Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/m4PM5VmtJfoQijXdMHvLceSWlCI.roa
File: m4PM5VmtJfoQijXdMHvLceSWlCI.roa (raw, json)
Hash identifier: 4Yzlb7lywygQDZdz1/wcoIM/QmkDoCcBvwhSUaw7h7g=
Subject key identifier: 9B:83:CC:E5:59:AD:25:FA:10:8A:35:DD:30:7B:CB:71:E4:96:94:22
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 0188111948596933D337739B413D6E067B17
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/m4PM5VmtJfoQijXdMHvLceSWlCI.roa
Signing time: Fri 12 May 2023 17:54:09 +0000
ROA not before: Fri 12 May 2023 17:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.124.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:19:48:59:69:33:d3:37:73:9b:41:3d:6e:06:7b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: May 12 17:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b83cce559ad25fa108a35dd307bcb71e4969422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:21:47:6a:85:01:22:f6:84:42:31:b4:73:
b8:8c:53:43:2b:d1:e8:3a:e8:5c:90:8f:8a:e0:08:
fa:08:f9:98:9b:29:16:12:43:7f:e9:b1:c2:9f:26:
2e:2f:6a:b8:fc:89:d2:76:b2:67:e7:2e:1d:ae:c3:
5c:1d:78:ef:1a:ea:e0:90:f2:e0:5c:fd:85:90:a4:
e8:25:62:7e:0c:ea:d2:27:0a:56:04:26:18:44:76:
64:0a:36:38:95:64:04:c4:16:2a:b8:fb:d3:2a:95:
48:a8:9e:6b:a7:df:f4:0a:77:8c:3b:57:39:85:dd:
63:2d:01:d0:5a:69:e8:ae:57:a6:b5:f3:d3:38:9b:
ed:3a:5b:0c:49:cc:7b:f3:69:ef:75:3e:50:3f:34:
4e:90:f1:db:19:89:b0:f8:51:37:e2:66:d5:13:bf:
b7:e1:ca:e3:62:3f:16:08:c6:62:17:97:5e:eb:62:
26:43:7f:7a:44:e2:8c:c7:f1:6a:1f:f5:22:47:d1:
b0:ab:10:38:b2:f6:73:4b:c5:3b:bd:fd:3c:3c:6e:
fc:e3:1f:6c:80:b9:5e:e5:f9:87:37:a8:39:fe:dd:
15:70:59:08:0f:52:17:68:b3:e8:f3:4e:2e:d0:9c:
67:c0:c6:12:c7:38:8b:cf:37:a7:ce:a3:02:b8:e6:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:CC:E5:59:AD:25:FA:10:8A:35:DD:30:7B:CB:71:E4:96:94:22
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/m4PM5VmtJfoQijXdMHvLceSWlCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.132.0/22
Signature Algorithm: sha256WithRSAEncryption
10:56:3d:be:75:f5:6b:6c:a0:f5:db:4e:01:fb:cb:57:8e:94:
bf:5e:35:0f:e0:fc:6c:32:98:a3:fc:d3:d8:fd:c8:1a:2b:ce:
d3:8a:4b:7d:5d:ef:f4:d1:15:fb:a0:e1:13:d8:50:d5:ee:d0:
50:dd:5d:db:e3:69:50:3e:7c:ca:bb:42:7a:ef:c8:39:c0:fe:
6c:d6:39:88:18:55:5e:8b:46:78:3d:50:76:70:0c:3a:68:b0:
86:b5:f0:e4:b4:da:0f:99:82:b4:d3:9e:8a:67:cb:33:bc:73:
ad:cf:8f:50:84:f8:b5:da:2f:a9:f5:22:00:fa:bc:7d:03:49:
d5:48:8e:2c:ea:4b:d4:03:9d:6d:e4:6d:bd:72:71:32:d8:47:
ef:f6:38:0c:d5:9f:aa:14:e2:3a:6b:d5:2c:94:79:8f:85:fb:
be:38:99:28:d7:82:c9:80:80:4e:eb:57:e0:5c:79:04:6a:bb:
e4:45:0f:72:df:24:cd:bf:4b:b6:1a:59:3b:32:f8:f1:53:ed:
f5:53:34:55:bf:a2:98:0b:66:63:e7:ec:6e:59:45:7d:ea:a7:
13:14:93:55:09:42:4d:66:78:b8:22:f5:c2:cf:fb:0b:ea:73:
a5:ed:57:18:35:d3:83:b6:87:91:57:5d:a2:eb:45:84:15:0a:
dc:e1:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:23 2024 by rpki-client on console.sobornost.net