Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/kP2Gz2f5eHlojNiu_dGfjxRwDvk.roa
File: kP2Gz2f5eHlojNiu_dGfjxRwDvk.roa (raw, json)
Hash identifier: f8Y/fFLuSP3XCAUhuo+pjFLnhaxpZeCMzCqdHiuzuwQ=
Subject key identifier: 90:FD:86:CF:67:F9:78:79:68:8C:D8:AE:FD:D1:9F:8F:14:70:0E:F9
Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial: 01874822D27D7609E21502FDF78B907DE392
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/kP2Gz2f5eHlojNiu_dGfjxRwDvk.roa
Signing time: Mon 03 Apr 2023 17:20:54 +0000
ROA not before: Mon 03 Apr 2023 17:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200976
IP address blocks: 185.198.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:22:d2:7d:76:09:e2:15:02:fd:f7:8b:90:7d:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Validity
Not Before: Apr 3 17:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fd86cf67f97879688cd8aefdd19f8f14700ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:e4:38:15:b0:c5:6a:19:68:2d:77:6b:bc:
9e:62:c5:3f:fd:0e:43:0c:09:22:99:7a:83:8b:4c:
45:ae:47:da:38:1b:26:24:eb:e9:b5:29:88:6a:73:
0a:84:c0:df:b2:60:67:9b:1a:73:da:c9:fa:56:af:
c6:d4:ed:a6:b1:02:3f:e9:c2:a0:88:1c:b4:b9:2e:
b2:c9:e8:6d:ff:0d:08:de:83:08:4f:3e:8a:c9:81:
6f:b3:e6:f9:06:7a:8e:ad:70:5f:1b:60:3a:7a:4d:
ba:1e:cf:65:1b:35:b5:7f:84:22:1c:27:bf:2f:5a:
42:6e:b4:b8:39:3e:0f:fb:33:74:62:df:3b:89:bd:
e8:70:cc:d3:0f:a3:a6:c0:6a:43:08:a6:da:cb:30:
a3:08:f0:9c:cf:75:70:8a:60:d5:fb:9f:98:78:34:
ad:d3:64:1e:a4:a4:b2:6b:51:f6:2a:0b:ee:99:46:
66:42:58:82:bf:ee:8b:de:ed:aa:1a:a7:0e:fe:64:
a4:e9:6c:22:af:37:65:9a:8e:32:0e:55:df:14:c7:
33:da:3a:ed:0f:d8:ef:fa:4e:7e:24:fe:2b:ee:23:
dd:50:7f:72:cd:b1:79:41:0f:a9:3b:00:ff:5c:9c:
d2:22:ab:ee:ad:85:dd:f3:f5:07:37:3b:49:d7:d0:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:86:CF:67:F9:78:79:68:8C:D8:AE:FD:D1:9F:8F:14:70:0E:F9
X509v3 Authority Key Identifier:
keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/kP2Gz2f5eHlojNiu_dGfjxRwDvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.114.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7f:bb:f1:fb:ad:92:8c:52:c3:96:9a:f1:a5:91:ef:11:fd:
8e:b4:1a:ce:e5:17:b4:09:b9:3d:e3:a4:0f:a2:9b:c0:48:c4:
60:1e:5e:95:6b:50:b3:9f:d1:8c:25:99:58:85:ac:4d:cc:d1:
f1:9a:ab:04:77:43:2b:81:1e:62:f5:82:53:b6:e4:47:42:8a:
ff:f7:69:dd:f7:38:34:26:f4:dc:00:04:57:33:a9:93:c4:f8:
f8:24:49:9c:e9:96:ee:fb:0b:02:78:51:d6:7a:13:37:b2:1d:
1b:52:9e:8b:60:e8:af:03:09:37:20:2d:6b:f0:3f:3e:23:3c:
ae:6e:c6:d2:5c:42:07:fe:4c:ae:cc:c2:d9:69:4a:f4:b1:c9:
d8:8f:07:b5:38:d6:76:c0:65:81:6e:4c:28:97:9d:a8:57:42:
1e:5a:ba:02:c5:c4:06:e5:a1:22:9f:66:24:9e:dc:7b:6c:8e:
bd:3c:2a:c4:55:7e:76:ab:66:27:ce:45:1c:fd:df:13:b5:28:
f6:a8:21:23:d7:1f:06:0a:72:29:6c:7e:b9:61:3c:0b:ed:7d:
b1:92:b2:13:25:2b:1b:7e:8a:85:c1:01:e4:56:74:94:72:26:
ea:2b:dc:e2:3d:a6:10:fc:fe:3e:44:49:46:2b:08:17:2b:e6:
f9:1b:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net