Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/CvHl1T7L5F3EVY_rMT8cGcspweU.roa
File: CvHl1T7L5F3EVY_rMT8cGcspweU.roa (raw, json)
Hash identifier: nDN5DqfiisU8G1e3+526xhRPAuICNKwK/0v6l4keWq0=
Subject key identifier: 0A:F1:E5:D5:3E:CB:E4:5D:C4:55:8F:EB:31:3F:1C:19:CB:29:C1:E5
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 018571278D5617CFB42FB37696A5ABB00CF5
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/CvHl1T7L5F3EVY_rMT8cGcspweU.roa
Signing time: Mon 02 Jan 2023 06:24:55 +0000
ROA not before: Mon 02 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5603
IP address blocks: 37.18.224.0/20 maxlen: 24
37.18.224.0/22 maxlen: 24
37.18.232.0/21 maxlen: 21
37.18.230.0/23 maxlen: 23
37.18.228.0/23 maxlen: 23
185.58.182.0/23 maxlen: 23
185.58.180.0/22 maxlen: 24
185.58.180.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8d:56:17:cf:b4:2f:b3:76:96:a5:ab:b0:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jan 2 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0af1e5d53ecbe45dc4558feb313f1c19cb29c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:f1:2f:87:a3:45:f0:b2:bb:d5:75:73:96:
f3:92:4e:9e:0e:10:2b:3d:67:fd:2b:05:ed:7c:38:
76:47:90:02:af:89:73:91:f7:5d:ae:f8:f5:a1:77:
95:be:46:80:24:fb:53:be:64:4a:21:4f:1f:40:a6:
68:0d:1b:03:0d:e5:bc:28:1f:1c:81:5f:3f:00:4e:
64:08:a2:d3:b7:c5:73:43:52:d3:85:10:64:6b:7e:
27:a3:f1:88:6d:a5:4d:3c:d5:61:67:31:b5:fd:78:
63:e6:85:8d:39:6a:39:96:4a:7a:10:ff:07:6e:12:
ee:27:2b:49:50:0c:c0:67:bf:33:b2:8d:07:e8:a7:
8f:22:a0:9b:18:98:3a:4e:67:37:81:be:91:00:ea:
7a:61:2c:b4:d6:d3:3a:3c:c8:04:06:81:ea:60:fa:
5a:12:1e:11:e5:b2:a2:3b:9a:fa:b4:41:95:e4:7e:
23:f7:69:49:f9:b7:ff:5f:d5:32:99:fe:0f:b9:43:
bd:35:a9:92:bf:f9:4c:83:ee:18:8f:cd:90:19:04:
9a:16:da:22:e6:fd:61:71:c5:f4:5e:9a:33:b2:08:
33:63:a2:88:a5:82:7a:28:6c:ba:92:c3:6c:3c:47:
00:0e:d0:0d:59:91:0c:ab:fb:26:e2:3a:9f:0e:3f:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:E5:D5:3E:CB:E4:5D:C4:55:8F:EB:31:3F:1C:19:CB:29:C1:E5
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/CvHl1T7L5F3EVY_rMT8cGcspweU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.224.0/20
185.58.180.0/22
Signature Algorithm: sha256WithRSAEncryption
34:4c:50:79:63:25:b2:10:07:77:2a:bb:43:1d:f6:3e:95:75:
f4:a0:06:fa:11:ec:fb:dc:89:d2:32:48:53:3e:7d:1d:0d:4d:
ef:1a:9c:04:40:a3:a0:52:76:e9:48:bd:b6:f1:57:ef:cd:56:
b3:c7:99:d4:11:c5:38:67:35:34:19:98:04:fa:e3:5b:e3:61:
2d:a1:58:80:35:e1:21:20:ae:d4:99:9f:fc:69:94:af:a7:42:
35:69:2e:48:4c:df:88:c4:d3:08:eb:1d:98:2c:d7:3a:7c:9b:
be:54:1f:64:5d:7d:43:05:37:73:bf:fd:90:dd:98:4d:47:02:
ac:3a:d1:8f:49:be:80:a7:07:1f:10:03:69:93:f7:ce:a5:53:
ad:9c:74:e6:bf:5c:29:70:cb:b0:99:8b:68:f1:ee:18:e6:3a:
ea:69:4f:ce:9c:7b:b0:5b:de:a3:75:c9:83:a3:f5:ce:bd:82:
2b:17:b5:30:73:69:f4:05:51:52:60:1c:58:a3:bf:42:8a:d4:
00:fa:8d:8b:c7:68:42:c1:04:4c:c6:20:55:f4:da:a4:fd:56:
19:2e:31:42:7c:7e:2b:e6:ba:1d:8c:55:52:42:5b:29:a0:79:
4c:70:ad:d6:50:88:56:52:5a:7b:14:c0:15:3c:c0:af:01:86:
74:38:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:44 2024 by rpki-client on console.sobornost.net