Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/o2Tc1muRIPhe0JdcX1Bs9gY1pLU.roa
File: o2Tc1muRIPhe0JdcX1Bs9gY1pLU.roa (raw, json)
Hash identifier: 7NqCPNacUwKEMNAbR6mvBENpSjh08LZXTeRR2d9ukN0=
Subject key identifier: A3:64:DC:D6:6B:91:20:F8:5E:D0:97:5C:5F:50:6C:F6:06:35:A4:B5
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 018BCFE33A897B7D518F823D567B216F4B8A
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/o2Tc1muRIPhe0JdcX1Bs9gY1pLU.roa
Signing time: Tue 14 Nov 2023 22:10:57 +0000
ROA not before: Tue 14 Nov 2023 22:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31334
IP address blocks: 83.169.128.0/18 maxlen: 24
185.19.196.0/22 maxlen: 22
31.16.0.0/14 maxlen: 24
91.64.0.0/14 maxlen: 24
188.192.0.0/14 maxlen: 24
88.134.0.0/16 maxlen: 24
24.134.0.0/16 maxlen: 16
146.52.0.0/16 maxlen: 24
37.4.0.0/15 maxlen: 23
109.84.0.0/15 maxlen: 15
109.47.0.0/16 maxlen: 16
77.20.0.0/14 maxlen: 24
77.24.0.0/16 maxlen: 16
178.24.0.0/14 maxlen: 24
95.88.0.0/14 maxlen: 24
77.25.0.0/17 maxlen: 23
2a02:8100::/27 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:e3:3a:89:7b:7d:51:8f:82:3d:56:7b:21:6f:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Nov 14 22:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a364dcd66b9120f85ed0975c5f506cf60635a4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:5f:bc:0c:01:b0:bc:b5:f6:77:6c:a1:5a:
39:ee:93:54:42:58:ee:f0:e3:21:b6:68:f2:d4:29:
9e:8a:2d:b2:a2:d4:41:5e:20:32:b5:54:ca:2f:74:
1e:1d:97:ed:3a:05:d3:a4:96:df:33:16:63:1c:2c:
f0:44:ac:1c:d8:eb:9c:fc:2e:53:9e:fc:8d:42:38:
73:23:3a:8a:51:87:99:85:1e:ae:7a:9a:f8:93:c6:
07:f2:38:2e:a2:a3:34:4f:bd:68:65:78:6f:d0:44:
be:12:a2:05:89:c4:88:95:96:f5:61:b3:4f:32:4c:
4e:3c:46:01:4f:6d:06:a5:6f:bb:12:d2:16:dc:8a:
19:5e:45:4d:3e:43:de:a9:7f:a2:38:16:9d:e6:d1:
2e:ff:91:ed:d9:e7:e4:3c:23:74:ff:de:20:52:8b:
fe:ce:75:9b:e9:da:40:81:92:04:f2:26:0f:2f:fb:
6d:0b:9b:9c:fc:39:c4:da:aa:57:07:f1:41:3d:09:
0a:d8:7f:55:7a:4d:1d:50:11:8d:7d:86:89:c8:58:
b1:4b:dd:46:88:75:63:fe:9c:1b:07:ac:12:d1:f5:
6e:0a:7d:ae:a4:24:86:99:1f:f9:6b:36:64:ac:a5:
0b:05:46:6a:64:fb:89:f4:b6:7b:82:65:3e:cb:31:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:DC:D6:6B:91:20:F8:5E:D0:97:5C:5F:50:6C:F6:06:35:A4:B5
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/o2Tc1muRIPhe0JdcX1Bs9gY1pLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.134.0.0/16
31.16.0.0/14
37.4.0.0/15
77.20.0.0-77.25.127.255
83.169.128.0/18
88.134.0.0/16
91.64.0.0/14
95.88.0.0/14
109.47.0.0/16
109.84.0.0/15
146.52.0.0/16
178.24.0.0/14
185.19.196.0/22
188.192.0.0/14
IPv6:
2a02:8100::/27
Signature Algorithm: sha256WithRSAEncryption
07:bc:19:0d:b3:0a:a3:e7:7d:55:a9:bc:b3:5b:5e:db:db:03:
fb:da:5a:b2:99:3d:64:2e:bb:45:1e:0b:21:ed:c8:d6:d3:a0:
1a:f3:c0:6b:94:be:51:ab:3a:47:bb:a4:6f:76:5a:d1:00:84:
cc:f0:84:13:98:f5:84:c4:ab:55:62:67:5e:07:c8:c9:45:c1:
b5:6b:60:57:a0:51:c4:be:18:33:a7:93:0c:d5:d7:9c:55:a9:
39:15:34:29:7a:62:0a:3e:3c:c3:2c:da:26:49:68:68:42:18:
8b:4e:76:1e:35:f3:14:e1:31:52:6a:c0:5c:c4:cd:c8:28:c9:
29:a5:af:8c:86:c3:13:c6:ab:0b:6a:89:de:5e:a7:e1:8b:59:
71:40:07:f0:36:9f:19:95:69:da:02:a1:16:bd:f5:c6:ec:fe:
5e:40:82:56:49:bb:d5:1e:66:fe:1b:be:e9:f8:0a:ac:e9:0a:
1a:26:f3:da:ba:4e:06:48:fd:ba:03:a3:42:33:cb:bc:04:37:
07:3b:9f:6a:8e:7d:ce:58:3a:b1:1c:66:02:9c:52:85:29:81:
22:51:4e:10:03:d7:f3:33:c6:4c:5f:dd:36:74:24:14:0b:36:
24:6a:59:42:56:b7:0f:e5:96:cc:e2:bc:4b:f8:c2:85:2b:6a:
f0:3f:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:20 2024 by rpki-client on console.sobornost.net