Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/ckC1NnZWolK0yVHMV8KrrcMiymA.roa
File: ckC1NnZWolK0yVHMV8KrrcMiymA.roa (raw, json)
Hash identifier: utZ0Azt5YcAQRmGNa8zZkY5OT3WFct+Z/2d83+jY4I4=
Subject key identifier: 72:40:B5:36:76:56:A2:52:B4:C9:51:CC:57:C2:AB:AD:C3:22:CA:60
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 018D9D4DDC08A6243969F136F02A7F0CAAD6
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/ckC1NnZWolK0yVHMV8KrrcMiymA.roa
Signing time: Mon 12 Feb 2024 12:32:21 +0000
ROA not before: Mon 12 Feb 2024 12:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
2a12:7c6:abc::/48 maxlen: 48
2a12:7c6:affe::/48 maxlen: 48
2a12:7c6:c001::/48 maxlen: 48
2a12:7c6:d001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:4d:dc:08:a6:24:39:69:f1:36:f0:2a:7f:0c:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Feb 12 12:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7240b5367656a252b4c951cc57c2abadc322ca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:6b:84:49:e4:a8:cf:fc:6b:52:fc:b8:56:
44:3d:82:6e:56:ce:84:f5:cf:8d:2b:fb:de:d2:22:
8c:b6:6f:53:db:80:51:14:a7:3c:5b:c8:34:c7:c8:
88:7f:1b:3b:47:f5:70:08:b3:b3:8b:44:8a:1d:d7:
5e:76:be:93:3e:6b:db:a6:14:44:ab:3c:51:43:7b:
45:79:ca:1c:c4:b0:2b:99:33:ad:41:26:70:70:5c:
37:a5:51:5f:d6:a9:64:01:cb:8c:ec:f1:dc:51:9b:
88:b5:22:68:9c:c8:5c:44:47:16:bb:b6:f3:5a:8e:
6b:a5:3a:6e:f6:76:71:e7:00:c5:96:8a:20:13:0f:
9c:e6:5b:50:b4:02:85:e0:64:90:77:7c:e1:33:e3:
c4:2f:17:96:23:2b:9d:25:b9:0e:37:ac:c5:fe:59:
64:15:01:69:0c:20:30:f5:a1:15:f3:2b:7f:67:a8:
56:0e:72:64:38:b2:a7:8b:29:bc:e7:a8:3d:a3:4d:
68:10:5b:da:0b:8a:30:5f:e7:e2:36:00:cc:ec:57:
98:d2:cf:09:a7:a5:0f:57:ba:4c:71:d4:df:51:ae:
f7:11:ff:66:83:de:d7:30:3a:26:8c:c6:db:c9:00:
c0:d0:fd:ba:81:66:44:ef:b3:ea:0e:c7:63:af:13:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:B5:36:76:56:A2:52:B4:C9:51:CC:57:C2:AB:AD:C3:22:CA:60
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/ckC1NnZWolK0yVHMV8KrrcMiymA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
IPv6:
2a12:7c6:abc::/48
2a12:7c6:affe::/48
2a12:7c6:c001::/48
2a12:7c6:d001::/48
Signature Algorithm: sha256WithRSAEncryption
74:f2:43:5b:5f:97:45:98:cb:03:7e:4d:b9:5b:2b:c4:9e:b2:
e2:9e:11:77:59:f0:20:a6:06:9e:bc:f0:d5:d4:d4:0a:00:66:
cb:6f:de:43:ff:08:89:b6:8b:48:1d:4a:da:ed:5c:f9:0b:94:
98:29:05:a8:97:43:f8:c9:4e:30:b5:e2:de:a6:84:a6:01:49:
a4:f1:75:da:0e:b1:e4:4c:87:5d:17:87:fb:18:eb:29:83:22:
50:a3:8b:1e:16:67:b5:04:60:84:e3:0d:2a:a4:66:91:4a:4b:
db:20:fe:8f:f9:fb:6d:40:dd:28:97:a3:05:16:e0:c6:0f:ac:
6e:2b:bd:85:a4:f0:68:26:24:88:28:b0:3e:2c:2a:cd:e2:1f:
67:e4:8a:8e:13:32:ea:a6:dd:53:a4:9f:6e:ee:72:89:38:9d:
de:10:d8:85:9f:af:18:f3:51:b3:e2:52:4e:90:55:13:f5:c6:
f7:98:34:26:8d:08:73:7f:de:6f:23:87:c1:65:e6:cf:73:84:
91:c3:d4:3a:6f:37:18:8f:ce:55:18:25:56:07:01:5e:47:3e:
a2:11:e1:96:10:19:1a:85:bc:d7:c0:0a:40:42:98:0a:17:81:
86:fb:af:40:cc:21:f9:01:eb:21:73:9a:e1:16:d2:80:04:11:
7a:3d:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:50:01 2024 by rpki-client on console.sobornost.net