Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1qlv65u_idDFbGyaOxTxN0ZNSgE.roa
File: 1qlv65u_idDFbGyaOxTxN0ZNSgE.roa (raw, json)
Hash identifier: TSJx5IjSQutdkOUimglOQhvO1GFvd+HApipjB9KGjSc=
Subject key identifier: D6:A9:6F:EB:9B:BF:89:D0:C5:6C:6C:9A:3B:14:F1:37:46:4D:4A:01
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 0188A0877522220A0329D042EFE98DF3DBF6
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1qlv65u_idDFbGyaOxTxN0ZNSgE.roa
Signing time: Fri 09 Jun 2023 14:20:11 +0000
ROA not before: Fri 09 Jun 2023 14:20:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206163
IP address blocks: 185.194.172.0/24 maxlen: 24
185.194.173.0/24 maxlen: 24
185.194.174.0/24 maxlen: 24
185.194.175.0/24 maxlen: 24
194.156.236.0/24 maxlen: 24
194.156.237.0/24 maxlen: 24
194.156.238.0/24 maxlen: 24
194.156.239.0/24 maxlen: 24
2a0a:86c0:1015::/48 maxlen: 48
2a0a:86c0:10::/48 maxlen: 48
2a0a:86c0:1010::/48 maxlen: 48
2a0a:86c0:1006::/48 maxlen: 48
2a0a:86c0:6::/48 maxlen: 48
2a0a:86c0:9::/48 maxlen: 48
2a0a:86c0:1009::/48 maxlen: 48
2a0a:86c0:1004::/48 maxlen: 48
2a0a:86c0:4::/48 maxlen: 48
2a0a:86c0:8::/48 maxlen: 48
2a0a:86c0:1008::/48 maxlen: 48
2a0a:86c0:1003::/48 maxlen: 48
2a0a:86c0:3::/48 maxlen: 48
2a0a:86c0:1::/48 maxlen: 48
2a0a:86c0:1001::/48 maxlen: 48
2a0a:86c0:1012::/48 maxlen: 48
2a0a:86c0:1005::/48 maxlen: 48
2a0a:86c0:5::/48 maxlen: 48
2a0a:86c0::/48 maxlen: 48
2a0a:86c0:1000::/48 maxlen: 48
2a0a:86c0:1014::/48 maxlen: 48
2a0a:86c0:1013::/48 maxlen: 48
2a0a:86c0:1011::/48 maxlen: 48
2a0a:86c0:1007::/48 maxlen: 48
2a0a:86c0:7::/48 maxlen: 48
2a0a:86c0:1002::/48 maxlen: 48
2a0a:86c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:87:75:22:22:0a:03:29:d0:42:ef:e9:8d:f3:db:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Jun 9 14:20:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6a96feb9bbf89d0c56c6c9a3b14f137464d4a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:bd:4e:9b:a4:32:12:51:e3:34:cf:69:88:
47:ad:9b:7e:20:43:56:75:63:e7:18:92:63:3e:97:
dd:ea:5b:a9:6c:67:b5:b3:50:e8:64:84:bd:b2:66:
46:38:06:c0:ea:e9:59:ea:01:a3:d9:f1:35:c1:a4:
52:7b:b6:97:33:e6:64:3a:e2:92:db:a6:9a:78:f0:
b9:be:38:2e:c7:01:38:93:6f:30:be:56:f2:9d:d4:
cf:9a:f9:32:05:eb:5c:d1:ea:93:38:4b:2a:76:e7:
99:ff:92:d8:b8:c9:65:00:b2:28:13:ba:79:a2:d6:
a5:42:c5:40:cf:57:34:d5:67:66:a0:93:94:a7:ad:
60:00:b6:7a:43:e5:e4:ee:a1:ab:5b:dd:b6:da:bf:
36:73:06:bd:85:94:42:95:be:a8:7a:1c:c1:e8:46:
84:b9:24:fd:62:62:03:4d:d4:60:f3:2f:c8:2a:fe:
bc:33:36:69:bc:7c:bf:27:31:c0:c1:6e:57:94:7d:
52:bd:08:29:1c:78:41:9d:cc:35:7b:65:2a:cd:f6:
90:eb:48:66:40:ca:d0:37:96:37:15:3d:5d:21:7f:
58:76:3c:97:c0:34:7e:1e:90:48:de:ab:12:b7:4f:
50:aa:4d:32:7a:72:ac:23:52:09:e4:5c:7b:5f:f3:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:6F:EB:9B:BF:89:D0:C5:6C:6C:9A:3B:14:F1:37:46:4D:4A:01
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1qlv65u_idDFbGyaOxTxN0ZNSgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.172.0/22
194.156.236.0/22
IPv6:
2a0a:86c0::-2a0a:86c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:86c0:10::/48
2a0a:86c0:1000::-2a0a:86c0:1009:ffff:ffff:ffff:ffff:ffff
2a0a:86c0:1010::-2a0a:86c0:1015:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:19:06:93:21:2f:40:5c:86:4a:0e:1d:62:1c:51:6e:c7:3c:
c6:24:d8:19:70:98:c8:22:e1:28:76:63:3e:fe:ab:8d:d4:d3:
60:a7:8d:c7:2a:8d:6a:35:98:c2:c2:55:36:0c:14:31:dc:5d:
38:b5:b6:cb:49:af:71:ba:92:ad:a8:5c:31:af:77:13:a3:30:
f9:1c:b4:28:bd:6e:24:fe:31:7e:2c:3a:b2:7b:f7:96:94:1b:
27:83:5d:a8:06:c2:d2:1e:a0:fd:f3:79:36:f5:80:be:83:7a:
9c:57:b2:0d:9b:0b:47:81:cb:a9:6f:42:28:97:0d:96:51:3a:
45:7d:87:43:f2:fc:a5:3c:f0:08:34:7a:e9:0c:3a:4f:4a:5f:
b3:35:45:46:98:d9:10:fe:b6:c2:7a:bb:85:c6:c4:69:b6:d0:
ad:4f:4c:a6:b5:71:bf:30:ad:87:7a:91:a1:38:df:28:ba:f0:
62:46:95:a3:db:9b:3e:ea:64:a4:66:43:8c:5a:55:b2:dd:00:
aa:18:40:74:ee:cc:5a:35:04:a9:d9:02:7e:78:38:d3:32:6c:
da:e8:47:c8:fe:40:0c:2e:65:6f:fa:3c:ea:aa:bf:1e:9d:98:
7c:8d:e9:fb:fe:46:11:db:94:74:1c:23:03:af:91:ce:69:ad:
18:d2:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:13 2024 by rpki-client on console.sobornost.net