Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/38eWeNqVVyJtDNHbFPVYARTnqJM.roa
File: 38eWeNqVVyJtDNHbFPVYARTnqJM.roa (raw, json)
Hash identifier: AU+UFWfIpHCzlF9Q11tlSvu6vc964r1YjVdyJvyQeWw=
Subject key identifier: DF:C7:96:78:DA:95:57:22:6D:0C:D1:DB:14:F5:58:01:14:E7:A8:93
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 0185711518875CE2D5627CE3BC771E86297B
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/38eWeNqVVyJtDNHbFPVYARTnqJM.roa
Signing time: Mon 02 Jan 2023 06:04:45 +0000
ROA not before: Mon 02 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204257
IP address blocks: 141.226.191.0/24 maxlen: 24
141.226.188.0/24 maxlen: 24
141.226.189.0/24 maxlen: 24
141.226.190.0/24 maxlen: 24
141.226.187.0/24 maxlen: 24
185.109.148.0/22 maxlen: 24
141.226.184.0/24 maxlen: 24
141.226.186.0/23 maxlen: 23
141.226.185.0/24 maxlen: 24
141.226.186.0/24 maxlen: 24
141.226.184.0/23 maxlen: 23
141.226.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:18:87:5c:e2:d5:62:7c:e3:bc:77:1e:86:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 2 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfc79678da9557226d0cd1db14f5580114e7a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:1f:55:2a:4c:1e:58:21:a8:00:7f:d3:93:
ae:3d:a1:c6:93:a0:e7:76:b8:ec:7b:42:26:a0:7c:
18:eb:07:ee:5f:35:5b:80:0f:79:a3:b9:b9:3a:c1:
a5:62:fa:4a:22:88:d2:d2:7b:9b:09:3d:b3:5a:3c:
7c:9f:41:b7:a0:0d:d0:cc:68:18:69:7f:39:02:8c:
76:1d:4d:61:ef:d6:01:12:95:83:41:eb:6b:c6:22:
e4:e0:61:ea:66:87:0a:4c:64:db:67:d5:ae:04:1a:
3c:bb:61:b1:83:f1:c1:c9:8a:1a:c5:85:9c:73:6d:
79:fa:28:22:5f:db:77:e2:00:4b:39:80:12:0a:65:
97:46:3b:72:c1:6d:64:3b:16:6d:d3:fa:ba:02:2b:
89:0c:c7:0f:7a:76:e0:7a:ab:72:0d:3d:40:70:7c:
4d:6f:f6:20:2c:f3:67:58:40:18:70:be:98:34:a8:
b8:72:9d:e6:8a:57:80:7a:4a:b5:32:b6:75:fd:17:
61:8f:c6:24:d8:1d:59:15:99:96:58:79:1d:28:05:
05:77:e4:df:21:76:89:45:67:9c:96:16:2b:63:3d:
23:d8:23:b2:fc:5d:74:9e:23:8b:43:03:d3:12:69:
c5:71:64:73:27:33:c5:62:21:a2:ee:8c:08:f9:b2:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:96:78:DA:95:57:22:6D:0C:D1:DB:14:F5:58:01:14:E7:A8:93
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/38eWeNqVVyJtDNHbFPVYARTnqJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.184.0/21
185.109.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:df:66:8c:bc:9b:59:8e:2a:84:f5:a9:fc:8b:2c:65:7b:9b:
48:0e:1a:35:72:31:fb:0f:00:70:6b:2d:02:bc:b8:64:2f:0a:
9f:de:e0:7d:aa:bd:b7:d8:b7:d9:5e:2d:b9:06:87:9b:26:b4:
61:49:14:c1:79:d6:30:f2:8f:b5:9e:04:e8:b2:cf:a5:db:8d:
83:d3:49:80:1e:ef:51:df:4e:d0:27:69:c0:bd:78:c3:9d:08:
7d:16:35:53:a4:b4:0b:7c:22:98:24:ca:d5:60:22:08:39:ce:
97:fc:86:7c:0b:28:28:38:66:46:49:fd:1d:fa:63:d3:f9:e6:
c6:03:eb:75:d0:09:5f:29:ce:06:c0:3c:1b:e8:2f:06:5b:d0:
02:7a:ac:9f:4d:42:71:91:f1:38:4c:ce:25:0d:94:66:d5:f5:
c7:99:89:b1:5d:f9:79:29:01:ff:f6:91:8a:9c:15:78:5f:e4:
63:3c:97:ed:e6:7c:20:9e:f1:5e:25:5f:35:07:2a:1d:39:cc:
29:0a:b7:4a:01:c0:2c:fc:6f:96:cc:a5:52:a6:ac:82:65:ff:
fa:4a:ca:d4:e8:eb:f4:eb:16:e8:a0:34:ed:7b:8f:6c:bc:01:
c0:91:e9:60:1f:b2:03:ab:78:85:09:8d:f3:53:a7:3c:46:3f:
57:41:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:31 2024 by rpki-client on console.sobornost.net