Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IsWmwfcgHUBKHz1PLIxY31Wnvws.roa
File: IsWmwfcgHUBKHz1PLIxY31Wnvws.roa (raw, json)
Hash identifier: fuRdBFrOTmzluc2ABAZdi6aCKoCcITwn6f0GJmQcBO8=
Subject key identifier: 22:C5:A6:C1:F7:20:1D:40:4A:1F:3D:4F:2C:8C:58:DF:55:A7:BF:0B
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01857015328AFC79088DEF550D7C64D2BBAC
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IsWmwfcgHUBKHz1PLIxY31Wnvws.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200896
IP address blocks: 185.92.85.0/24 maxlen: 24
185.92.84.0/24 maxlen: 24
185.92.87.0/24 maxlen: 24
185.92.86.0/24 maxlen: 24
2a05:f140::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:32:8a:fc:79:08:8d:ef:55:0d:7c:64:d2:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22c5a6c1f7201d404a1f3d4f2c8c58df55a7bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:4d:7c:01:d7:4f:93:2f:aa:6d:a2:3b:78:
91:a9:d9:01:6a:85:b2:59:75:07:71:e8:1f:69:a2:
04:e7:b4:60:90:a8:13:70:01:ca:96:d7:1d:77:bd:
e5:4c:01:a6:8c:b5:38:31:ca:c9:dc:cc:fd:d0:34:
a8:5c:ae:75:90:0e:98:fb:dd:3a:cd:b5:90:e5:d1:
5c:fc:45:0c:8c:6a:c1:ed:aa:58:96:20:85:ba:97:
15:9c:60:46:eb:e6:1d:10:02:e7:d2:4f:9d:bf:54:
2c:68:48:f0:81:22:79:d9:32:a5:9d:77:e2:b6:61:
99:be:32:be:78:55:54:a8:c5:76:6e:0b:39:1b:3e:
0a:74:47:36:a2:b2:c7:f5:d6:cc:a0:f2:eb:80:99:
5b:07:48:dd:51:55:eb:04:8d:e2:b9:f9:c1:5d:e5:
4f:4e:e0:c5:3d:fb:d4:c2:9a:f5:e7:cc:d7:54:51:
b1:35:b3:6e:75:de:2e:93:a5:b5:39:1c:4b:dd:70:
8e:50:6c:b5:93:a6:47:a1:0d:9f:e7:ce:82:4a:83:
ef:b5:57:85:e3:90:c6:87:c9:58:a7:fe:0b:33:6d:
d6:56:e5:98:e6:7b:c3:12:b9:51:e8:fb:99:7e:1f:
2e:08:af:ae:c4:34:44:61:76:7a:73:e4:52:61:36:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:A6:C1:F7:20:1D:40:4A:1F:3D:4F:2C:8C:58:DF:55:A7:BF:0B
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IsWmwfcgHUBKHz1PLIxY31Wnvws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.84.0/22
IPv6:
2a05:f140::/29
Signature Algorithm: sha256WithRSAEncryption
1f:66:1d:59:67:b5:62:02:1e:6a:6d:e5:7c:34:6e:89:67:ed:
a5:99:63:9a:4c:07:dd:39:50:cd:de:a8:16:ce:06:d3:ea:f9:
96:ae:3f:99:1c:24:61:3e:59:37:ea:86:98:5f:f5:f1:7b:8b:
61:2b:cd:78:b6:0d:21:17:85:96:44:ec:cf:c8:ae:cf:e5:90:
b1:72:b4:59:ed:ae:6d:3a:53:60:b1:35:a6:80:c2:97:24:9c:
28:c2:11:a2:8b:ab:9d:bb:87:fd:a0:de:e6:f0:36:51:b2:8a:
5d:47:38:bf:8b:71:ca:74:35:5c:e9:08:9a:70:6c:bf:65:55:
eb:f2:46:50:30:87:7f:df:09:9d:af:f4:3f:26:0b:c0:e4:3a:
e0:72:76:27:ca:6b:8b:2b:74:66:4e:ad:8a:11:b7:ea:8d:20:
68:dc:39:dc:3e:ab:cd:97:6a:6b:e9:b9:59:31:b8:2b:80:fc:
81:7a:90:4f:22:74:6b:e8:3d:a1:41:79:ae:28:af:cf:b6:a1:
32:5e:c1:09:16:02:54:45:df:0f:37:99:d4:68:81:af:f5:94:
14:ee:61:31:7d:2e:11:19:ac:18:e5:11:5f:22:fe:cf:f3:3a:
9f:9e:94:99:f2:61:3d:30:04:f8:3c:ee:3f:7c:49:06:23:e7:
e2:7c:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net