Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/psYfueq3IS1ammy7BWWclrIxHrs.roa
File: psYfueq3IS1ammy7BWWclrIxHrs.roa (raw, json)
Hash identifier: HjyLA8iSVWjN4vsza67egZ88E+kOTa7Z6PQCQ55+1MY=
Subject key identifier: A6:C6:1F:B9:EA:B7:21:2D:5A:9A:6C:BB:05:65:9C:96:B2:31:1E:BB
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0185703997A793A10BF686C08629A65C7D03
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/psYfueq3IS1ammy7BWWclrIxHrs.roa
Signing time: Mon 02 Jan 2023 02:05:00 +0000
ROA not before: Mon 02 Jan 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 95.107.152.0/22 maxlen: 22
95.107.151.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:97:a7:93:a1:0b:f6:86:c0:86:29:a6:5c:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c61fb9eab7212d5a9a6cbb05659c96b2311ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:af:ac:bc:cb:6e:9e:d3:ef:d6:ac:7d:61:
66:62:a9:0d:96:a7:db:90:5c:3b:da:e2:57:d8:03:
99:1b:78:af:4b:9c:a3:21:72:bd:d8:d0:d5:e5:7d:
1b:7d:06:2f:2c:76:29:6f:a5:ce:47:69:46:69:fd:
9f:5b:dd:a7:52:cd:78:70:83:20:3d:04:7d:fc:e8:
3b:ad:9b:29:c8:49:7b:79:d4:51:b0:ee:4c:73:ff:
06:c6:bb:62:75:aa:67:aa:55:35:5e:0f:8c:eb:ee:
41:b4:e2:d2:e4:ed:08:b6:35:77:81:e7:6a:7f:21:
7e:dd:85:5e:ee:09:e0:29:54:47:1c:65:d3:9c:ef:
f0:68:39:38:73:26:34:61:88:3e:83:f5:98:f7:56:
55:4d:4e:87:a3:39:fc:76:21:0c:fa:b3:48:01:ad:
95:32:5a:39:ae:6b:c7:36:24:22:b9:97:db:06:b6:
0c:27:a1:bb:c8:f2:24:09:80:87:47:76:8f:4f:9c:
36:20:07:d9:34:9e:3e:d1:00:de:48:4e:18:ef:04:
83:05:13:eb:62:c0:92:81:65:4b:5e:3f:f7:b0:28:
41:e6:99:a2:48:8a:17:a2:c8:f9:80:b0:cf:39:23:
28:fd:26:12:c3:e4:69:68:37:34:e5:22:c8:cf:2e:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:1F:B9:EA:B7:21:2D:5A:9A:6C:BB:05:65:9C:96:B2:31:1E:BB
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/psYfueq3IS1ammy7BWWclrIxHrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.107.150.0-95.107.155.255
Signature Algorithm: sha256WithRSAEncryption
37:13:70:d1:73:ea:93:ec:c0:4f:27:4c:bf:a6:76:f8:55:74:
45:86:9d:16:03:0a:9e:f8:a1:aa:b2:33:8f:40:a7:08:1e:78:
3a:60:26:7f:f4:f4:a2:0a:ba:87:e7:92:b0:f7:41:a9:17:1d:
d9:e2:4b:00:00:bf:48:eb:c9:e1:e4:78:3a:7d:f4:d6:a7:bb:
e9:74:64:a5:fd:6d:7f:e8:98:39:0d:53:fb:1b:69:31:5c:b8:
06:2c:48:94:ee:23:3c:44:fb:15:3f:f7:13:85:49:c4:49:49:
97:24:7d:b6:61:a2:04:48:72:6b:67:44:dd:ff:f1:4e:d2:e8:
a9:a8:ab:17:4b:a2:61:0e:50:16:7d:9b:43:70:b0:8f:66:6b:
5e:31:b8:91:9c:8b:65:53:e6:53:f9:c1:68:19:aa:d4:f2:20:
35:fe:1e:50:cb:09:90:02:4a:f9:7b:5d:cd:6d:81:b7:68:42:
0b:fc:f7:6d:c3:8c:75:4c:ed:84:92:2d:00:17:b9:79:30:2b:
8f:92:c0:1d:4d:0b:c2:fb:18:5a:81:81:91:7f:e3:5e:4e:6c:
03:eb:99:17:05:c5:77:bd:1c:09:24:3d:a7:a2:f7:c3:34:25:
0d:a1:79:97:51:d3:3f:12:82:1b:04:c3:a8:df:c1:54:28:3d:
e9:96:fd:20
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwOZenk6EL9obAhimmXH0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjMwMTAyMDIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmM2MWZiOWVhYjcyMTJkNWE5YTZjYmIwNTY1OWM5NmIyMzExZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWWvrLzLbp7T79asfWFmYqkNlqfb
kFw72uJX2AOZG3ivS5yjIXK92NDV5X0bfQYvLHYpb6XOR2lGaf2fW92nUs14cIMg
PQR9/Og7rZspyEl7edRRsO5Mc/8GxrtidapnqlU1Xg+M6+5BtOLS5O0ItjV3gedq
fyF+3YVe7gngKVRHHGXTnO/waDk4cyY0YYg+g/WY91ZVTU6Hozn8diEM+rNIAa2V
Mlo5rmvHNiQiuZfbBrYMJ6G7yPIkCYCHR3aPT5w2IAfZNJ4+0QDeSE4Y7wSDBRPr
YsCSgWVLXj/3sChB5pmiSIoXosj5gLDPOSMo/SYSw+RpaDc05SLIzy4YZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKbGH7nqtyEtWppsuwVlnJayMR67MB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvcHNZZnVlcTNJUzFhbW15N0JXV2Nsckl4SHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfa5YD
BAJfa5gwDQYJKoZIhvcNAQELBQADggEBADcTcNFz6pPswE8nTL+mdvhVdEWGnRYD
Cp74oaqyM49ApwgeeDpgJn/09KIKuofnkrD3QakXHdniSwAAv0jryeHkeDp99Nan
u+l0ZKX9bX/omDkNU/sbaTFcuAYsSJTuIzxE+xU/9xOFScRJSZckfbZhogRIcmtn
RN3/8U7S6KmoqxdLomEOUBZ9m0NwsI9ma14xuJGci2VT5lP5wWgZqtTyIDX+HlDL
CZACSvl7Xc1tgbdoQgv8923DjHVM7YSSLQAXuXkwK4+SwB1NC8L7GFqBgZF/415O
bAPrmRcFxXe9HAkkPaei98M0JQ2heZdR0z8SghsEw6jfwVQoPemW/SA=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:32 2024 by rpki-client on console-fra.rpki-client.org