Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/CPR_7PiybBe7OAYN46ezkRys344.roa
File: CPR_7PiybBe7OAYN46ezkRys344.roa (raw, json)
Hash identifier: 6skXnitaJSsURwvKoEWM0hfwyqmXJxx01wXDK7J0DgY=
Subject key identifier: 08:F4:7F:EC:F8:B2:6C:17:BB:38:06:0D:E3:A7:B3:91:1C:AC:DF:8E
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 01856F26D3E89AF9CE64D08FAE35626B0437
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/CPR_7PiybBe7OAYN46ezkRys344.roa
Signing time: Sun 01 Jan 2023 21:04:53 +0000
ROA not before: Sun 01 Jan 2023 21:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41000
IP address blocks: 185.219.236.0/22 maxlen: 22
2a0b:eb40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d3:e8:9a:f9:ce:64:d0:8f:ae:35:62:6b:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jan 1 21:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f47fecf8b26c17bb38060de3a7b3911cacdf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:81:60:aa:89:17:00:8f:8b:ff:5e:f3:28:
2b:4f:40:a8:62:8c:91:38:5e:69:db:14:40:2c:e8:
50:27:13:83:66:b2:7a:be:7e:b7:5f:47:e7:0f:80:
19:20:21:dd:c6:b4:1a:56:59:16:ad:e1:c9:a6:4f:
c5:5a:4e:24:38:7c:97:10:81:ee:a8:ac:04:dc:d3:
06:ad:e3:0e:07:e3:81:00:54:9e:9f:15:db:68:65:
39:22:cb:86:48:42:bb:2c:30:dd:22:81:f0:a0:a3:
e6:6c:f9:bd:b9:9d:dc:ea:1a:ac:21:7a:31:71:d3:
e4:e6:0a:20:35:a3:e1:64:5d:f1:4f:40:81:de:9d:
3e:ca:02:58:af:27:ec:59:a7:7e:d2:1b:62:45:c8:
45:50:95:2d:51:5f:c8:42:57:de:4d:52:b6:58:8c:
31:cd:ed:9b:96:79:fe:eb:0f:8b:d4:83:2a:f4:a9:
f1:aa:e9:f5:bd:af:28:42:37:a1:c1:ba:24:d9:48:
30:be:6c:b7:b5:2b:a5:fa:3c:ff:ab:9d:dd:93:27:
a1:69:86:4c:7d:f6:6b:4a:c2:4d:70:43:77:c1:f0:
3d:b7:7c:08:93:8b:ac:2f:43:a1:52:89:51:3f:6f:
b7:b5:84:48:e1:ef:22:cd:af:8e:74:1d:bd:e9:30:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:7F:EC:F8:B2:6C:17:BB:38:06:0D:E3:A7:B3:91:1C:AC:DF:8E
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/CPR_7PiybBe7OAYN46ezkRys344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.236.0/22
IPv6:
2a0b:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
93:54:d2:ac:e1:cb:95:56:a3:9e:6f:f5:6d:e9:ea:6f:6c:e8:
ee:3b:8d:4b:6e:8a:00:56:4f:7b:31:df:63:2e:b5:64:00:d7:
ca:32:ec:38:d5:a8:9d:6f:ab:35:83:f9:aa:d4:14:b2:1a:cf:
c1:0e:d6:3c:9b:bd:d3:5c:9c:8e:ef:f1:30:ca:dc:d8:f5:f4:
c9:70:1f:32:07:65:5d:c7:3a:ca:f3:47:49:b8:c2:b6:62:2c:
2b:9a:ee:11:70:d9:00:89:9f:e9:48:a3:45:13:62:d1:d3:a9:
da:b6:bc:41:0f:07:62:5e:e0:f2:3b:45:06:29:3e:06:bf:93:
ff:30:53:d0:be:c3:e4:a8:ac:56:fb:96:31:cb:ef:38:8c:ff:
27:b9:73:38:7b:f2:d5:c0:bb:7b:f4:4e:1c:f2:4e:38:8c:60:
b0:04:4a:5e:37:a9:56:d1:48:ea:25:06:7c:7e:d7:ad:e6:8d:
e0:25:4f:c7:d0:f2:d7:59:c8:09:43:ca:60:34:4a:44:e6:80:
a9:3e:27:39:2f:09:3d:40:4f:71:5d:fb:d9:71:95:e6:80:d6:
6b:82:eb:b7:99:f9:09:06:fd:6e:83:e6:fc:7c:54:d7:e0:21:
b7:ac:a8:07:9d:4e:7f:7f:f5:c1:6c:d9:a6:c2:5b:76:49:f9:
07:d3:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:54 2024 by rpki-client on console.sobornost.net