Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/7SYo0PoG1Z0ZeGCXhGiKvOUO6DM.roa
File: 7SYo0PoG1Z0ZeGCXhGiKvOUO6DM.roa (raw, json)
Hash identifier: GL9bqRCZICPGusLVffDRS8Au93J9Jxa6Gee7F2gyydM=
Subject key identifier: ED:26:28:D0:FA:06:D5:9D:19:78:60:97:84:68:8A:BC:E5:0E:E8:33
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01899371F8ED17B3AE9E46BACA8A24FC360F
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/7SYo0PoG1Z0ZeGCXhGiKvOUO6DM.roa
Signing time: Wed 26 Jul 2023 18:24:27 +0000
ROA not before: Wed 26 Jul 2023 18:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41040
IP address blocks: 195.189.92.0/24 maxlen: 24
195.189.95.0/24 maxlen: 24
195.189.94.0/24 maxlen: 24
195.189.93.0/24 maxlen: 24
194.127.180.0/24 maxlen: 24
2001:67c:2da8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:71:f8:ed:17:b3:ae:9e:46:ba:ca:8a:24:fc:36:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jul 26 18:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2628d0fa06d59d1978609784688abce50ee833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:88:30:7c:de:6e:8c:a6:aa:c7:ad:36:fe:
01:4f:c0:8e:8f:ed:08:87:38:4e:20:84:49:ed:c6:
36:5a:16:cd:36:82:27:ad:ae:d6:c2:ae:ae:52:4a:
61:81:fd:65:92:bc:87:80:66:9a:cc:16:8d:d3:c7:
7f:2e:42:42:f8:b8:16:9a:71:87:6a:e4:72:ed:01:
87:c1:20:36:b8:3a:28:81:99:be:ff:7e:40:2f:24:
a5:8c:9d:61:8d:84:ad:b0:f7:87:11:c1:2a:c3:cf:
3a:71:d9:4a:07:73:7c:16:de:84:65:53:8b:a6:82:
a5:af:fc:00:7d:24:23:ed:2f:f9:a3:3e:4a:bc:35:
2d:c3:54:a3:54:a3:fd:41:5c:7f:a3:d0:3b:cd:fe:
5a:d5:1d:7f:a2:6b:01:47:68:6f:36:4f:e7:26:ce:
44:aa:6e:22:68:9d:e2:35:8e:33:ad:2b:b8:21:50:
9a:de:bb:f1:d9:82:de:13:c3:40:ab:60:2d:0f:92:
1b:1d:1d:51:82:39:43:de:b7:ce:4f:4e:a7:68:6b:
95:5a:10:fc:71:9b:f7:ee:64:90:3b:63:c9:64:ea:
a0:f9:1d:11:a6:52:11:8c:a4:46:c4:6f:ba:71:ec:
b5:43:ee:65:07:46:4d:3a:e5:4c:1b:e8:d5:bf:9e:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:28:D0:FA:06:D5:9D:19:78:60:97:84:68:8A:BC:E5:0E:E8:33
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/7SYo0PoG1Z0ZeGCXhGiKvOUO6DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.180.0/24
195.189.92.0/22
IPv6:
2001:67c:2da8::/48
Signature Algorithm: sha256WithRSAEncryption
08:49:ef:23:fd:07:38:bc:c2:b2:21:a2:86:4f:61:09:ff:3d:
b0:b4:b9:10:42:13:ac:56:4b:e3:06:fb:55:f6:35:00:c2:6e:
31:51:f5:17:20:17:b8:f1:24:cc:bf:c4:55:bf:f8:f5:ed:f8:
1d:00:05:2d:4a:53:ba:11:70:6d:42:49:01:27:33:04:e1:b2:
82:90:62:2c:cb:57:68:f0:bb:b4:07:cf:99:fe:c3:98:23:5f:
1d:7f:39:7f:f1:38:8b:56:b0:6b:2b:08:c2:8c:e6:28:ec:a1:
19:a1:30:ba:7f:3e:94:66:90:23:b8:e2:6d:ea:18:54:82:58:
d5:8c:30:21:c1:ae:7f:0a:fb:83:a1:64:50:d3:5c:fa:cd:be:
58:58:29:f9:d2:fc:31:da:95:96:b4:dd:b8:38:8b:83:34:39:
f6:29:36:5d:ca:7f:67:a2:60:e4:53:8a:74:04:64:de:4f:00:
8a:66:d6:8f:6e:4c:56:77:da:0a:a9:70:82:3a:1c:0b:3e:05:
6d:21:f4:41:f2:a4:4a:44:f9:d9:bc:6d:bb:1d:dd:71:c2:f8:
21:b0:f8:d1:5b:eb:6c:e7:ba:d3:7f:80:93:4a:a2:f5:4a:bc:
cc:fb:29:2e:b2:77:51:7c:13:75:52:78:fe:13:65:86:5b:25:
e6:2b:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:42 2024 by rpki-client on console.sobornost.net