Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/SAJ0JDd0LpHjTrlPWXFI_krNiXE.roa
File: SAJ0JDd0LpHjTrlPWXFI_krNiXE.roa (raw, json)
Hash identifier: VgmOkyULYnINELTte1UaGVJ4JLqXj6Me2xOamg/RVsM=
Subject key identifier: 48:02:74:24:37:74:2E:91:E3:4E:B9:4F:59:71:48:FE:4A:CD:89:71
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 018C433C9CDA91EA8619E595F25BF3F51CBA
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/SAJ0JDd0LpHjTrlPWXFI_krNiXE.roa
Signing time: Thu 07 Dec 2023 07:44:54 +0000
ROA not before: Thu 07 Dec 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210008
IP address blocks: 185.230.182.0/24 maxlen: 24
185.230.181.0/24 maxlen: 24
185.230.183.0/24 maxlen: 24
2a13:d00:cf01::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:3c:9c:da:91:ea:86:19:e5:95:f2:5b:f3:f5:1c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Dec 7 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4802742437742e91e34eb94f597148fe4acd8971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:ef:2d:f8:56:fc:13:bc:59:16:74:2f:95:
24:17:28:d2:4a:a6:b7:e4:7a:e7:ff:fd:a3:65:90:
ab:e1:25:d5:2d:51:6c:bf:c4:1c:2c:6a:b2:4b:8d:
b3:bc:38:18:5f:79:c0:b5:97:1a:98:e1:53:05:ae:
2d:d0:d4:24:43:85:47:2f:41:4d:61:65:43:31:ee:
fe:d3:98:1f:47:aa:b3:a6:74:f6:e9:27:4f:00:59:
f2:26:72:f3:94:dc:33:15:93:ef:96:63:93:3f:31:
0c:0d:6e:49:24:74:48:6f:78:66:b5:28:65:af:39:
34:15:10:05:3c:90:48:14:4f:d3:a9:ad:de:2c:68:
5b:d3:de:31:7f:1a:84:7e:12:b2:45:7c:d9:a4:e4:
ea:4a:33:2f:0e:5e:c1:85:12:d4:7a:82:9b:20:77:
30:36:91:8a:15:cc:4b:b7:c0:46:e7:7e:96:13:60:
f4:ca:b0:02:ab:aa:44:35:df:81:76:25:f6:68:7d:
a9:33:da:74:73:40:d9:23:60:8f:cf:98:9f:0b:c7:
b6:0a:0c:f5:f0:04:aa:4b:72:49:09:ce:a5:bb:21:
b0:9a:46:e2:1f:5b:30:3e:cc:a5:2b:4c:59:84:60:
69:6e:0b:3f:88:df:ac:5e:07:96:84:68:e6:95:99:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:74:24:37:74:2E:91:E3:4E:B9:4F:59:71:48:FE:4A:CD:89:71
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/SAJ0JDd0LpHjTrlPWXFI_krNiXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
IPv6:
2a13:d00:cf01::/48
Signature Algorithm: sha256WithRSAEncryption
9c:56:c0:60:60:63:05:61:bf:4e:86:97:0c:d4:22:68:76:85:
fb:13:18:41:58:25:57:a2:eb:fc:b0:10:c9:6c:3e:78:af:f4:
37:3b:be:5e:bb:a4:8d:62:52:c5:cd:a4:44:a2:9b:8e:8b:21:
9d:f8:e1:19:67:bf:f6:bd:07:40:ba:85:42:25:82:8b:0a:2d:
80:92:ec:33:03:d7:0f:7d:ed:a3:c3:a2:b4:89:f5:1d:34:6d:
bd:26:31:70:4c:00:0b:01:2d:59:dc:29:31:8c:3e:d6:ed:0e:
e3:a6:ea:63:87:8a:ff:87:0d:8c:9b:1e:7c:1a:04:7a:ce:ad:
66:04:f0:17:65:5b:23:52:c7:07:c7:b5:9f:f8:93:ab:8c:22:
31:ce:0b:a4:cd:79:4e:e7:ae:30:33:31:0b:e0:1d:9b:a5:38:
0d:0d:b7:4c:6f:65:44:26:eb:e4:1c:da:db:aa:ea:87:1a:93:
de:e2:37:25:8a:41:17:17:a9:7d:a1:69:ed:0f:e9:32:83:b1:
90:b2:af:f1:d3:14:22:c4:8b:4a:d5:78:b8:cf:bd:10:59:3b:
83:92:5a:d9:cd:0f:51:12:07:65:d3:64:57:7a:df:5b:71:98:
9a:69:47:4c:3d:ea:f5:da:77:5e:e3:5e:4e:2a:36:f8:0e:6a:
ec:c9:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:24 2023 by rpki-client on console.sobornost.net