Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa
File: LU4cIZATjP_FghvfqlaYaOAZw5w.roa (raw, json)
Hash identifier: vFflwqXX0mvB/Ay19IjlP7lwnb+CZajCaj8SMXZ1x9w=
Subject key identifier: 2D:4E:1C:21:90:13:8C:FF:C5:82:1B:DF:AA:56:98:68:E0:19:C3:9C
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018572280AAD382A3400D60C08C12E6F52E4
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa
Signing time: Mon 02 Jan 2023 11:05:04 +0000
ROA not before: Mon 02 Jan 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8491
IP address blocks: 82.194.224.0/19 maxlen: 19
82.194.232.0/24 maxlen: 24
82.194.237.0/24 maxlen: 24
81.95.41.0/24 maxlen: 24
81.95.42.0/24 maxlen: 24
89.188.160.0/19 maxlen: 19
81.95.46.0/24 maxlen: 24
87.238.96.0/21 maxlen: 21
87.238.101.0/24 maxlen: 24
81.95.36.0/24 maxlen: 24
81.95.32.0/20 maxlen: 20
81.95.35.0/24 maxlen: 24
2a03:8640::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0a:ad:38:2a:34:00:d6:0c:08:c1:2e:6f:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4e1c2190138cffc5821bdfaa569868e019c39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:25:38:c7:22:04:b9:17:4a:44:71:8e:df:
6f:79:35:05:2a:dd:df:4a:55:ab:58:51:8a:3b:69:
e8:0c:7e:6b:55:9b:41:1a:7a:53:04:02:cc:a5:69:
0c:ff:bd:14:04:7d:e7:8f:2a:0f:b0:bd:04:92:7e:
89:24:97:c3:45:a5:b8:35:c1:2a:e0:e5:53:e9:fb:
db:22:03:67:fd:80:cc:a5:a5:f6:b1:2d:0f:94:fd:
5b:67:29:c0:91:28:b3:4f:0a:ca:2b:7c:24:d4:50:
6f:b3:e6:cc:78:7d:f3:9b:30:fb:37:b4:ef:57:bd:
d9:cf:f9:b0:00:cc:c8:47:cc:d9:f2:d3:a4:be:1b:
8d:b1:01:ca:df:92:52:a5:f8:3e:e9:93:c8:80:00:
37:0d:cf:09:04:15:da:28:e8:44:b2:86:28:57:e4:
87:b7:cb:c4:9f:4e:f6:f7:d0:be:89:2d:f4:0d:b0:
09:f7:99:5a:9b:12:5c:20:11:65:c6:c6:6b:75:4c:
c9:01:f8:0c:a0:73:0b:65:33:ae:39:6c:da:78:a3:
23:a9:e5:39:3b:07:e4:74:40:16:b4:c3:01:38:4c:
68:32:53:78:3b:ce:c6:86:2d:87:f9:06:b5:33:53:
9a:42:d7:29:40:aa:91:c8:ba:59:70:a6:8b:1e:e0:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:1C:21:90:13:8C:FF:C5:82:1B:DF:AA:56:98:68:E0:19:C3:9C
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.32.0/20
82.194.224.0/19
87.238.96.0/21
89.188.160.0/19
IPv6:
2a03:8640::/32
Signature Algorithm: sha256WithRSAEncryption
12:2f:14:68:d6:1d:90:ae:c0:55:d8:8f:59:93:c6:3a:b1:5c:
9b:cb:17:a2:c6:f9:29:aa:89:f1:62:ad:b2:6b:e8:f3:35:dc:
7d:d6:05:39:95:b5:2a:ff:84:fd:bb:54:27:3b:db:93:a5:28:
b3:6c:3d:d4:e3:18:f7:a1:7e:fd:ad:05:fc:46:a9:29:bc:bc:
da:1c:43:a3:85:6a:d6:94:95:6d:42:ac:e6:43:62:a9:41:f7:
7f:ba:28:6c:26:75:b2:cd:1b:9b:ed:9e:e3:65:60:5a:ce:a5:
4c:c5:88:c8:5d:c3:d5:28:f7:59:ed:5d:5f:00:6a:27:1a:88:
32:e3:49:b5:64:fc:7c:ac:90:d8:74:a8:f4:6b:33:29:51:02:
b2:2e:87:5c:37:eb:f3:b8:6b:ee:16:fc:2c:da:03:56:68:17:
f0:17:7c:5c:e6:1e:3d:96:67:9b:d4:b5:aa:28:99:f6:5c:a6:
4d:e5:be:4c:97:12:b0:ac:10:a7:9d:e3:55:4c:0e:bf:12:44:
54:5d:b5:ff:17:29:3a:5c:8c:59:b0:b8:12:d7:b9:ab:14:57:
94:8e:1d:83:0f:83:6a:89:ed:ea:d0:04:72:58:8f:05:84:70:
23:58:66:33:44:b5:d1:8f:f2:73:95:0e:69:2d:75:7a:05:0b:
4a:f5:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net