Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/gjLc1ex0l8J4e4icnu6Haz0q-nU.roa
File: gjLc1ex0l8J4e4icnu6Haz0q-nU.roa (raw, json)
Hash identifier: EM9DbkB5GSHEqGH4k4fqQX0EKVj8kDozYC+l61g7jn4=
Subject key identifier: 82:32:DC:D5:EC:74:97:C2:78:7B:88:9C:9E:EE:87:6B:3D:2A:FA:75
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 01856C9CC54D486BBF61FF6A4FC59CAFAEF7
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/gjLc1ex0l8J4e4icnu6Haz0q-nU.roa
Signing time: Sun 01 Jan 2023 09:14:51 +0000
ROA not before: Sun 01 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199860
IP address blocks: 193.43.41.0/24 maxlen: 24
5.188.106.0/23 maxlen: 23
185.44.14.0/23 maxlen: 23
185.44.12.0/22 maxlen: 22
185.44.12.0/23 maxlen: 23
5.188.104.0/22 maxlen: 22
5.188.104.0/23 maxlen: 23
2a01:6520::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c5:4d:48:6b:bf:61:ff:6a:4f:c5:9c:af:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Jan 1 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8232dcd5ec7497c2787b889c9eee876b3d2afa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:1c:4d:8d:29:ec:62:32:fd:0c:44:5f:26:
59:47:43:6f:da:57:3e:a4:f9:56:0b:31:5e:88:a8:
ba:ed:3e:94:a0:93:67:e3:fb:ca:d7:14:b7:d5:89:
df:4a:01:c6:32:ff:e0:ee:46:b6:ef:6b:c1:20:5f:
95:88:6f:17:5e:0d:b3:fe:34:3f:47:d5:8b:82:9f:
41:20:96:3e:1c:5e:01:bc:82:25:46:e3:f5:c3:73:
58:62:e1:e5:03:66:0a:dc:3a:96:73:40:8c:d9:e1:
56:81:8d:1c:19:7e:84:ae:38:4e:ae:02:e9:03:1f:
23:b2:f4:95:b8:98:9c:d3:57:dd:a0:67:42:cd:a9:
dc:ca:98:79:2b:1b:b0:bc:9d:52:a2:2c:1f:f8:93:
33:1c:60:f5:ce:8f:f6:d2:10:d2:7e:c7:b9:91:1a:
32:cb:8d:a9:81:6b:1c:04:94:07:09:1c:1d:37:89:
3e:f8:49:46:24:50:ef:e9:c3:f6:79:7a:c8:b9:58:
dc:34:40:7a:3f:34:34:d6:10:43:9c:49:fe:a5:9e:
ad:cf:33:f6:2d:4b:fc:a7:97:7b:df:eb:dc:7c:47:
20:6d:9f:62:22:6d:7c:3c:4f:f1:69:ee:99:da:6e:
7a:0a:96:f1:d1:db:7a:c9:50:5e:b7:66:94:94:3d:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:DC:D5:EC:74:97:C2:78:7B:88:9C:9E:EE:87:6B:3D:2A:FA:75
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/gjLc1ex0l8J4e4icnu6Haz0q-nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.104.0/22
185.44.12.0/22
193.43.41.0/24
IPv6:
2a01:6520::/32
Signature Algorithm: sha256WithRSAEncryption
7b:5a:83:1d:13:26:c0:08:10:9b:e3:14:da:35:db:0b:fa:1a:
19:ad:84:6e:2b:ae:10:84:bf:04:21:01:6e:03:44:3a:41:ff:
b3:47:01:1a:80:9e:d8:b1:b8:7f:83:8d:e5:7f:ac:b0:76:f3:
df:c0:5b:54:80:00:c0:de:1d:80:fa:07:64:e5:f2:7d:2b:16:
d6:46:5b:9f:fd:b1:20:04:50:e1:1b:c3:31:fd:b8:9f:a1:07:
50:ad:c2:d3:9f:72:3d:ec:54:d9:c4:5a:5c:e4:6b:55:f6:51:
14:da:ea:e0:8b:30:f7:3e:24:b7:c4:a0:b5:d1:65:af:d3:e0:
35:a0:05:08:3b:1d:24:b7:32:b4:6d:3b:38:00:f3:a8:57:93:
d2:d6:ff:20:38:36:14:b5:b5:88:9a:d6:90:b9:ce:4d:4d:e5:
66:0a:42:8f:a4:b4:37:31:36:a0:3c:38:42:92:7d:f8:b2:27:
a4:a6:36:a4:c6:a1:3a:3a:6a:3f:70:78:b4:b0:0a:a3:af:ea:
fa:54:74:f8:5f:69:17:38:ba:ba:8d:b2:1f:bf:11:3a:63:71:
11:d8:9e:4d:b5:ab:3a:f6:b0:21:e9:dc:14:83:89:f0:1e:87:
65:5f:c3:11:41:be:9c:b0:28:92:e0:c2:6d:42:4c:70:61:b6:
f3:90:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:53 2024 by rpki-client on console.sobornost.net