Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/lTW89QB-MLJo6eSUKAXx7dlnzlU.roa
File: lTW89QB-MLJo6eSUKAXx7dlnzlU.roa (raw, json)
Hash identifier: 1osX1cyMAvBXo4o/2LxLac6BdtoP4W1Y2wcZew5gSWw=
Subject key identifier: 95:35:BC:F5:00:7E:30:B2:68:E9:E4:94:28:05:F1:ED:D9:67:CE:55
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0185714C31DFBC4A9419C38DF094DFA8C141
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/lTW89QB-MLJo6eSUKAXx7dlnzlU.roa
Signing time: Mon 02 Jan 2023 07:04:56 +0000
ROA not before: Mon 02 Jan 2023 07:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209276
IP address blocks: 185.136.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:31:df:bc:4a:94:19:c3:8d:f0:94:df:a8:c1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 2 07:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9535bcf5007e30b268e9e4942805f1edd967ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:f3:22:38:90:31:3b:f9:a6:f8:7e:65:f8:
23:dd:66:ba:2e:1c:c8:2b:2e:f5:b0:77:29:17:0c:
8c:f1:2e:db:83:89:d1:db:bb:a0:ef:10:51:25:a2:
31:54:fd:bf:87:84:0c:59:ca:3b:14:6f:55:5f:74:
a8:94:5a:e7:b4:ae:57:91:8e:87:29:a4:66:dc:6d:
4d:8d:79:11:e0:54:3f:c7:df:41:02:74:d8:76:b4:
db:24:1a:3a:ac:dc:36:8f:64:b6:b0:b5:98:96:36:
4d:8f:d1:ec:1a:ad:29:96:ef:f0:8c:97:d9:5d:c5:
e7:5f:f6:ee:bc:8c:ad:10:c9:84:bd:ca:7f:7f:29:
fb:14:5a:82:fd:be:b1:f2:da:8e:0b:0e:1a:41:43:
88:69:b2:92:fe:7a:16:8e:70:94:f2:39:53:0b:d8:
99:c6:1c:3c:f0:17:6a:80:4e:80:b6:1a:3f:0a:f3:
f1:7f:1d:ff:f6:7d:e9:4e:f1:2d:71:29:1a:7d:99:
43:ca:76:ba:2b:d1:0b:71:f8:5b:d1:e5:82:10:05:
78:06:85:dc:0e:12:61:32:87:11:8a:ad:0e:4d:3b:
ec:b1:e7:1a:c2:c3:51:4f:80:2f:9e:19:81:fe:97:
8b:82:ce:54:4c:df:d4:e5:26:5d:5d:94:8a:72:8b:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:BC:F5:00:7E:30:B2:68:E9:E4:94:28:05:F1:ED:D9:67:CE:55
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/lTW89QB-MLJo6eSUKAXx7dlnzlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:55:a1:4b:35:cd:ab:df:98:57:ed:8e:d8:14:f3:09:9a:33:
7e:c5:ec:fd:d0:62:22:6b:d6:d3:03:43:43:52:74:44:dd:6e:
22:2b:f7:43:25:7a:fc:c9:ad:fa:73:9c:44:6b:29:f5:7c:c0:
c6:2b:25:f0:41:c7:c5:d1:88:9f:3d:04:8b:f7:19:ec:2d:ad:
46:6c:ee:c0:b9:5c:30:c4:c9:2d:34:a1:96:30:a6:2a:34:db:
7d:2a:e3:2a:dc:0b:14:c4:d4:57:7c:f6:2d:ea:83:00:29:c5:
a7:e7:96:3f:60:16:1e:81:fa:f5:e0:d7:27:04:24:4e:d7:37:
dc:c4:63:f3:9e:8a:ee:c6:a4:b9:67:5b:aa:f1:8d:11:b3:9b:
a4:90:8e:49:67:bc:a4:db:07:c5:12:ae:23:a6:f1:d8:9c:f8:
f4:6c:31:c1:27:7c:01:80:68:1e:6e:e1:59:13:e7:1c:43:ee:
65:bf:48:fe:29:1f:17:4e:66:f6:1a:d1:31:6f:8a:34:11:50:
8a:73:86:2a:76:2e:9f:66:02:ec:bc:29:81:19:2f:c8:8c:a0:
71:55:8a:25:ff:26:a0:81:6c:39:30:db:78:44:54:b2:73:58:
ba:a0:7d:09:f2:28:ea:21:59:f5:44:c9:6f:a6:39:3b:8f:16:
00:1d:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net