Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/vXhDkzsv-hHM9wh9AMx9rP2p-Lg.roa
File: vXhDkzsv-hHM9wh9AMx9rP2p-Lg.roa (raw, json)
Hash identifier: zKYoPQEh13LyZd/EKT90DTgp6DNbduIqN4OYAZrhBt8=
Subject key identifier: BD:78:43:93:3B:2F:FA:11:CC:F7:08:7D:00:CC:7D:AC:FD:A9:F8:B8
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0185714C31484B1600D25355505BA9FA0E28
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/vXhDkzsv-hHM9wh9AMx9rP2p-Lg.roa
Signing time: Mon 02 Jan 2023 07:04:56 +0000
ROA not before: Mon 02 Jan 2023 07:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208331
IP address blocks: 185.136.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:31:48:4b:16:00:d2:53:55:50:5b:a9:fa:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 2 07:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7843933b2ffa11ccf7087d00cc7dacfda9f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:a7:ad:9d:6c:d5:90:b7:1b:31:f9:fd:ae:
b5:0f:eb:42:f5:7e:dc:f3:fd:e3:bd:40:4c:a9:90:
6d:aa:0b:60:91:b3:79:33:af:cc:14:8c:bd:5f:29:
ff:7a:65:db:62:c8:d3:34:06:8c:a1:90:66:33:c9:
d8:94:cc:c5:a0:22:86:06:f9:75:ba:0a:26:79:52:
57:81:95:90:ff:85:c6:d8:5c:1d:44:17:ad:f3:be:
75:9f:2d:18:dd:43:c9:67:8d:63:8e:9d:cf:dc:27:
2c:4a:54:3c:06:ff:49:99:7e:a4:5c:e6:ad:6e:74:
79:83:bf:b6:3e:19:ed:57:de:43:6c:61:dd:0d:a4:
75:59:d2:e2:e7:7c:d3:d0:a3:9a:aa:d4:5a:93:4a:
d8:10:77:9c:d2:a0:01:1e:7a:d4:ca:fa:c1:1f:3d:
b7:24:d2:82:03:0d:18:0c:fa:6d:b5:da:f1:1c:24:
22:45:80:6d:0d:5c:d3:00:4a:4d:21:ca:fd:70:4b:
e9:97:6b:31:77:bf:55:4f:d4:a1:63:bb:b8:a0:79:
68:0f:ce:b1:df:f3:62:1c:76:5c:2b:7f:ef:b3:5b:
67:65:95:4c:ad:b8:73:da:e4:33:18:aa:1a:35:90:
db:a9:67:1d:f7:2d:8e:ae:73:cf:bf:9f:2e:f7:6e:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:43:93:3B:2F:FA:11:CC:F7:08:7D:00:CC:7D:AC:FD:A9:F8:B8
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/vXhDkzsv-hHM9wh9AMx9rP2p-Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3e:3a:39:ed:b7:18:a9:c3:13:a3:54:37:47:30:da:b4:28:
40:d4:b1:c5:ea:b2:ab:71:08:38:4d:80:a5:d0:2f:76:5b:b1:
bf:f7:fe:0c:dd:ff:eb:75:36:d4:43:ef:c8:7c:8b:a1:c8:27:
a1:8f:c5:a4:ae:ff:a4:c7:d8:35:c8:2c:fe:4b:bc:f1:01:00:
5c:bd:c2:ed:ac:ec:e2:1c:63:74:0c:e7:cd:bc:22:5a:90:1a:
9e:b5:8b:a3:f9:00:4e:cd:ab:0f:91:45:c8:47:3b:b7:cf:33:
5c:57:6b:10:00:cc:58:36:03:28:7a:d7:cd:74:67:82:4d:47:
14:71:36:55:0e:98:76:b5:1d:93:08:8d:a3:bd:70:d7:0e:9b:
89:39:85:10:23:f1:2b:ea:c9:e7:3b:0a:71:ec:c6:ea:75:5c:
6c:57:4b:d8:5f:ba:4f:4a:e3:8d:1e:4c:4a:47:1a:73:4b:e6:
5f:c0:ca:bd:2a:e2:24:fe:55:7b:ab:02:a4:78:c0:2d:8b:82:
e4:4f:f0:4f:9c:e1:53:b8:e8:bf:1b:c7:14:e2:c0:17:15:a6:
2b:94:e0:9b:b2:b0:5f:10:e8:e7:64:28:71:c8:a5:52:11:e4:
e8:d7:43:dd:a2:f2:21:88:3a:a0:63:1b:a4:8f:98:80:24:1a:
69:e6:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net