Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/5Utq0yZcKeL_kqzTC-oL-DESHGo.roa
File: 5Utq0yZcKeL_kqzTC-oL-DESHGo.roa (raw, json)
Hash identifier: VwptyMSRMuxOeeUS5IdjdqEVFd3HfU+bY2n6+1Dvxvk=
Subject key identifier: E5:4B:6A:D3:26:5C:29:E2:FF:92:AC:D3:0B:EA:0B:F8:31:12:1C:6A
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018C6C9D6FCBA4FA40D05D840389001E8F6B
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/5Utq0yZcKeL_kqzTC-oL-DESHGo.roa
Signing time: Fri 15 Dec 2023 08:35:06 +0000
ROA not before: Fri 15 Dec 2023 08:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41256
IP address blocks: 213.92.216.0/21 maxlen: 21
213.92.128.0/18 maxlen: 18
213.92.128.0/17 maxlen: 17
213.92.240.0/21 maxlen: 21
213.92.248.0/22 maxlen: 22
213.92.252.0/23 maxlen: 23
213.92.192.0/22 maxlen: 22
213.92.190.0/23 maxlen: 23
213.92.192.0/18 maxlen: 18
213.92.196.0/22 maxlen: 22
213.92.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:9d:6f:cb:a4:fa:40:d0:5d:84:03:89:00:1e:8f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Dec 15 08:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e54b6ad3265c29e2ff92acd30bea0bf831121c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:ae:dd:e6:b4:8e:d8:f5:70:cc:f9:46:04:
4f:ec:b3:fd:aa:11:0d:6f:a1:18:bb:0e:64:86:18:
13:06:9e:06:ad:52:e1:27:34:11:34:47:c0:eb:4e:
b4:9e:6b:29:85:0a:44:03:7c:98:33:ea:c9:17:62:
e8:60:c5:e6:c0:34:8d:49:82:e9:94:48:41:40:32:
b6:02:3f:85:12:04:fe:7a:18:b1:b3:2d:85:3f:1d:
4a:da:e2:ec:79:84:98:28:e2:ad:36:b8:27:df:ee:
f4:f6:2f:1b:e0:db:3a:b6:d8:90:21:71:58:51:3a:
91:59:c1:b2:25:48:07:73:08:13:06:9c:1d:79:e2:
eb:d2:94:66:79:5f:ae:cb:24:a8:96:77:06:9d:95:
4c:9f:45:a9:9a:68:8c:a1:60:ab:13:6b:4e:eb:93:
1d:bf:8e:40:d3:f2:1e:39:3b:a8:ce:91:ab:9e:f9:
ff:84:1a:38:48:9e:db:0b:ca:6c:f4:88:fa:71:ab:
f7:aa:6a:fb:c9:2e:3d:a8:3e:0d:c8:ad:97:95:42:
6b:dc:df:77:46:67:a9:03:6c:bb:8d:05:cc:e3:18:
4d:6a:5f:ba:13:61:1e:7b:12:51:31:b4:9c:9b:8a:
cf:39:5c:0e:6c:af:e0:46:54:5b:7d:06:f5:d4:71:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:6A:D3:26:5C:29:E2:FF:92:AC:D3:0B:EA:0B:F8:31:12:1C:6A
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/5Utq0yZcKeL_kqzTC-oL-DESHGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
58:d3:87:59:64:c5:a4:a8:aa:30:fc:4d:90:91:66:e0:b3:7c:
60:48:fa:4d:6c:6d:30:2b:b9:16:a8:99:3e:f9:c3:86:ad:6c:
d5:70:12:f9:66:16:c9:73:6f:20:53:92:84:e0:44:c9:cc:99:
8f:50:c4:2b:97:9e:57:7a:57:af:78:71:36:b6:3c:58:c3:0b:
28:8d:d3:2a:2b:f0:b2:a4:76:c0:86:3c:01:fe:ec:d1:42:a8:
aa:db:3a:93:53:81:55:07:a2:16:61:5e:35:b9:2b:a9:f3:e3:
cb:bb:53:c5:75:6a:39:f9:07:14:f9:28:1d:f6:7a:bd:5d:5c:
d4:67:d0:6c:70:3d:ce:0f:da:c0:41:a1:97:ea:0a:95:d7:81:
1a:a2:23:c1:0a:58:20:54:fc:04:94:54:31:89:1a:74:f5:5d:
75:c7:94:f5:71:dd:f0:5f:2a:06:ed:10:72:d6:36:75:73:cc:
1d:25:61:81:37:85:27:77:d7:73:d1:8b:dc:ab:98:7f:90:fd:
27:d0:65:7d:ec:ae:27:99:e8:6d:20:4e:fb:12:c7:44:57:a3:
cd:76:14:41:08:49:45:cc:35:b7:6b:41:38:18:8e:2e:24:cc:
28:3a:d4:fe:0d:4c:d4:4f:a0:77:dd:a8:a9:c7:a0:02:ed:ae:
90:f1:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:32 2024 by rpki-client on console.sobornost.net