204.0/24 maxlen: 24
87.237.204.0/22 maxlen: 24
87.237.200.0/21 maxlen: 24
87.237.201.0/24 maxlen: 24
87.237.202.0/23 maxlen: 24
87.237.203.0/24 maxlen: 24
185.29.100.0/22 maxlen: 24
92.249.52.0/22 maxlen: 22
92.249.52.0/24 maxlen: 24
91.222.4.0/22 maxlen: 24
2a04:2e40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:a7:27:31:29:d5:51:27:63:47:3d:a9:84:96:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Dec 13 10:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8a0263c985b4540df3eb2b6ef8de6671c0f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:93:df:9c:cd:49:37:94:cf:9e:d7:0b:50:
d7:b6:08:ac:80:02:c5:c9:86:7e:5e:26:31:e8:4b:
48:c4:e0:0f:65:3f:7c:58:d0:dd:b9:ea:57:12:f5:
e9:be:64:51:33:6b:28:a1:e8:fb:a8:55:58:ec:70:
af:9c:d1:94:96:1e:0d:5d:b6:df:f0:fa:ba:65:00:
10:f7:5c:15:9c:b3:03:df:e6:1c:c9:3f:45:19:c1:
c0:50:14:e3:30:df:df:bb:f6:05:b4:d3:3e:97:bf:
45:a0:69:92:e1:93:1b:12:b3:f1:37:9c:1b:49:57:
fc:16:9c:5d:b0:c5:20:da:c6:09:92:d7:c3:64:c9:
24:1d:78:e5:01:03:bb:10:36:af:c7:13:17:56:f6:
5b:f1:8b:9e:3d:da:29:4e:6f:e4:a0:2d:b5:c3:0d:
df:44:37:71:da:d9:39:bc:b6:ed:fa:b0:73:7d:51:
5e:d7:99:07:0c:be:82:a9:c1:c7:5a:25:49:71:2a:
32:94:c5:1d:5e:94:8e:07:eb:d4:84:ec:57:04:29:
df:c8:12:7f:59:51:38:48:ce:32:17:6f:bf:f2:84:
84:87:db:3e:79:38:d6:78:60:5f:58:ce:6b:d9:c4:
7a:90:ae:39:48:d1:b1:cc:a3:c5:a8:bc:01:11:e4:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:02:63:C9:85:B4:54:0D:F3:EB:2B:6E:F8:DE:66:71:C0:F5:90
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/CooCY8mFtFQN8-srbvjeZnHA9ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/21
91.222.4.0/22
92.249.52.0/22
185.29.100.0/22
IPv6:
2a04:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
25:6c:7a:57:5c:b8:9a:09:5b:4f:58:cd:0f:2a:84:dd:9a:d2:
b5:a5:f8:6f:57:a7:ac:31:b5:1c:4e:f7:ad:d0:d1:14:df:f8:
0a:a3:93:a1:e5:32:c5:15:6d:53:b0:7a:2c:93:9d:95:62:e2:
22:34:7f:22:b2:94:97:6c:25:01:3b:d8:3a:8f:46:eb:9a:8d:
cb:e5:76:88:ab:4c:66:79:07:5c:0e:cc:51:8d:88:d5:bf:e5:
85:e5:30:a6:b5:2a:08:5e:a1:f4:d2:c3:e8:d5:94:77:f5:a7:
04:f8:37:f9:86:e5:36:a1:ef:93:d1:5b:bd:76:94:20:ec:e3:
5d:16:b0:2a:d2:6c:ca:17:36:72:18:4b:7d:00:be:f9:f0:1c:
0a:a4:b0:7c:24:ea:d4:87:0b:4c:cd:be:91:9f:a7:fd:20:74:
32:23:9f:5b:9b:d8:b3:3d:8f:05:79:ea:68:e9:0c:f0:03:2a:
1e:54:38:65:ab:ae:af:e7:9e:89:ab:f8:40:2d:f1:58:b4:3a:
0f:60:2d:6a:ef:06:5a:a4:9f:8d:36:e4:2e:ce:ca:80:34:0a:
02:6d:b5:f5:2f:5f:16:38:3f:e7:59:8e:4a:90:7d:1c:a0:de:
04:b7:e8:3d:3e:a7:31:36:b2:f7:f4:3f:3f:cf:c8:c7:e4:1a:
ea:32:a6:f4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYxipycxKdVRJ2NHPamElvVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjMxMjEzMTAwOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYThhMDI2M2M5ODViNDU0MGRmM2ViMmI2ZWY4ZGU2NjcxYzBmNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqGT35zNSTeUz57XC1DXtgisgALF
yYZ+XiYx6EtIxOAPZT98WNDduepXEvXpvmRRM2sooej7qFVY7HCvnNGUlh4NXbbf
8Pq6ZQAQ91wVnLMD3+YcyT9FGcHAUBTjMN/fu/YFtNM+l79FoGmS4ZMbErPxN5wb
SVf8FpxdsMUg2sYJktfDZMkkHXjlAQO7EDavxxMXVvZb8YuePdopTm/koC21ww3f
RDdx2tk5vLbt+rBzfVFe15kHDL6CqcHHWiVJcSoylMUdXpSOB+vUhOxXBCnfyBJ/
WVE4SM4yF2+/8oSEh9s+eTjWeGBfWM5r2cR6kK45SNGxzKPFqLwBEeRUSQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAqKAmPJhbRUDfPrK2743mZxwPWQMB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvQ29vQ1k4bUZ0RlFOOC1zcmJ2amVabkhBOVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDV+3IAwQC
W94EAwQCXPk0AwQCuR1kMA0EAgACMAcDBQMqBC5AMA0GCSqGSIb3DQEBCwUAA4IB
AQAlbHpXXLiaCVtPWM0PKoTdmtK1pfhvV6esMbUcTvet0NEU3/gKo5Oh5TLFFW1T
sHosk52VYuIiNH8ispSXbCUBO9g6j0brmo3L5XaIq0xmeQdcDsxRjYjVv+WF5TCm
tSoIXqH00sPo1ZR39acE+Df5huU2oe+T0Vu9dpQg7ONdFrAq0mzKFzZyGEt9AL75
8BwKpLB8JOrUhwtMzb6Rn6f9IHQyI59bm9izPY8Feepo6QzwAyoeVDhlq66v556J
q/hALfFYtDoPYC1q7wZapJ+NNuQuzsqANAoCbbX1L18WOD/nWY5KkH0coN4Et+g9
PqcxNrL39D8/z8jH5BrqMqb0
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net