Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/nGtJMPD-W3DPa1SBZ8coXt70X5E.roa
File: nGtJMPD-W3DPa1SBZ8coXt70X5E.roa (raw, json)
Hash identifier: gqIhu2ZCEKZBt5swkOuSsZePJ2iC7jR83FaT1M2sQkA=
Subject key identifier: 9C:6B:49:30:F0:FE:5B:70:CF:6B:54:81:67:C7:28:5E:DE:F4:5F:91
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0185CDB70E2CE12B1CFB01315406017C2829
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/nGtJMPD-W3DPa1SBZ8coXt70X5E.roa
Signing time: Fri 20 Jan 2023 05:46:43 +0000
ROA not before: Fri 20 Jan 2023 05:46:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 212.107.4.0/23 maxlen: 23
212.107.6.0/23 maxlen: 23
92.249.62.0/23 maxlen: 23
92.249.60.0/23 maxlen: 23
176.53.156.0/23 maxlen: 23
176.53.158.0/23 maxlen: 23
85.8.160.0/23 maxlen: 23
85.8.162.0/23 maxlen: 23
62.182.32.0/23 maxlen: 23
62.182.34.0/23 maxlen: 23
217.18.208.0/22 maxlen: 22
139.28.240.0/23 maxlen: 23
139.28.242.0/23 maxlen: 23
5.133.100.0/23 maxlen: 23
5.133.102.0/23 maxlen: 23
31.40.204.0/23 maxlen: 23
31.40.206.0/23 maxlen: 23
84.54.0.0/23 maxlen: 23
84.54.2.0/23 maxlen: 23
85.8.144.0/23 maxlen: 23
85.8.146.0/23 maxlen: 23
139.28.212.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
193.187.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:b7:0e:2c:e1:2b:1c:fb:01:31:54:06:01:7c:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 20 05:46:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6b4930f0fe5b70cf6b548167c7285edef45f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:d8:77:c3:8c:0e:c0:b8:92:ab:80:dc:83:
8a:4f:9b:6d:71:2f:51:64:7b:ad:78:60:ab:59:9e:
03:3a:9f:90:ad:e7:5d:d3:ee:17:57:c2:7c:af:9a:
2f:2d:6d:5a:e2:a5:94:5e:bf:b7:11:54:7a:b7:74:
32:b6:d0:5c:80:9d:e8:9e:08:dc:7a:d3:16:72:f3:
fc:79:63:8a:65:f4:78:c2:eb:07:7c:9e:8e:01:40:
13:6a:6b:36:fc:bf:db:49:a9:ba:a4:c0:f1:d7:5b:
fc:58:0f:9b:9f:e5:be:c8:68:81:4e:9a:76:3e:30:
66:14:ca:6b:35:28:29:f9:82:07:e6:53:84:f9:78:
67:d1:61:3c:54:88:38:b7:35:8a:1d:69:dd:5c:2c:
c6:88:04:eb:87:ad:e1:f7:d2:3d:32:4d:9b:44:d2:
ac:3d:db:75:cf:a5:aa:db:4e:e8:6f:1c:23:9b:21:
a4:dd:e4:7d:ec:e0:91:67:04:da:05:dd:ec:72:46:
cc:14:30:53:0a:d5:f9:89:d7:90:8c:8e:52:d1:a3:
06:46:8e:dc:50:9f:9c:d4:00:a7:a5:3b:f0:53:ce:
dd:59:c8:17:08:9a:a6:ef:d0:c6:10:f1:24:44:93:
10:a6:3c:23:3b:23:70:9b:38:b9:7a:c2:8a:cb:f8:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6B:49:30:F0:FE:5B:70:CF:6B:54:81:67:C7:28:5E:DE:F4:5F:91
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/nGtJMPD-W3DPa1SBZ8coXt70X5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
62.182.32.0/22
77.241.72.0/22
84.54.0.0/22
85.8.144.0/22
85.8.160.0/22
92.249.60.0/22
139.28.212.0/22
139.28.240.0/22
176.53.156.0/22
193.32.204.0/22
193.187.108.0/22
212.107.4.0/22
217.18.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:fe:aa:3e:b6:33:9e:78:51:9e:c1:98:f1:9a:f2:b9:33:6e:
fe:23:28:c6:f3:a2:01:d0:c1:33:fd:57:1f:1e:7e:5b:b5:65:
62:5f:86:18:a7:5b:e2:c9:8a:90:ea:58:d6:90:c7:30:7f:de:
c5:63:02:90:03:ed:f1:14:f7:70:ce:e6:6f:37:e5:a9:14:bb:
de:24:d3:3c:74:55:96:ad:10:93:f8:26:52:21:3f:7e:11:0a:
8d:44:a1:87:57:df:a9:80:c9:7b:7e:fd:5e:f9:ba:30:4a:8f:
be:e0:bd:81:5d:19:71:48:db:06:dd:e7:57:97:2c:0e:20:16:
23:36:3c:72:8d:5d:b2:56:1f:0b:5d:5c:a5:7a:8e:46:e7:67:
77:4c:dc:70:ab:e4:fd:bc:f7:e8:51:16:af:91:37:c7:f1:b8:
ad:67:30:e6:75:2f:c9:96:51:ea:10:25:bb:75:b3:89:10:0a:
2f:d6:29:29:89:2c:6c:d1:20:70:76:9b:74:a1:11:e1:8c:87:
af:a2:a9:b1:f7:90:98:4f:55:14:d7:64:dd:a7:4e:0e:82:e7:
c9:e1:ac:48:ad:9d:9b:21:8b:c4:7c:74:14:51:c0:00:23:4b:
ad:e3:8c:64:6b:68:62:e8:53:2f:fb:4c:44:b6:f7:d3:f0:46:
8b:3a:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net