Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QYBYqVVqijsVUOn_gs2VvPBwySE.roa
File: QYBYqVVqijsVUOn_gs2VvPBwySE.roa (raw, json)
Hash identifier: xQXgDu/GNO0zz32hQdX5hCE9m0OwlPjUl0IX5YzDhiU=
Subject key identifier: 41:80:58:A9:55:6A:8A:3B:15:50:E9:FF:82:CD:95:BC:F0:70:C9:21
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0186DF5A6FF77777A76A6E04F1BBB1F3189C
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QYBYqVVqijsVUOn_gs2VvPBwySE.roa
Signing time: Tue 14 Mar 2023 09:01:31 +0000
ROA not before: Tue 14 Mar 2023 09:01:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13194
IP address blocks: 89.191.96.0/19 maxlen: 32
91.188.32.0/19 maxlen: 32
85.115.96.0/19 maxlen: 32
79.132.64.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
62.84.0.0/19 maxlen: 32
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
91.123.64.0/20 maxlen: 32
87.226.0.0/17 maxlen: 32
217.198.224.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
94.30.128.0/17 maxlen: 32
195.62.128.0/19 maxlen: 32
217.199.96.0/19 maxlen: 32
217.24.64.0/20 maxlen: 32
79.135.128.0/19 maxlen: 32
37.148.168.0/21 maxlen: 32
80.254.208.0/20 maxlen: 32
91.142.0.0/20 maxlen: 32
85.234.160.0/19 maxlen: 32
109.110.0.0/19 maxlen: 32
89.201.0.0/17 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:5a:6f:f7:77:77:a7:6a:6e:04:f1:bb:b1:f3:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Mar 14 09:01:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=418058a9556a8a3b1550e9ff82cd95bcf070c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:eb:90:0b:62:cd:fa:08:5c:39:8d:6c:44:
32:25:97:84:44:f9:12:76:ac:b8:67:af:3e:cf:7b:
af:47:77:68:6c:a4:59:9d:57:58:cc:d0:21:48:94:
5a:d1:c2:c6:93:9f:c3:d4:48:99:d4:3f:62:ee:f0:
95:67:73:95:d7:1b:87:32:3d:df:4a:b1:1d:ca:1f:
4b:44:24:dc:44:7b:ad:fa:3b:0a:37:b7:a9:c6:db:
b3:f8:30:40:76:0b:02:f3:1c:52:8c:61:73:a6:69:
3e:7e:69:96:d3:b9:73:73:77:ba:14:ed:92:92:18:
a7:ed:08:5e:aa:b5:5d:2f:1d:43:a1:59:95:d1:9a:
25:b1:07:e0:58:96:48:0e:ac:48:8f:6d:5b:1f:ea:
1e:16:97:10:c9:d6:12:f2:40:40:66:4b:fe:bb:11:
ec:76:de:aa:20:dc:8b:40:f8:69:5b:3c:6a:61:e3:
07:12:c2:44:d8:98:c9:dc:7b:2d:c6:4f:14:ba:f8:
9c:6a:4d:0d:6a:07:d1:ce:ec:15:cf:33:99:aa:51:
5b:11:20:9c:06:7e:0c:be:f2:1a:c6:ac:cc:a6:5c:
60:5b:d0:a7:5d:7b:c0:c5:6a:52:8b:3d:5c:1a:cd:
e8:83:a3:b5:01:a0:42:89:86:bf:7d:53:5f:b1:fa:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:58:A9:55:6A:8A:3B:15:50:E9:FF:82:CD:95:BC:F0:70:C9:21
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QYBYqVVqijsVUOn_gs2VvPBwySE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/19
77.38.128.0/17
79.132.64.0/19
79.135.128.0/19
80.254.208.0/20
85.115.96.0/19
85.234.160.0/19
87.226.0.0/17
89.18.192.0/19
89.191.96.0/19
89.201.0.0/17
91.123.64.0/20
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.24.64.0/20
217.198.224.0/20
217.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:ad:9b:eb:e5:9b:88:49:5d:a1:ef:ec:45:91:cf:14:34:af:
70:36:5c:0c:fd:0d:09:c4:4c:55:78:99:bb:e0:c4:66:0c:cf:
d5:04:2a:14:27:1a:55:fd:51:27:b9:ef:90:2f:3e:64:39:9d:
8f:0b:e4:b7:73:cd:37:69:16:af:b6:18:aa:2c:e8:25:c0:54:
29:5d:a4:0f:bd:4b:cc:6e:2f:cc:5c:2c:c5:24:b4:a6:7b:ea:
ec:72:20:1b:d6:d1:35:a7:42:45:b7:d0:de:84:b1:0d:49:f6:
c3:5b:cf:52:47:91:29:f3:3e:76:64:51:53:3e:aa:1f:52:d9:
a2:45:55:c8:76:69:b2:61:d0:11:e7:c6:bd:1b:1a:5d:16:c8:
17:32:12:b8:a4:9e:50:30:52:18:be:82:75:05:e0:60:05:0c:
0e:e1:04:b1:d9:b4:84:49:8a:38:92:27:96:ec:84:44:69:c4:
68:b3:0d:5f:78:3e:66:b3:f8:86:55:be:3b:ef:10:bb:b8:1b:
9e:a1:96:9b:c1:ec:24:7a:6a:bd:33:f1:3d:e2:4e:e2:82:b9:
c4:68:96:8b:39:37:67:5e:c0:5e:20:b5:b4:ca:8b:1c:1a:4b:
d8:1b:ef:ea:c0:1a:8a:f9:36:fd:3a:be:50:d0:0c:85:43:f0:
4d:4f:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:23 2023 by rpki-client on console.sobornost.net