Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/SlreGN1gRJO4LzIByc5eFWP4g_o.roa
File: SlreGN1gRJO4LzIByc5eFWP4g_o.roa (raw, json)
Hash identifier: t30w3NOi7R2J1pbq/FNTfOQ7L8jrvNzEoXj3y7OVuEM=
Subject key identifier: 4A:5A:DE:18:DD:60:44:93:B8:2F:32:01:C9:CE:5E:15:63:F8:83:FA
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 01899D163A7CDD65937D9E2DD4D60E982004
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/SlreGN1gRJO4LzIByc5eFWP4g_o.roa
Signing time: Fri 28 Jul 2023 15:20:26 +0000
ROA not before: Fri 28 Jul 2023 15:20:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200780
IP address blocks: 194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
46.19.104.0/21 maxlen: 21
185.144.24.0/22 maxlen: 22
45.155.228.0/22 maxlen: 22
45.9.104.0/22 maxlen: 22
194.13.67.0/24 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
45.85.132.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
91.227.36.0/22 maxlen: 22
194.13.64.0/24 maxlen: 24
2a05:46c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:16:3a:7c:dd:65:93:7d:9e:2d:d4:d6:0e:98:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Jul 28 15:20:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5ade18dd604493b82f3201c9ce5e1563f883fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:8c:5d:9e:96:da:af:eb:45:d5:23:47:1e:
bf:51:48:86:37:5d:f3:0a:b1:cb:85:69:55:00:80:
0b:35:01:91:08:b5:4c:4c:c0:e4:6d:8c:37:89:06:
09:06:2a:c3:15:a8:5f:7e:79:89:8e:a0:4b:00:7d:
90:95:86:21:01:81:6e:40:a3:05:c2:ea:46:f1:eb:
49:71:f3:dd:c1:6a:4b:93:0e:f1:03:bb:d2:93:51:
ad:13:87:c8:d8:14:e6:9e:57:42:46:66:4a:c9:91:
18:30:53:fa:7b:d9:78:e7:80:3c:96:af:7b:ae:ce:
b7:92:85:30:3e:07:ac:a6:c6:32:a8:97:75:4e:e7:
dd:c3:05:09:66:19:11:f0:6e:c9:30:21:0c:5a:63:
b7:6e:72:00:54:d2:18:93:8b:ce:3e:7a:73:b6:8c:
f4:4d:31:18:ba:81:bf:e7:f7:cf:8d:b2:98:9e:a8:
fb:6c:63:de:58:e3:fd:37:7f:fb:7f:b2:a5:3b:2f:
a1:31:3c:25:d2:db:3d:8a:e8:e8:a6:6e:d8:7d:66:
2d:54:92:e1:fc:77:f4:69:45:1e:ca:d8:21:90:12:
28:f5:e0:9e:50:b4:96:6f:12:f8:6d:81:03:42:f9:
6d:3b:ee:2a:e0:a8:d7:38:73:a4:b0:74:c7:f7:07:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:DE:18:DD:60:44:93:B8:2F:32:01:C9:CE:5E:15:63:F8:83:FA
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/SlreGN1gRJO4LzIByc5eFWP4g_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
46.19.104.0/21
91.227.36.0/22
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:da:94:0a:0c:9b:36:0c:d1:cc:f0:16:9a:03:95:d3:52:e2:
fb:f4:5a:c6:f4:4d:95:6e:08:f5:0a:71:10:cf:c2:ef:71:b5:
2f:c8:ba:77:6f:d1:29:48:5f:de:37:0e:84:44:3c:16:70:8e:
9f:42:47:4d:bd:3e:3a:e5:96:a9:3f:7f:53:8a:ee:fa:7e:c6:
d4:ba:37:ee:b3:fe:ef:4c:32:b5:8d:6e:0c:08:5f:e2:c5:df:
4e:39:b5:d3:25:07:94:11:e9:29:ec:1f:a4:40:c2:0c:a9:d6:
84:db:9d:b0:0d:4d:12:dd:35:25:38:b1:02:3c:34:cc:09:79:
ae:67:b6:f9:63:79:39:30:7a:f7:49:60:35:1f:b4:1f:ea:0b:
83:60:a7:0b:55:40:f0:5e:08:83:ee:e9:5c:a4:0f:68:1c:53:
41:31:b9:ac:1a:3e:d5:9b:be:4a:c7:6d:e6:49:77:5e:01:fe:
14:b4:dc:32:52:a3:f0:67:cc:ed:8f:7d:70:78:26:36:1b:6a:
10:06:91:68:6c:1e:cb:bf:93:ce:04:04:d1:9b:cc:25:d8:6b:
94:cc:e7:bc:de:5d:41:06:4b:49:f1:f6:c5:96:1a:bb:b3:9a:
79:07:5c:b1:86:a5:76:c1:10:c4:17:f7:a4:f7:55:77:fd:7e:
85:c9:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:38 2024 by rpki-client on console.sobornost.net