Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/iBETnYrIe29bFPJZ69CACsXdjQg.roa
File: iBETnYrIe29bFPJZ69CACsXdjQg.roa (raw, json)
Hash identifier: KIXlasuaUu2sJI6vt2rzgRQoKnOH0Kh3wDILeNwVOOo=
Subject key identifier: 88:11:13:9D:8A:C8:7B:6F:5B:14:F2:59:EB:D0:80:0A:C5:DD:8D:08
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0186EC0440AA960D51A379BA472F61BC026C
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/iBETnYrIe29bFPJZ69CACsXdjQg.roa
Signing time: Thu 16 Mar 2023 20:02:26 +0000
ROA not before: Thu 16 Mar 2023 20:02:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200313
IP address blocks: 185.232.52.0/24 maxlen: 24
195.43.147.0/24 maxlen: 24
185.212.130.0/24 maxlen: 24
185.212.131.0/24 maxlen: 24
185.212.128.0/23 maxlen: 23
2a0d:1640::/32 maxlen: 32
2a0d:63c0::/32 maxlen: 32
2a0d:1643::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:04:40:aa:96:0d:51:a3:79:ba:47:2f:61:bc:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Mar 16 20:02:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8811139d8ac87b6f5b14f259ebd0800ac5dd8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:b7:86:f7:83:13:28:6c:29:ca:47:ba:c2:
7e:17:14:c0:52:1b:9b:46:1f:95:f3:7a:f8:3e:4c:
25:b4:fd:b1:bc:60:5a:31:66:1a:7b:29:0a:db:d9:
48:aa:40:9a:33:c5:3a:a2:60:9d:93:41:e5:c8:47:
b4:af:88:54:e3:c9:09:18:28:9b:43:7f:ad:ed:6a:
eb:8a:db:25:1b:f5:7a:bb:3e:ec:c8:14:ea:52:7c:
5e:fa:5b:53:33:6d:1c:20:b6:69:5f:9e:ec:89:fa:
26:c2:c6:96:58:a8:08:5b:b9:6c:d2:bb:85:be:b6:
17:e8:07:29:a0:f2:5a:0d:15:19:c5:a1:4b:2b:16:
5d:72:e5:ec:2f:14:c4:6c:d4:01:ac:1e:55:60:31:
18:7e:fb:dc:a3:d2:6b:d7:1a:0d:28:6f:77:b2:da:
ed:7b:f2:1b:af:df:56:fc:0e:a5:32:02:08:81:90:
46:ce:72:6b:b9:c4:69:de:14:a4:1c:1d:d9:8c:0e:
c5:c7:df:d5:00:70:9b:d6:9d:c8:cf:29:5d:87:90:
3d:cf:93:34:5b:40:d8:22:83:6b:56:88:31:d3:fc:
b6:7b:ab:b7:ec:97:a0:ac:2f:a1:cc:16:7e:22:95:
4d:72:d4:3d:ae:7c:74:59:d6:e1:b7:59:ba:90:cd:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:13:9D:8A:C8:7B:6F:5B:14:F2:59:EB:D0:80:0A:C5:DD:8D:08
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/iBETnYrIe29bFPJZ69CACsXdjQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.128.0/22
185.232.52.0/24
195.43.147.0/24
IPv6:
2a0d:1640::/32
2a0d:1643::/32
2a0d:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:57:85:3e:af:df:c4:94:66:2f:9d:00:ad:82:9b:92:5e:e0:
ae:fd:86:dc:42:af:bf:2f:dc:a6:6e:5f:f1:de:1e:fb:4f:8c:
c3:a5:96:6b:89:0f:10:66:1c:53:07:f0:a0:68:aa:32:59:eb:
e7:6a:97:0a:57:14:bf:0b:8a:49:51:65:e8:fd:32:b8:3e:3c:
6e:87:88:5e:86:99:cc:92:d6:7f:c0:c9:4c:09:12:04:c5:d4:
24:a3:75:8b:b7:ca:a8:cb:2b:69:fa:17:2d:06:90:18:14:c9:
45:55:b0:35:5f:d5:3c:d8:e1:0d:4a:91:b5:70:ee:a1:e2:57:
f1:71:79:72:60:d7:51:2e:ab:a9:78:ad:10:ac:5f:30:5b:1f:
24:b3:3f:8a:94:42:82:47:7b:b3:0a:b0:5e:b4:56:ef:95:90:
62:3b:f3:b4:df:e3:5c:5a:04:70:4a:3d:7c:de:24:cf:6c:f0:
81:aa:79:a0:cf:72:b6:04:25:0d:3f:07:b2:c4:1d:df:b9:e1:
9a:cb:d7:9a:c5:2a:be:48:17:8c:5e:8f:f9:df:59:92:69:76:
4f:81:e8:87:eb:d3:3f:bd:3a:c1:05:ec:a9:88:e8:d7:f4:a0:
b2:76:a1:20:5c:f2:67:48:a8:80:02:ed:f3:b0:1c:0f:e1:68:
9d:9e:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:17 2023 by rpki-client on console.sobornost.net