Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/inNffUPQqyCfN3PYMr0Je-pHAis.roa
File: inNffUPQqyCfN3PYMr0Je-pHAis.roa (raw, json)
Hash identifier: 2T3B4I3sotC2Nah01RM12fO4eGbu54JGv5PqOiTnNtM=
Subject key identifier: 8A:73:5F:7D:43:D0:AB:20:9F:37:73:D8:32:BD:09:7B:EA:47:02:2B
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F2C07D972E18DF2F844C36B452BB751DD
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/inNffUPQqyCfN3PYMr0Je-pHAis.roa
Signing time: Mon 29 Apr 2024 22:44:22 +0000
ROA not before: Mon 29 Apr 2024 22:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198309
IP address blocks: 158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
185.97.84.0/22 maxlen: 22
2a00:a540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:07:d9:72:e1:8d:f2:f8:44:c3:6b:45:2b:b7:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Apr 29 22:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a735f7d43d0ab209f3773d832bd097bea47022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:3a:17:ce:dd:92:6f:0f:49:af:41:29:56:
58:ed:0c:26:73:39:95:3d:1e:d1:02:78:02:46:c8:
3f:9a:8b:92:0c:1d:6f:85:0f:11:c4:13:a4:52:dc:
89:3f:cb:f2:9f:c7:73:7c:6b:a7:4b:cd:f5:ab:f4:
c2:bc:56:2e:0f:e6:95:55:57:2c:6c:2d:3f:e1:b1:
44:1f:c6:5f:90:c2:9c:7e:7d:6c:4d:c6:1d:f1:81:
fe:93:f1:b8:23:5b:e6:4b:06:41:70:cf:68:ea:18:
23:b8:12:40:d1:c9:c2:30:6d:d4:df:fd:df:6c:f1:
ed:43:12:5a:1a:e2:cf:16:bb:5f:8e:57:ef:13:5c:
76:0e:a3:da:b8:97:98:af:19:a6:1f:cf:40:98:3c:
c3:bd:f3:0e:68:a4:92:e1:8f:3f:dd:66:8e:f5:70:
cb:e6:ef:ab:a9:bf:f3:9f:94:df:a6:d8:83:ea:22:
73:7f:10:0e:3e:b9:84:d9:51:49:64:b2:92:47:5d:
4f:3b:97:e1:7c:b0:be:ea:1f:87:51:a3:81:43:3c:
32:50:fc:06:b8:fd:36:8d:8b:7a:32:1f:1d:a1:34:
04:79:e0:ba:d1:9d:f7:c8:cd:1a:0e:92:53:54:4f:
ff:2f:d8:7d:ea:a5:97:e3:50:8a:49:3a:6a:1e:d2:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:5F:7D:43:D0:AB:20:9F:37:73:D8:32:BD:09:7B:EA:47:02:2B
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/inNffUPQqyCfN3PYMr0Je-pHAis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.58.152.0/21
185.97.84.0/22
IPv6:
2a00:a540::/32
Signature Algorithm: sha256WithRSAEncryption
89:7b:01:23:4b:2e:7e:17:8d:c1:db:0b:94:31:1f:3c:23:40:
96:cc:5b:f1:b7:06:3e:d5:1d:dc:c6:fc:b8:f4:c6:40:db:5d:
fe:6b:00:4d:4f:20:16:b6:4b:e0:d5:0e:d7:75:7f:17:ba:52:
83:86:16:40:9c:eb:1a:dd:5b:fe:73:38:a2:fd:c3:d5:16:8a:
58:ad:f9:f7:d3:af:f8:ed:98:c5:5e:5c:a3:f7:82:ee:ef:96:
07:80:31:d6:06:09:89:50:d9:9b:a3:40:0f:ae:03:55:3b:fd:
24:a0:fb:98:6e:8e:9d:43:2c:2b:a6:35:fc:f9:56:fe:b7:c2:
e5:35:28:06:df:cb:11:f7:cd:b3:29:5a:17:ab:27:44:4c:3c:
d8:a0:31:17:91:65:20:e9:6d:f5:43:12:0b:5a:e5:9c:f4:26:
ab:a3:b0:2c:af:cd:7b:98:7a:ea:06:a5:61:70:e0:62:69:e3:
37:bc:32:f3:30:0c:f7:62:2e:03:e9:26:bd:52:9c:33:3c:08:
19:ba:f2:f1:3d:9c:5b:3a:9a:2c:70:5d:6d:e0:5d:63:bf:f2:
61:d7:51:69:e6:b7:d6:da:6b:8c:fe:01:8b:bf:f9:f7:fc:fd:
ff:fc:2c:fa:9d:b3:a8:94:f4:7a:7c:d2:cc:47:d2:59:75:d4:
f8:eb:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 04:46:16 2024 by rpki-client on console.sobornost.net