Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/BSuB6XUNX0t4TiJF7StfvQRuzzw.roa
File: BSuB6XUNX0t4TiJF7StfvQRuzzw.roa (raw, json)
Hash identifier: y9qrR4FmEb1cXqHTHnSkGTVMqVjcuPge00zwMn99UWY=
Subject key identifier: 05:2B:81:E9:75:0D:5F:4B:78:4E:22:45:ED:2B:5F:BD:04:6E:CF:3C
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0189AD2987880EA924EF8263786EB462B646
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/BSuB6XUNX0t4TiJF7StfvQRuzzw.roa
Signing time: Mon 31 Jul 2023 18:15:27 +0000
ROA not before: Mon 31 Jul 2023 18:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210927
IP address blocks: 185.178.228.0/24 maxlen: 24
185.178.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:29:87:88:0e:a9:24:ef:82:63:78:6e:b4:62:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jul 31 18:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052b81e9750d5f4b784e2245ed2b5fbd046ecf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:81:bb:9c:99:72:fc:e6:ef:53:5f:df:41:
00:13:9a:1d:c6:47:8b:46:f4:12:4a:8d:a7:6d:6c:
05:f5:58:61:83:f8:39:29:62:16:74:fe:41:20:33:
a5:90:ce:87:d6:1e:50:d0:63:59:a0:8a:9b:f1:fa:
ee:69:7c:44:63:a4:fb:56:e0:4b:88:9f:9a:5c:e2:
1e:0c:2b:2f:28:34:38:5c:9d:fd:c6:10:6f:97:b8:
73:48:a0:fc:f9:59:dd:7a:e7:b9:f3:2f:5a:0a:75:
dc:c5:30:c0:b0:ed:7f:db:1e:1c:20:49:27:55:92:
91:e5:cd:45:40:a4:de:ce:a1:ab:74:ee:fd:8f:29:
94:e7:ef:c6:28:23:95:5c:b5:ef:05:c4:af:bb:bb:
21:d6:f7:66:6e:72:80:f4:44:b7:33:4f:fe:e1:b7:
88:6d:08:61:1f:e4:74:37:60:06:c8:8f:f7:c3:93:
d4:df:b6:8c:40:c2:65:23:9f:17:28:5c:fd:a5:4e:
25:b5:dd:c7:6b:6e:db:46:62:77:f8:43:de:34:b9:
29:e1:94:0b:33:7b:ba:6e:4b:c5:13:6e:c6:97:bb:
72:84:4c:96:f3:7a:d3:ac:3b:90:59:f9:c9:3f:ae:
dc:dd:f3:b2:6e:6d:7a:6d:14:07:b0:0e:a3:70:c4:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:81:E9:75:0D:5F:4B:78:4E:22:45:ED:2B:5F:BD:04:6E:CF:3C
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/BSuB6XUNX0t4TiJF7StfvQRuzzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.228.0/23
Signature Algorithm: sha256WithRSAEncryption
45:a6:2f:ac:18:74:1b:ce:55:07:73:5d:81:7f:d1:b7:7a:7a:
19:a5:0a:70:8a:7f:a9:4c:8f:76:9f:ad:1c:1b:fc:3b:5d:26:
01:b6:ca:b8:03:62:4f:b2:38:ef:fd:60:e3:17:aa:03:c9:f2:
e7:26:58:ab:12:24:3d:fe:fa:bd:c9:b9:bc:b0:a0:6e:4c:20:
75:90:41:53:ad:9d:4f:9a:b9:92:47:ea:92:8b:9d:49:46:f1:
c3:8a:e9:d0:14:4e:72:01:79:02:0c:80:71:fa:e5:6c:bf:6b:
b1:2f:38:e2:bd:fa:0f:1c:4b:d8:6f:81:27:15:46:f0:41:74:
3f:b2:aa:aa:45:97:79:b8:a8:be:24:fe:8c:34:66:4c:c1:86:
9a:3d:e3:4b:6e:74:ea:5f:19:74:1f:a4:ad:dc:e0:e0:cb:5d:
d2:25:60:f3:d3:17:71:39:9b:c4:11:00:b9:6e:13:3d:77:c9:
df:6d:08:58:26:cd:96:59:d6:7e:8c:44:56:23:ea:d2:b2:23:
c5:b8:4e:9d:21:48:7f:88:15:1f:e5:d4:22:a3:d6:81:ed:f7:
d6:14:ec:73:be:a1:90:d9:25:d5:79:5e:66:40:ec:d5:ba:ff:
56:ef:ac:6f:32:6f:b7:b4:00:dc:7b:34:54:52:11:96:38:a8:
70:54:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net