Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/84ueIu1hdVo0WueZhXvOrp_XlJI.roa
File: 84ueIu1hdVo0WueZhXvOrp_XlJI.roa (raw, json)
Hash identifier: grKYqmBoj9zQjYYtgXVUF15T0lkDXdWo3poE32fitbA=
Subject key identifier: F3:8B:9E:22:ED:61:75:5A:34:5A:E7:99:85:7B:CE:AE:9F:D7:94:92
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018A8FBD1EB0B6CFA589446E4BE15B8BE0E2
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/84ueIu1hdVo0WueZhXvOrp_XlJI.roa
Signing time: Wed 13 Sep 2023 18:10:50 +0000
ROA not before: Wed 13 Sep 2023 18:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 185.21.253.0/24 maxlen: 24
185.21.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:bd:1e:b0:b6:cf:a5:89:44:6e:4b:e1:5b:8b:e0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 13 18:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38b9e22ed61755a345ae799857bceae9fd79492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:40:8a:ea:35:53:fd:56:25:b0:a5:fb:42:
3f:b6:55:79:f4:cf:82:e4:90:ec:f9:9b:75:23:f5:
37:e9:1a:f4:2f:45:f3:74:ae:03:da:64:b0:4e:6c:
8c:8d:e3:83:62:63:c1:0d:f9:a2:ff:8d:53:29:d3:
c3:7a:9f:01:13:16:80:7a:5c:64:82:f6:ed:4d:75:
db:00:31:51:a8:02:70:16:13:95:9d:10:91:ef:3d:
89:92:4f:60:e3:f2:b3:21:8b:f8:f4:42:2d:ed:ce:
f6:58:38:77:a8:3b:35:ba:03:89:5b:ca:92:3a:33:
83:cc:ed:df:45:99:ca:25:6b:73:c6:35:fe:25:11:
46:fd:34:b6:1e:da:fd:82:64:74:67:52:3d:35:ad:
6f:d0:87:8e:a3:54:b0:3d:47:6e:8c:2a:2a:d3:8d:
aa:2f:a2:17:b5:ee:d2:34:a1:a5:26:b3:e1:c0:1d:
41:f1:39:37:35:99:9b:29:91:08:a7:a7:f0:bb:93:
bc:1d:a9:ad:02:09:50:8e:54:20:0a:85:8f:ab:68:
b9:e0:9e:9f:52:af:2b:19:d9:55:38:74:c8:28:30:
9e:aa:5b:db:5a:27:56:a1:d1:ad:3c:86:76:a3:e5:
ab:47:a7:66:64:f4:44:00:76:3b:d9:be:93:f8:c0:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:9E:22:ED:61:75:5A:34:5A:E7:99:85:7B:CE:AE:9F:D7:94:92
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/84ueIu1hdVo0WueZhXvOrp_XlJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.253.0/24
185.21.255.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:7a:16:a3:fe:eb:48:69:d0:04:de:80:89:43:7c:85:ea:13:
3d:4a:aa:4b:4b:8e:aa:74:b9:88:9b:6a:be:16:99:18:a0:52:
a4:c3:d3:5d:c8:ea:53:48:cb:ac:68:0c:f8:6c:3a:7b:32:cb:
1e:7e:10:14:97:6b:61:b8:8b:dc:5f:fa:2d:22:12:16:e7:c2:
d1:0b:66:9e:a2:cb:17:32:68:3b:d2:52:00:83:94:91:75:88:
42:25:da:a6:4c:95:0c:4a:5a:83:61:72:11:47:d6:7b:53:1f:
57:9e:8e:2d:f9:58:91:9e:59:30:29:8c:d1:be:0b:49:71:d5:
cf:0b:03:19:f4:07:52:25:aa:54:99:3b:a9:65:8a:aa:68:59:
58:d9:3d:1a:0a:16:ff:ab:4f:83:e9:a3:7d:92:3b:6a:9e:0e:
78:c2:33:ce:3c:8f:a0:d4:22:c7:79:2e:83:5a:98:2c:fd:68:
09:22:bc:04:e4:03:dc:e4:41:b4:bb:bd:b5:ba:7f:e9:d3:58:
fd:5b:b2:05:21:ff:c9:9d:2a:65:28:fe:fc:2c:a8:09:0b:5a:
c7:26:5b:e3:2a:dd:a8:40:22:c6:da:9b:71:eb:17:b6:c6:eb:
ff:ca:c3:d5:77:4f:c7:dd:08:8a:7f:45:96:8a:b0:a3:4a:01:
3b:87:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:21 2024 by rpki-client on console.sobornost.net