Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/ephdjNe2kSt4iiJYdD6RhooeeX0.roa
File: ephdjNe2kSt4iiJYdD6RhooeeX0.roa (raw, json)
Hash identifier: SVK0oYWkNvBFt10tW3JoRC63r3GykUtYhRjboxBXOA8=
Subject key identifier: 7A:98:5D:8C:D7:B6:91:2B:78:8A:22:58:74:3E:91:86:8A:1E:79:7D
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0185700282F651CD8AAF38D6E4164683A502
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/ephdjNe2kSt4iiJYdD6RhooeeX0.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42874
IP address blocks: 185.81.73.0/24 maxlen: 24
185.81.74.0/24 maxlen: 24
185.81.75.0/24 maxlen: 24
185.81.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:82:f6:51:cd:8a:af:38:d6:e4:16:46:83:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a985d8cd7b6912b788a2258743e91868a1e797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:70:44:b0:66:cc:b4:3d:2b:07:b3:44:08:
b7:3c:df:6f:bd:63:83:44:18:2a:b0:47:83:03:74:
8f:97:ba:13:68:aa:6e:75:99:03:82:42:cf:7c:08:
5c:94:60:dd:ad:23:8d:69:b3:ab:24:4d:00:62:2b:
93:92:8f:c8:08:54:b1:84:16:11:51:09:dd:9f:b5:
ae:e9:3c:af:03:c2:06:96:8b:dc:7e:7b:31:c8:29:
fd:0b:c3:21:c7:9e:2f:c5:0e:0c:52:0d:82:10:5c:
c4:39:a3:4b:4c:7b:01:5c:c8:01:10:1f:c9:14:0f:
ca:a6:70:2a:4c:cd:35:bd:24:6f:e9:9c:43:39:44:
21:90:0f:da:f0:06:0d:b1:29:4e:c2:32:dc:39:9c:
34:d7:35:a4:d0:cf:e2:e3:b6:e4:a4:5c:a7:f6:0e:
01:84:56:9b:b2:76:c3:0d:a7:e8:28:a3:4e:af:9f:
7c:47:16:3e:3f:7e:e7:44:78:b5:16:2d:c0:5d:92:
d0:37:14:8d:2f:d2:be:8b:e6:d9:0a:21:93:3b:d9:
35:e9:85:45:cd:30:b8:b9:73:10:4b:43:29:76:38:
bb:3f:d1:d8:2e:37:e4:dd:cc:6e:0a:f5:e3:5e:d6:
8d:04:d6:a4:cf:72:d4:f1:5c:d9:b2:41:d7:3e:e3:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:5D:8C:D7:B6:91:2B:78:8A:22:58:74:3E:91:86:8A:1E:79:7D
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/ephdjNe2kSt4iiJYdD6RhooeeX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.72.0/22
Signature Algorithm: sha256WithRSAEncryption
29:33:5b:46:87:cb:c3:ae:6a:4f:01:e8:eb:d3:18:53:6d:f4:
90:58:ef:5b:3a:b8:37:00:aa:f9:0b:60:ae:17:75:38:45:e3:
1f:98:b2:f4:e6:58:14:7a:60:eb:96:87:ec:9e:fc:d3:70:9c:
ab:6f:48:2a:17:92:9b:fd:02:51:48:fe:cf:93:9e:53:52:d1:
15:c1:77:15:2e:6d:77:e6:f0:2e:8b:e3:0d:5f:e2:28:16:a1:
5e:4c:0a:d5:0e:53:15:41:4c:94:fd:eb:4b:3d:38:39:4b:5c:
91:5c:42:6b:94:a9:39:3e:65:17:f7:01:a2:a0:19:14:4c:b9:
d8:4d:b6:15:a2:9e:cd:01:58:68:96:9d:35:1e:50:ef:8f:ce:
98:bc:ac:11:59:7e:16:a3:9a:14:ed:7d:4c:b3:50:5e:da:ea:
c7:75:0c:c1:83:be:48:5c:07:7e:73:1b:13:eb:bb:42:5a:3e:
4d:55:c1:9a:0b:13:5c:97:2b:7a:a9:af:76:71:7b:f6:a0:1a:
5b:0b:b8:a8:fe:75:2b:a0:17:fa:6b:b4:f9:21:cb:b7:ed:8f:
35:01:b9:33:a9:50:ab:bc:3e:af:57:ef:43:29:6e:9b:b7:2b:
19:a7:99:47:e9:46:2e:42:e8:ce:59:a5:9a:2b:cb:05:a4:60:
ee:a2:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:13 2024 by rpki-client on console.sobornost.net