Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/_cCbsf8BL3TFOY29N9AXd-JrlKw.roa
File: _cCbsf8BL3TFOY29N9AXd-JrlKw.roa (raw, json)
Hash identifier: POlB6UIq4GJ3lMQzYaw+7mFlpk0eO3fWUyEoiv3K+Bo=
Subject key identifier: FD:C0:9B:B1:FF:01:2F:74:C5:39:8D:BD:37:D0:17:77:E2:6B:94:AC
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018C7E4F776875A4A5E695AFBEE6C88611EF
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/_cCbsf8BL3TFOY29N9AXd-JrlKw.roa
Signing time: Mon 18 Dec 2023 19:03:06 +0000
ROA not before: Mon 18 Dec 2023 19:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.244.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:4f:77:68:75:a4:a5:e6:95:af:be:e6:c8:86:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Dec 18 19:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc09bb1ff012f74c5398dbd37d01777e26b94ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:a7:51:f0:2b:11:26:d4:bf:ad:4e:d8:f9:
c3:03:a7:a7:b3:bd:79:dc:db:0b:bf:f3:26:93:49:
68:78:6f:db:a5:cd:22:6d:d6:ef:10:cd:aa:bd:31:
95:07:69:27:d2:c3:ca:dd:f7:db:5c:68:2b:e5:55:
7f:f0:d2:bb:d6:06:a1:42:26:3a:22:0d:7a:60:ee:
d0:56:bb:00:84:1f:1a:6f:75:c1:cf:8d:c5:2f:fd:
a4:c6:ed:16:37:46:82:71:78:97:d1:1d:03:b8:af:
41:4f:f2:f1:65:bd:a7:00:57:48:05:55:bc:c3:62:
a8:b1:a2:61:05:e4:f9:9d:ee:aa:64:56:4a:43:ff:
bb:44:1a:62:68:42:a6:e3:ca:ce:0f:19:f8:1e:7b:
cd:09:4e:81:57:b4:c9:20:ec:51:89:50:2c:35:a2:
f1:0b:39:5b:e2:5b:09:9b:0a:8f:ac:86:ec:7d:0e:
2d:60:f8:cf:ad:1a:a1:d6:d6:23:bd:72:c9:1a:14:
7a:67:90:c6:eb:e1:4d:30:76:02:59:b8:d5:56:aa:
6b:32:3e:80:f3:dc:28:58:05:e1:69:06:2d:b4:fd:
fb:b2:ed:00:45:3d:ce:eb:44:3c:5e:33:e2:92:94:
48:45:09:1e:4d:0d:5f:54:da:24:8c:94:aa:32:a7:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:9B:B1:FF:01:2F:74:C5:39:8D:BD:37:D0:17:77:E2:6B:94:AC
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/_cCbsf8BL3TFOY29N9AXd-JrlKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
Signature Algorithm: sha256WithRSAEncryption
66:af:9b:e8:48:dd:f7:11:e3:ad:b0:d1:3e:57:e8:c1:85:50:
61:e8:a8:f3:16:6c:91:1d:fc:cc:8c:b0:15:a0:53:50:f2:c1:
06:1b:7d:b5:f3:b4:03:f4:9e:b7:13:22:12:e2:9b:b0:a9:ff:
67:3a:9f:5b:06:4f:cd:68:67:a3:6a:c5:14:77:1e:e8:ed:ea:
6b:45:14:5c:cd:0a:c1:13:45:16:84:35:2b:d1:1a:92:0e:f9:
44:b7:d1:5d:a1:b6:f0:ee:86:12:e9:a9:02:45:66:ff:30:bc:
ce:79:a6:7f:61:24:c9:bb:3b:e6:7a:e2:d9:9e:e1:51:50:cd:
5f:38:f8:f3:7e:c5:32:f0:e6:8c:09:28:c8:82:46:0b:e3:bb:
66:57:ec:3f:9d:5c:87:eb:c4:b2:89:8a:2b:66:f2:21:d9:81:
44:19:dd:52:57:a9:61:6a:92:11:97:8b:bf:45:34:c1:e5:42:
2f:7e:06:6c:3d:d7:ee:8b:41:8d:ad:b3:0e:66:18:49:a1:ab:
20:26:27:20:d4:b4:fb:e0:4f:c5:66:e2:19:2a:1c:5e:8b:d5:
3b:42:a5:41:58:89:51:4d:41:f4:64:5a:4f:7c:77:42:a7:2f:
55:8d:46:01:17:4e:90:97:0f:1a:bf:67:a0:3d:83:f5:ef:c9:
a6:13:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net