Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Rxm9F-Y074wmo0rH-NPJjypSFrk.roa
File: Rxm9F-Y074wmo0rH-NPJjypSFrk.roa (raw, json)
Hash identifier: 6jCwoTlRghzAsVrbYXg33G7i3aE7/KsplyFgfqNBh58=
Subject key identifier: 47:19:BD:17:E6:34:EF:8C:26:A3:4A:C7:F8:D3:C9:8F:2A:52:16:B9
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0188596CE7E8C069C1C9388D04BE266A2BF0
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Rxm9F-Y074wmo0rH-NPJjypSFrk.roa
Signing time: Fri 26 May 2023 18:58:09 +0000
ROA not before: Fri 26 May 2023 18:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61073
IP address blocks: 185.183.99.0/24 maxlen: 24
185.51.123.0/24 maxlen: 24
2a04:1680::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:6c:e7:e8:c0:69:c1:c9:38:8d:04:be:26:6a:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: May 26 18:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4719bd17e634ef8c26a34ac7f8d3c98f2a5216b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:8d:bb:09:7d:88:ab:1d:0d:47:bd:cc:f4:
31:a7:04:43:ed:05:6b:2e:69:0c:cb:22:01:53:7c:
1c:a7:a9:ea:1f:46:e4:44:c9:46:aa:02:1d:7d:43:
e3:4a:f2:ef:49:04:1c:6f:d7:66:a2:f0:41:34:2c:
aa:c2:42:b3:fe:3c:80:59:c6:d7:95:54:11:9a:c0:
58:32:2c:14:10:17:f2:68:52:bc:90:43:0f:a3:63:
16:01:3d:6b:d4:91:ab:3d:bd:41:5e:40:24:01:9c:
da:25:10:ca:ab:3c:b8:37:f8:b0:6f:bf:59:b0:fe:
c3:07:9e:cf:73:30:00:a2:42:1c:c5:e9:02:50:21:
ef:86:a5:dc:7a:66:17:8b:e8:17:8f:ac:08:35:9c:
19:9d:af:fb:40:e1:49:8d:77:c1:b6:92:09:d3:e6:
ec:86:a2:1c:a7:83:f3:08:0a:39:cf:1a:1f:97:ee:
d1:eb:13:ce:f4:2e:15:95:9e:ce:d6:01:28:8b:1d:
cd:23:83:44:60:d4:ca:4d:9a:78:a4:d1:d4:f5:11:
88:2f:b6:3c:a8:86:c0:3c:9b:ee:a1:bb:09:2b:f1:
6c:06:e5:f5:58:8e:68:59:1b:75:22:1e:46:32:ac:
2b:11:f3:3f:e1:00:0d:8e:31:9d:23:b8:a1:fe:a7:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:19:BD:17:E6:34:EF:8C:26:A3:4A:C7:F8:D3:C9:8F:2A:52:16:B9
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Rxm9F-Y074wmo0rH-NPJjypSFrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.123.0/24
185.183.99.0/24
IPv6:
2a04:1680::/29
Signature Algorithm: sha256WithRSAEncryption
8e:5e:ae:13:af:28:6f:c0:bb:72:85:41:f4:69:c9:1a:8c:3f:
47:3b:07:19:cd:21:3e:e1:82:47:7a:47:4f:26:3e:0e:b6:50:
63:6b:c4:95:89:5c:2d:58:07:77:e6:eb:67:bc:3a:51:b7:31:
7f:19:da:ee:2a:58:ea:27:ea:b0:7d:d6:3e:37:6c:fb:6d:c7:
d5:e4:bd:47:16:34:11:01:7a:30:e3:fd:09:ec:25:08:a7:2b:
13:bd:b5:24:8a:c9:f4:d3:a5:b5:f9:04:a4:5d:79:2f:53:b8:
37:2b:a4:55:12:31:8c:05:1a:1d:f6:82:b5:46:95:cc:8d:70:
d0:0e:11:c8:9f:ec:d5:18:fa:d2:87:1a:09:a5:28:ca:e1:c8:
1b:b5:90:2d:06:f2:08:18:23:88:23:d6:c1:2e:fc:61:ce:6f:
15:1b:73:d5:b7:53:ab:49:a2:93:64:c5:22:3c:7f:a7:ee:0f:
f1:fb:30:81:a6:d2:1f:0e:b6:64:46:8c:cf:35:91:cd:8e:c0:
e8:14:16:39:24:3c:92:95:45:55:03:1a:18:fc:02:a5:9c:92:
51:33:0a:34:dd:3c:65:60:22:d3:52:ae:c9:0b:29:16:f0:f7:
77:79:b8:06:53:53:a9:85:38:b2:be:5c:1a:a4:2d:79:da:63:
ae:ae:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:05 2024 by rpki-client on console.sobornost.net