Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/GlvUnUM0yqrVLwlYYhDk48PqfqQ.roa
File: GlvUnUM0yqrVLwlYYhDk48PqfqQ.roa (raw, json)
Hash identifier: W8i2wWwz8BS/TPJSWN/KHJVDepUaopJHM2UvPjvOA+s=
Subject key identifier: 1A:5B:D4:9D:43:34:CA:AA:D5:2F:09:58:62:10:E4:E3:C3:EA:7E:A4
Certificate issuer: /CN=eadf80048d2032ec224364a773fe81d23fa914e0
Certificate serial: 01856FF979348A55D669B4003B33E72AF558
Authority key identifier: EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/GlvUnUM0yqrVLwlYYhDk48PqfqQ.roa
Signing time: Mon 02 Jan 2023 00:54:58 +0000
ROA not before: Mon 02 Jan 2023 00:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209825
IP address blocks: 85.209.44.0/24 maxlen: 24
85.209.44.0/22 maxlen: 22
85.209.47.0/24 maxlen: 24
85.209.45.0/24 maxlen: 24
85.209.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:79:34:8a:55:d6:69:b4:00:3b:33:e7:2a:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eadf80048d2032ec224364a773fe81d23fa914e0
Validity
Not Before: Jan 2 00:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a5bd49d4334caaad52f09586210e4e3c3ea7ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:72:52:66:9e:77:60:87:6b:18:50:53:47:
39:d0:b4:68:ee:87:46:85:04:c5:14:9c:52:b3:2f:
ec:6e:0e:f6:11:cf:f7:28:ad:9e:32:79:a7:5f:ef:
de:ca:6b:61:15:8d:cf:ba:5d:2b:27:0a:6c:58:ac:
45:9e:bb:46:be:77:14:0b:96:9a:52:83:7c:66:2b:
13:89:a2:f2:20:b6:10:27:3c:23:a6:dd:02:ff:0e:
70:de:37:f2:f8:66:22:56:e1:9e:38:02:f9:a4:e1:
dd:a6:32:8c:7c:c4:7b:18:48:6e:0d:da:82:20:6d:
a8:f1:0c:e6:84:39:24:3d:b6:47:63:1a:42:e6:e1:
a6:d7:66:f9:12:a1:d7:c2:72:27:a7:d0:8c:b3:19:
d9:d4:d7:c9:c5:e8:ae:0b:49:2c:3e:49:10:fc:5b:
5d:f9:e0:31:35:d4:7d:43:3b:d7:23:85:40:57:5b:
f6:17:a2:d2:05:5c:1b:d7:be:af:ee:9b:23:45:92:
15:f2:35:86:09:11:59:83:31:9c:92:a5:77:6b:1d:
16:e9:96:b0:d4:4c:e7:ed:b2:1c:2b:dd:8a:74:b3:
50:3e:a4:96:6e:52:c6:aa:c3:81:8c:c1:be:3a:50:
54:ca:20:08:65:b8:87:6b:fe:10:97:50:37:45:24:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:D4:9D:43:34:CA:AA:D5:2F:09:58:62:10:E4:E3:C3:EA:7E:A4
X509v3 Authority Key Identifier:
keyid:EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/GlvUnUM0yqrVLwlYYhDk48PqfqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ec:f1:8b:99:62:33:8a:00:62:77:32:ce:2d:94:3d:8f:36:
41:6f:9c:39:a2:1b:df:dd:a8:68:57:e3:1b:29:06:79:0a:dd:
96:f2:19:22:74:eb:d4:7a:34:1f:94:08:8a:28:13:20:72:7c:
0a:0f:60:b7:1f:d4:b7:ec:44:80:bd:a9:d7:4e:10:7d:a8:9d:
0b:35:58:02:8a:1b:89:e9:19:17:9c:2d:79:01:e6:59:45:dd:
27:6f:9c:1d:8b:fe:e6:0b:0a:1b:30:a0:fe:10:0e:d8:95:66:
c0:ed:e0:80:65:00:ac:42:ec:5b:6c:c9:59:eb:56:c7:db:e5:
d7:e7:0e:3b:c0:62:3d:c8:e0:c0:8d:de:e7:7f:84:2e:45:85:
06:4a:61:00:b5:da:8a:be:cc:87:05:13:30:b7:a2:68:b5:16:
b0:4c:88:5b:c9:d7:62:ff:d9:1e:05:4a:4e:6c:9f:3e:f5:71:
e9:1a:5e:bc:77:eb:87:4a:d5:73:8c:f2:cb:ff:ff:1a:17:a9:
f9:ca:23:a9:51:d9:35:ba:6d:2d:d4:a2:97:75:a5:bd:93:65:
04:6a:c9:a4:77:b0:10:a8:35:81:bf:37:10:d7:44:78:90:c9:
33:a2:63:75:c9:6f:9a:b1:a5:76:ce:fa:eb:85:22:ba:9e:4b:
5f:cb:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:31 2024 by rpki-client on console.sobornost.net