Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/a1j1PWHnQp56JV0x5bbuM7OJdt4.roa
File: a1j1PWHnQp56JV0x5bbuM7OJdt4.roa (raw, json)
Hash identifier: AHVMlXjtxTKGsCU8zh00FHzUzNf0/JKf+Tzr0hx4dVk=
Subject key identifier: 6B:58:F5:3D:61:E7:42:9E:7A:25:5D:31:E5:B6:EE:33:B3:89:76:DE
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 018CC725945A0B89F4C23495ED9C81E8FE27
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/a1j1PWHnQp56JV0x5bbuM7OJdt4.roa
Signing time: Mon 01 Jan 2024 22:29:37 +0000
ROA not before: Mon 01 Jan 2024 22:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50522
IP address blocks: 185.61.68.0/22 maxlen: 22
81.173.96.0/22 maxlen: 22
81.173.0.0/22 maxlen: 22
81.23.244.0/22 maxlen: 22
81.173.7.0/24 maxlen: 24
81.173.125.0/24 maxlen: 24
81.173.126.0/23 maxlen: 23
81.173.32.0/23 maxlen: 23
81.173.48.0/20 maxlen: 20
109.235.32.0/21 maxlen: 21
81.173.64.0/20 maxlen: 20
2a03:be00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Mar 2024 21:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:94:5a:0b:89:f4:c2:34:95:ed:9c:81:e8:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jan 1 22:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b58f53d61e7429e7a255d31e5b6ee33b38976de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:20:8b:3d:7a:ba:3b:74:5a:65:37:c5:14:
03:4d:77:6b:b3:6e:34:64:83:a8:7f:de:28:0f:6c:
18:35:d8:97:6e:24:02:bb:6c:56:f3:be:d0:60:2c:
ff:2c:08:ab:0b:41:2f:2b:e1:99:9c:ee:41:6a:e6:
3c:23:05:5b:23:ab:c6:2b:2e:80:61:42:f6:c4:9d:
70:5b:7c:31:63:47:bf:26:1a:95:49:8b:73:8a:47:
07:94:ad:98:ee:a7:aa:0e:33:fb:fe:5f:4f:3d:c3:
1d:94:18:6e:e8:16:38:4b:99:3a:30:43:54:fe:c6:
3f:ed:96:90:53:09:95:c9:f5:43:49:0c:a8:bf:a6:
9e:47:98:1e:8a:44:0c:13:1e:14:33:6d:f3:1f:95:
b0:30:63:a6:22:bd:02:0c:98:90:6a:30:69:6a:65:
b5:85:d6:7b:98:23:50:84:8c:05:ac:7f:a2:5f:76:
be:45:e4:d2:11:9a:74:77:ed:73:8d:59:75:c1:4b:
d1:4d:64:4d:07:b9:86:b2:3a:c9:e6:7b:da:61:96:
59:7f:0b:60:89:99:db:49:7d:09:48:35:b0:cf:0d:
d1:f8:1d:7d:db:4f:9d:66:d6:9e:d5:82:1c:f2:4e:
59:0d:c7:c4:c1:f7:4c:81:f4:38:03:8a:6b:c5:7a:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:F5:3D:61:E7:42:9E:7A:25:5D:31:E5:B6:EE:33:B3:89:76:DE
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/a1j1PWHnQp56JV0x5bbuM7OJdt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.244.0/22
81.173.0.0/22
81.173.7.0/24
81.173.32.0/23
81.173.48.0-81.173.79.255
81.173.96.0/22
81.173.125.0-81.173.127.255
109.235.32.0/21
185.61.68.0/22
IPv6:
2a03:be00::/32
Signature Algorithm: sha256WithRSAEncryption
37:fc:d8:0b:1c:98:2a:2f:9b:10:e9:64:51:ad:19:b6:c8:ac:
10:50:38:ce:41:28:68:9a:22:d5:05:e3:79:46:f6:c3:78:07:
ed:c5:03:81:c9:b1:8a:e3:d2:71:8c:82:cc:97:1d:33:40:59:
b7:ef:6a:b2:79:9e:0c:69:27:2c:33:55:2e:6f:0b:fe:ee:35:
d9:b2:34:dc:0b:b9:c0:05:a7:5e:21:5f:c7:b0:10:d4:43:8a:
71:de:ad:70:b3:ce:db:94:59:da:7f:40:d6:ab:25:91:5d:7c:
64:5e:1d:a3:b9:56:a4:77:f8:d2:95:bf:56:7b:bd:00:5d:da:
48:ba:1c:98:b9:a3:34:d6:2d:41:1d:e3:40:b4:3b:62:b7:36:
b2:98:cf:67:7f:5b:b4:55:cd:c7:bc:0f:da:93:8e:2e:4f:2b:
a6:39:cb:53:f5:db:64:b5:0f:9b:fe:c9:93:bd:02:a9:9e:07:
be:33:6e:7a:ef:e4:9a:7a:bf:f7:ab:e6:f6:68:09:5f:38:3a:
fa:76:04:82:87:96:2f:c3:c5:50:d3:49:67:68:9d:e0:05:fe:
5b:97:5b:9e:cf:c6:7a:07:1f:29:c6:10:f6:46:d4:61:c0:fa:
72:4b:27:f1:94:3d:2d:74:fe:87:50:60:af:e9:5b:ed:bb:7e:
25:13:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 05:55:28 2024 by rpki-client on console.sobornost.net