Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xX_OYBf3IHwAsscOzLg9acpdltM.roa
File: xX_OYBf3IHwAsscOzLg9acpdltM.roa (raw, json)
Hash identifier: 5bTUHNt+zUDPwdQSH0bJeRoNUMy5AFRDJ+5EYa1uPSs=
Subject key identifier: C5:7F:CE:60:17:F7:20:7C:00:B2:C7:0E:CC:B8:3D:69:CA:5D:96:D3
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A757C431F71BFAD5037D6E22CE3AA8AE5
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xX_OYBf3IHwAsscOzLg9acpdltM.roa
Signing time: Fri 08 Sep 2023 15:49:52 +0000
ROA not before: Fri 08 Sep 2023 15:49:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:7c:43:1f:71:bf:ad:50:37:d6:e2:2c:e3:aa:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 8 15:49:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c57fce6017f7207c00b2c70eccb83d69ca5d96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:9d:16:15:f3:3f:97:c3:f8:f7:53:33:bb:
ca:51:4f:5d:08:f8:6f:c4:30:87:f0:7f:7f:ce:57:
71:21:d5:67:e6:11:60:1c:cf:2c:ca:b8:6f:15:a0:
c4:4f:fc:29:41:2e:19:ae:ba:cb:28:df:2d:33:2d:
56:ac:f3:b8:38:c5:c8:c1:d6:f4:c0:22:94:21:ee:
8e:45:b3:9e:74:98:51:ea:98:85:6c:9c:33:f9:6d:
57:74:e1:b0:c0:45:7c:a0:04:f8:71:d1:91:24:61:
19:73:38:32:d4:88:88:66:89:3d:dc:3c:f8:52:3d:
0c:3e:82:10:4b:38:14:ed:fa:59:2e:e7:59:4d:d3:
81:50:9d:82:80:64:b6:e0:8b:f3:40:85:c7:d7:84:
3b:5e:c2:26:ac:b1:53:eb:30:38:b8:a0:0d:58:54:
a8:9d:10:e6:36:4e:d9:2b:c3:95:a5:fd:41:89:08:
3a:8d:8f:2f:e8:78:55:ca:4f:e2:01:4d:b6:d9:d0:
06:54:ee:91:91:b0:87:a8:4b:79:31:6b:00:90:9b:
81:29:24:12:3c:8e:67:37:b2:fa:31:df:9a:5b:fa:
30:dd:11:8b:6a:17:ab:2b:2d:79:e2:42:9f:76:93:
81:88:8a:61:e2:c2:ae:31:4f:12:6d:76:37:4b:ce:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:CE:60:17:F7:20:7C:00:B2:C7:0E:CC:B8:3D:69:CA:5D:96:D3
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xX_OYBf3IHwAsscOzLg9acpdltM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.168.0-109.203.191.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:e1:54:45:c5:22:88:0f:df:57:7f:c0:f4:79:52:1a:04:e5:
5e:78:b0:d7:ee:2f:22:e7:da:43:60:9a:b9:2e:e5:e6:9f:bf:
3d:0d:ca:9e:5b:d8:4a:56:08:db:e9:af:25:20:1f:f8:f3:fa:
bb:56:ce:a3:2c:cd:87:f6:20:ba:31:f8:d3:a5:20:3a:fc:bb:
5f:be:3b:00:f3:a1:7f:da:d6:ce:61:7f:47:9b:3a:88:ac:85:
7a:84:59:73:49:c6:d7:6e:03:f0:e3:c3:8d:2a:4d:75:54:b7:
2d:6c:91:1c:ca:bb:82:cf:3f:91:0f:00:5c:87:89:ef:24:0f:
da:e8:c1:d8:9f:43:b4:09:7a:35:17:07:df:99:1b:9e:34:89:
2c:64:44:c4:02:61:b0:ea:9b:43:ac:90:35:2f:21:8e:61:e6:
fd:86:aa:15:1e:67:c7:be:78:21:f5:45:fb:b1:e2:60:88:75:
e2:1c:e0:b6:a9:8c:ee:b0:49:ad:da:65:a2:06:e8:f0:ad:a7:
d2:5c:29:57:44:61:57:81:11:d3:03:db:ae:6a:56:9e:2a:2d:
9c:57:e1:78:31:bf:62:c3:08:63:4f:e6:82:11:e1:80:3b:cd:
b2:3a:f5:ba:8f:ec:8a:ec:19:a2:d5:97:3d:0a:2c:c6:77:a1:
7c:e6:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net