Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/uml7zx_LE4IYp__xOdIUP6s4bMU.roa
File: uml7zx_LE4IYp__xOdIUP6s4bMU.roa (raw, json)
Hash identifier: CnY5nqYmzJGRkhOJLcxtUAHvEtZzh6ds6Jmlw8o7mOU=
Subject key identifier: BA:69:7B:CF:1F:CB:13:82:18:A7:FF:F1:39:D2:14:3F:AB:38:6C:C5
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 01856DDD2691C4EC33B3DAB069339D4AA52A
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/uml7zx_LE4IYp__xOdIUP6s4bMU.roa
Signing time: Sun 01 Jan 2023 15:04:47 +0000
ROA not before: Sun 01 Jan 2023 15:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51492
IP address blocks: 185.177.140.0/22 maxlen: 22
185.36.253.0/24 maxlen: 24
188.116.47.0/24 maxlen: 24
89.46.121.0/24 maxlen: 24
89.46.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:26:91:c4:ec:33:b3:da:b0:69:33:9d:4a:a5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Jan 1 15:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba697bcf1fcb138218a7fff139d2143fab386cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:1e:1d:cc:6d:3f:95:67:a8:44:78:6f:03:
ca:0a:86:e2:7d:54:d5:d8:a6:e0:8d:15:3b:59:bc:
ae:b4:e4:c4:f2:f3:8a:d4:a5:2d:c3:54:47:8a:74:
d0:45:a7:f3:47:d8:81:e0:d5:95:f9:16:64:d6:35:
02:2a:13:ae:db:c5:3c:3a:6a:c1:aa:60:6c:19:47:
2f:63:05:c9:03:12:3d:8a:ad:78:2a:a8:9b:a0:8f:
3b:ce:4d:b0:53:62:4e:c3:d1:be:00:83:58:f1:e0:
17:68:10:78:56:4d:a9:29:94:72:03:c4:a0:c6:9c:
4d:bf:29:b5:a9:6b:54:64:7c:bb:67:7f:ac:03:81:
28:36:8c:26:ed:95:6c:5f:92:09:45:7b:bd:f2:8f:
9e:96:80:35:9e:d8:39:e1:96:5f:00:ac:b3:ea:c5:
4a:2b:bc:51:34:f3:a3:6a:8c:a3:b7:5c:d4:a0:fb:
95:50:d6:ae:1e:be:ca:08:35:fd:e8:69:f3:e8:c3:
16:6a:51:57:3d:9c:7c:1b:ea:6d:99:38:ca:f6:8a:
ac:a1:05:7b:05:79:d0:cf:ca:fe:c7:01:e1:a5:5e:
c2:c7:2f:88:b6:98:80:ad:17:f8:ff:7a:a8:13:9a:
fb:f8:4e:34:79:3f:28:c5:5d:a9:da:f3:5b:92:d0:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:7B:CF:1F:CB:13:82:18:A7:FF:F1:39:D2:14:3F:AB:38:6C:C5
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/uml7zx_LE4IYp__xOdIUP6s4bMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.121.0/24
89.46.125.0/24
185.36.253.0/24
185.177.140.0/22
188.116.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:91:91:d0:a5:ed:64:b3:2b:b4:2e:bf:37:17:ec:aa:9a:3e:
96:0d:60:c7:31:cf:36:3f:a5:21:3e:c7:c9:ee:98:c5:12:1e:
85:fd:b8:e5:9c:7f:45:e9:10:5b:73:67:46:27:54:10:68:78:
98:65:89:af:71:c2:bc:04:b4:05:e6:3b:a3:16:fa:03:d1:e1:
d8:bd:fa:09:43:dd:3c:4c:ee:36:fb:83:1f:99:64:aa:0d:99:
78:42:19:b0:28:fe:e1:d4:e4:e0:ab:52:d1:19:e4:56:e0:4b:
1d:13:a8:8c:38:f4:0c:d0:95:7f:4d:31:a6:73:06:e4:60:55:
5c:24:59:ef:ea:7a:c7:a5:9b:bb:c1:8d:71:c4:94:89:35:92:
1a:ad:2e:7d:8a:f2:f5:99:06:a8:77:6d:f9:df:f0:b3:a3:6e:
fc:3d:15:91:d6:59:74:21:74:cf:62:fc:18:c0:b2:1a:51:75:
bf:e3:08:d7:46:cc:8b:6f:50:62:38:18:fd:05:2a:dd:10:b0:
a3:b7:75:eb:12:cd:4d:69:03:d7:80:6a:40:e7:3c:c7:78:4f:
e0:cc:64:22:a8:e1:8c:fa:93:ac:78:7b:12:51:ad:91:a0:c4:
f6:3b:3f:e6:30:3a:9d:31:7b:c0:8c:d6:24:aa:4d:a7:3f:52:
ed:e2:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net