Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/_9llHMWbN7ovYLWeeQ2vSUf9vvs.roa
File: _9llHMWbN7ovYLWeeQ2vSUf9vvs.roa (raw, json)
Hash identifier: 1wzwsYYd5dojtu5Y2uA8EBfWLU3j7gEFfSVO3Yw68JU=
Subject key identifier: FF:D9:65:1C:C5:9B:37:BA:2F:60:B5:9E:79:0D:AF:49:47:FD:BE:FB
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CBFBA2B88AC09371E21DE9978D01908D0
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/_9llHMWbN7ovYLWeeQ2vSUf9vvs.roa
Signing time: Sun 31 Dec 2023 11:54:58 +0000
ROA not before: Sun 31 Dec 2023 11:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 77.246.245.0/24 maxlen: 24
178.249.152.0/21 maxlen: 21
146.19.97.0/24 maxlen: 24
31.134.200.0/21 maxlen: 21
212.24.126.0/24 maxlen: 24
46.244.96.0/19 maxlen: 19
46.244.0.0/19 maxlen: 19
5.10.192.0/24 maxlen: 24
185.51.52.0/23 maxlen: 23
62.3.55.0/24 maxlen: 24
31.41.255.0/24 maxlen: 24
185.205.52.0/22 maxlen: 22
2a13:800::/29 maxlen: 29
2a02:1668::/32 maxlen: 32
2a13:3400::/29 maxlen: 29
2a02:166b::/32 maxlen: 32
2a0f:ba00::/29 maxlen: 29
2a06:2602::/32 maxlen: 32
2a13:2c00::/29 maxlen: 29
2a0b:1c0::/29 maxlen: 29
2a05:2900::/29 maxlen: 29
2a0a:e80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:ba:2b:88:ac:09:37:1e:21:de:99:78:d0:19:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Dec 31 11:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd9651cc59b37ba2f60b59e790daf4947fdbefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:28:1c:5f:ef:ea:cb:25:50:6d:3e:9d:8e:
e3:4d:0d:fd:8f:c4:32:99:cb:9c:99:56:69:6b:7e:
68:b5:ab:45:e6:84:08:21:3a:b4:8d:a4:21:a8:dc:
21:9f:ad:42:5e:cd:01:6b:e6:0f:fa:ae:ea:da:01:
d6:50:06:0f:20:36:5a:ca:e7:c3:f8:27:a9:b7:2b:
82:fd:91:5c:f0:b3:96:11:a0:27:1d:8d:4f:46:b3:
3d:f4:82:49:07:30:21:7e:27:a9:e1:8c:f2:ec:93:
fa:4b:ea:e2:a3:49:c3:ac:27:5e:7f:8e:48:88:1b:
ee:1b:bb:da:76:25:24:36:3b:38:bd:c1:5c:53:4a:
69:a9:2e:8c:fe:9a:f4:fb:2d:87:e1:32:df:3f:e4:
d8:75:68:42:53:4d:a9:63:8b:68:fd:94:9e:d0:36:
4c:5d:04:35:a4:a4:07:44:1a:03:1f:3f:59:c3:5d:
68:12:50:5c:a6:1f:e4:c5:db:05:89:16:21:92:f3:
03:18:51:6c:2a:84:2e:c1:a3:b0:fb:59:90:6d:17:
da:45:88:ac:0a:f9:fd:5e:72:96:26:ab:35:5f:d8:
cd:30:d8:02:cb:4b:6e:52:f3:90:32:26:76:13:9d:
14:44:e7:4f:ae:fe:74:10:ea:55:ea:37:ec:f7:17:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:65:1C:C5:9B:37:BA:2F:60:B5:9E:79:0D:AF:49:47:FD:BE:FB
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/_9llHMWbN7ovYLWeeQ2vSUf9vvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.192.0/24
31.41.255.0/24
31.134.200.0/21
46.244.0.0/19
46.244.96.0/19
62.3.55.0/24
77.246.245.0/24
146.19.97.0/24
178.249.152.0/21
185.51.52.0/23
185.205.52.0/22
212.24.126.0/24
IPv6:
2a02:1668::/32
2a02:166b::/32
2a05:2900::/29
2a06:2602::/32
2a0a:e80::/29
2a0b:1c0::/29
2a0f:ba00::/29
2a13:800::/29
2a13:2c00::/29
2a13:3400::/29
Signature Algorithm: sha256WithRSAEncryption
16:0f:69:49:4b:2b:4e:15:8c:e9:f5:da:2c:bf:e8:37:73:bf:
55:02:89:02:b3:a8:3a:66:ec:67:1d:54:25:80:c1:49:1a:e9:
e6:14:30:0b:8e:90:85:06:90:bc:9e:46:ce:ca:22:db:3f:76:
fa:e5:48:1c:d5:f3:8c:ac:ce:db:06:95:14:89:ff:44:45:72:
92:fa:8c:c8:5b:96:31:e1:3b:48:85:ba:2e:c6:ad:15:86:9b:
bd:69:27:16:55:83:49:13:88:ee:71:98:59:45:63:09:6f:2b:
37:d1:a8:8c:e3:86:19:38:f8:66:a4:bc:3b:0c:40:15:01:fc:
2c:bb:8f:5c:4b:ad:f7:94:5e:66:f2:c3:36:ab:37:56:32:da:
6d:1d:fe:04:3a:d0:1f:eb:98:ae:e1:46:a6:25:d7:0f:ba:b4:
59:20:cc:87:63:17:9f:81:d1:bf:af:9e:7c:16:c3:58:46:62:
92:dd:03:ba:e5:1e:fa:2e:bb:c5:32:7b:73:39:76:c5:ac:f8:
70:e9:ec:68:0d:a1:3a:10:fc:aa:8e:c9:a3:c4:9a:6e:e2:2f:
8c:30:61:08:5c:a2:b3:0b:0a:75:ce:37:3a:96:fa:85:10:47:
0d:4b:02:ec:02:18:cc:a8:b4:cd:01:75:f1:30:51:a0:d9:7d:
12:95:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:01 2024 by rpki-client on console.sobornost.net