Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IGn-R7ZnazO-pvgPQtOjPKJi4wM.roa
File: IGn-R7ZnazO-pvgPQtOjPKJi4wM.roa (raw, json)
Hash identifier: 5PowZ/XdRhOQaonHJOPLm4oeWeqrKyAIYHf1oxP4Z7w=
Subject key identifier: 20:69:FE:47:B6:67:6B:33:BE:A6:F8:0F:42:D3:A3:3C:A2:62:E3:03
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018CC2DB07EF9EBD17F62CC603D52EC7C720
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IGn-R7ZnazO-pvgPQtOjPKJi4wM.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
185.7.237.0/24 maxlen: 24
185.7.236.0/24 maxlen: 24
185.211.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:07:ef:9e:bd:17:f6:2c:c6:03:d5:2e:c7:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2069fe47b6676b33bea6f80f42d3a33ca262e303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:02:9f:46:63:b9:63:74:99:be:d3:5b:02:
2d:f3:e1:3d:31:09:43:8c:a8:0b:e2:d9:ef:77:b5:
eb:9c:7f:e6:5e:6b:57:c8:da:e7:1c:48:a1:6b:78:
21:d9:57:1b:ff:f2:91:eb:9d:90:cc:42:a0:cf:93:
99:22:0b:07:5d:63:ad:0c:4c:71:f0:37:87:b9:cd:
a5:35:83:37:f6:1d:bb:ac:a7:fa:aa:c7:87:50:8a:
ff:35:a8:e1:2b:8a:1a:90:07:7c:96:0a:ae:73:59:
28:70:0e:05:7a:7f:87:10:97:36:69:55:7b:15:b4:
0b:27:68:6e:91:f3:fa:57:1a:d6:e6:3f:25:10:8c:
64:c4:cd:06:7b:d8:2d:e0:2e:b8:ab:1f:06:f5:64:
ba:c7:08:cc:10:f7:b9:04:28:d6:1c:4e:97:53:40:
73:00:ad:d5:66:1a:20:b1:eb:1a:1f:ba:20:48:18:
8e:c3:75:f2:84:96:43:db:5e:80:82:69:ff:69:db:
e4:2d:f1:5f:80:fd:a8:a8:24:b8:9b:f6:d2:43:ba:
67:af:28:2f:f5:4a:e9:5f:27:40:07:bc:37:6a:bd:
71:8e:9c:e7:1d:53:e3:98:35:53:01:e5:0d:02:6e:
bc:58:ab:23:ad:78:77:ad:c3:77:f9:af:1f:5b:91:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:FE:47:B6:67:6B:33:BE:A6:F8:0F:42:D3:A3:3C:A2:62:E3:03
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IGn-R7ZnazO-pvgPQtOjPKJi4wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.236.0/23
185.47.92.0/22
185.211.96.0/22
Signature Algorithm: sha256WithRSAEncryption
95:04:65:26:ed:08:5c:5f:d8:40:47:47:9a:20:c9:0a:86:24:
a4:d1:4d:97:9c:c1:3c:fc:4a:00:90:25:8f:8f:e1:d2:48:bd:
63:24:31:d6:6a:94:84:28:32:92:75:2f:f8:7c:f2:36:3f:65:
c5:a5:07:24:47:ee:92:21:00:d3:85:84:ff:bb:91:11:d2:4b:
13:f6:85:dc:17:2d:68:8c:c6:a8:90:59:ff:21:82:7f:83:35:
91:0f:10:c6:47:c6:7f:6d:57:da:a4:d8:12:79:b8:bf:34:22:
d4:cf:36:5b:74:d9:81:5e:80:59:a1:e7:40:9e:b8:03:69:c2:
37:a4:f0:90:4e:11:15:44:8a:bd:bc:00:ef:e3:68:1e:7d:2e:
fe:8f:5f:eb:51:f9:eb:5a:69:6b:87:f1:a2:0f:8f:27:7a:03:
b5:0c:7b:49:8b:04:f3:3b:8e:b6:c0:28:eb:c6:b0:cd:dd:12:
50:20:85:28:04:32:be:18:86:8d:5a:1d:88:8e:0a:d0:c9:c5:
af:ef:cf:25:5e:bd:83:9f:ea:53:35:5b:28:61:12:2d:da:7e:
f1:af:cf:f6:b3:df:40:00:94:69:e3:4a:64:19:c7:26:0e:5f:
0f:d9:b4:92:80:48:c0:18:a3:50:f1:fe:5c:39:f3:bf:53:e4:
86:5e:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:03 2024 by rpki-client on console.sobornost.net