Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/DkS25l6VWmWeHy-AQ9EOGW_MwX4.roa
File: DkS25l6VWmWeHy-AQ9EOGW_MwX4.roa (raw, json)
Hash identifier: tjFk/84zoZoyHWWLoFKGVL4RiheGdA6aGDcgXakhsRQ=
Subject key identifier: 0E:44:B6:E6:5E:95:5A:65:9E:1F:2F:80:43:D1:0E:19:6F:CC:C1:7E
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0185B157EF89A9BABC482E622E5C19C235B3
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/DkS25l6VWmWeHy-AQ9EOGW_MwX4.roa
Signing time: Sat 14 Jan 2023 17:33:28 +0000
ROA not before: Sat 14 Jan 2023 17:33:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 89.34.239.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.208.16.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b1:57:ef:89:a9:ba:bc:48:2e:62:2e:5c:19:c2:35:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 14 17:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e44b6e65e955a659e1f2f8043d10e196fccc17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:95:9c:6c:c2:45:d5:e2:4a:2c:5b:a0:61:
af:45:61:e4:05:ba:22:10:e1:a3:de:5a:34:50:30:
79:4d:cc:f9:de:68:59:1e:66:7a:1f:8b:92:02:a5:
74:bf:ee:3c:bc:cb:55:83:c4:bd:01:a6:d0:71:9a:
56:8b:d8:bc:e2:c9:6b:fd:f6:3e:a9:44:d4:86:ee:
7c:c4:93:1e:64:5d:64:f5:cc:48:8b:63:0f:89:30:
1d:85:1d:bc:4e:cb:be:4e:da:e4:8a:de:38:8a:c9:
1b:8c:6f:ad:40:95:c4:5a:7e:65:cc:47:ab:70:d3:
e5:1e:59:9c:29:44:7c:d4:37:05:c0:aa:7e:0c:5b:
70:cf:7f:0e:06:86:fb:1d:59:bb:7a:11:1f:37:f3:
76:98:65:3f:9f:09:e0:82:58:7c:aa:33:32:3d:85:
c9:08:61:15:26:f2:26:64:0f:f7:21:86:30:2a:3f:
f1:3d:a7:66:9e:cb:ac:cc:02:db:52:56:10:1d:07:
0d:55:b1:e5:25:ce:3e:10:53:59:40:45:45:0c:13:
ba:ef:0b:02:33:73:87:27:4a:bf:2a:4f:bf:55:5a:
13:90:56:66:be:82:46:58:d8:3b:1e:73:93:91:84:
58:cd:a1:27:a2:02:e8:ea:96:76:9e:a3:03:83:b3:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:B6:E6:5E:95:5A:65:9E:1F:2F:80:43:D1:0E:19:6F:CC:C1:7E
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/DkS25l6VWmWeHy-AQ9EOGW_MwX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
77.81.103.0/24
89.34.239.0/24
89.43.34.0/23
94.176.212.0/24
188.208.16.0/23
Signature Algorithm: sha256WithRSAEncryption
73:49:37:b2:3d:b0:5d:3c:3c:be:46:5a:e9:ab:6c:f6:22:73:
63:77:34:02:bc:8a:e2:3d:0c:21:f7:23:96:a6:c8:69:89:40:
4f:63:31:53:00:e6:cb:7d:51:18:0e:7e:bc:af:bc:a5:86:07:
ff:9b:c1:8e:5b:87:62:54:e2:f3:0b:16:75:4f:d4:1d:7f:63:
23:a9:76:b9:03:16:19:0a:12:97:b5:ca:53:e7:4f:f8:0a:9e:
4d:3b:e0:61:35:48:0c:6d:5e:06:2a:44:a8:e7:50:c5:1f:3f:
92:31:df:ae:46:e6:af:d6:59:02:28:40:73:4d:ab:68:d0:da:
b6:97:62:3e:c0:81:dd:5a:a3:28:0b:33:3c:02:53:8e:04:e6:
68:7f:bf:b2:35:39:c7:11:2e:cc:a1:ed:da:aa:36:eb:21:ab:
ac:00:fb:2b:33:a4:cb:6f:0e:65:a7:f0:10:41:45:90:05:a3:
9b:41:31:84:12:86:4b:67:72:4a:14:5e:a4:5c:b6:75:08:ae:
61:8e:e0:fb:d8:f8:c8:17:58:57:78:d5:be:78:86:77:32:5e:
6f:5b:b8:3a:3e:c1:d3:06:f1:e2:11:7d:a8:74:9d:04:13:8b:
1b:65:69:3d:2d:4d:87:33:e3:d3:8e:a7:3a:5e:42:2d:b5:48:
0c:5c:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net