Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/PDhr2O3IyCU1PiDhdy4zF2MJgnQ.roa
File: PDhr2O3IyCU1PiDhdy4zF2MJgnQ.roa (raw, json)
Hash identifier: wpGGk2ZbHqMS+UXDWBXpdqxeq8EkT/NzQkQU2DqqTYQ=
Subject key identifier: 3C:38:6B:D8:ED:C8:C8:25:35:3E:20:E1:77:2E:33:17:63:09:82:74
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 0188BE805D426498D15B9805B2C9C6AE5FDB
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/PDhr2O3IyCU1PiDhdy4zF2MJgnQ.roa
Signing time: Thu 15 Jun 2023 10:01:03 +0000
ROA not before: Thu 15 Jun 2023 10:01:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.87.77.0/24 maxlen: 24
185.87.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:80:5d:42:64:98:d1:5b:98:05:b2:c9:c6:ae:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jun 15 10:01:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c386bd8edc8c825353e20e1772e331763098274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:3f:8c:9d:33:a2:c9:e4:32:36:0b:e5:d0:
94:89:69:64:ff:95:7b:23:dd:97:65:d7:c5:88:03:
0d:be:26:34:ce:aa:3a:53:b1:ff:e5:be:e5:6b:14:
16:bc:91:79:2f:e9:94:10:87:2f:49:35:86:66:37:
b6:b2:d2:9b:98:32:80:63:08:5c:e4:3a:a9:3a:cd:
a8:a5:f4:b5:00:6b:2a:ea:f1:15:67:dc:b7:0f:5b:
21:d6:61:a9:9b:f2:9a:7b:51:8a:16:01:6c:21:b8:
ae:26:ad:58:9c:02:1f:91:50:9f:75:6a:2d:6a:7b:
20:53:c5:5f:ce:34:eb:13:d5:a5:7e:1f:05:fb:07:
fb:57:fd:99:20:29:e5:44:71:2d:a1:ce:29:37:31:
4e:6c:a4:76:7b:fe:b0:1a:1b:53:c3:e2:97:6c:fe:
e9:c1:03:61:bf:3f:5a:37:f4:81:1a:46:ce:91:1d:
75:7c:50:58:06:99:f1:91:50:d8:af:b7:87:09:2b:
c0:72:ff:cc:88:81:a1:1d:c9:5f:9f:1f:d7:59:86:
4d:c8:c8:1b:45:2c:ec:3d:9a:db:36:63:00:08:10:
eb:ff:15:70:56:90:47:fe:f0:5d:29:89:88:76:d0:
a4:dd:3e:bd:f7:f9:10:dd:93:80:01:11:11:bd:06:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:6B:D8:ED:C8:C8:25:35:3E:20:E1:77:2E:33:17:63:09:82:74
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/PDhr2O3IyCU1PiDhdy4zF2MJgnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:e2:01:28:03:40:dd:90:2c:76:4b:d3:14:d0:2f:8e:dc:40:
4c:97:bc:70:41:53:93:95:8b:c5:c9:f5:e4:9b:6c:44:e6:73:
39:a1:9d:ac:27:a8:b4:9e:45:7e:68:52:56:3e:c2:fd:49:26:
28:63:b4:a5:bb:54:1a:f9:ac:8c:c7:13:54:db:89:04:a1:85:
cb:82:80:80:63:c9:41:15:6f:d6:f7:61:ee:c1:94:40:11:cd:
97:8c:b3:2d:8c:6f:a1:4f:c2:20:a7:d7:24:7c:2c:0e:48:72:
f6:52:a6:e6:44:c8:f7:9a:2a:60:d0:4a:60:40:5b:a4:84:f9:
0c:df:0a:be:6a:b5:3a:14:f1:8e:8f:76:2c:e8:98:a1:81:e5:
5b:32:5d:f8:f6:10:2f:b6:6c:97:4b:49:b3:7f:d8:72:b9:cb:
87:ab:8a:97:01:fd:8c:be:9f:c5:1e:00:a2:45:d8:ff:de:7a:
d2:76:c2:10:ab:e7:81:24:e1:7d:ad:59:39:0f:9f:1f:3c:61:
4a:ed:3a:ed:47:21:f5:8e:c9:7d:3b:ef:9e:02:49:b1:02:02:
ed:43:70:16:af:63:28:eb:e2:c0:89:94:1c:9d:5e:8a:9d:c7:
43:7c:ca:c5:66:f3:b4:12:5a:f2:b4:ba:e5:51:c2:58:ab:4b:
86:a2:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:02 2024 by rpki-client on console.sobornost.net