Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/xO548Ki85uHcAlF80lG5dO0Mx9w.roa
File: xO548Ki85uHcAlF80lG5dO0Mx9w.roa (raw, json)
Hash identifier: S0Ewf5Vpu7dDBTe2Ot4YYoLehSakoupTGKsqo8jTgVI=
Subject key identifier: C4:EE:78:F0:A8:BC:E6:E1:DC:02:51:7C:D2:51:B9:74:ED:0C:C7:DC
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 018B61B5F37C27C439334CF278A3507DDF2E
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/xO548Ki85uHcAlF80lG5dO0Mx9w.roa
Signing time: Tue 24 Oct 2023 12:43:16 +0000
ROA not before: Tue 24 Oct 2023 12:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206805
IP address blocks: 185.159.111.0/24 maxlen: 24
45.84.152.0/23 maxlen: 23
45.84.155.0/24 maxlen: 24
45.84.154.0/24 maxlen: 24
193.19.100.0/23 maxlen: 24
45.145.191.0/24 maxlen: 24
45.145.190.0/23 maxlen: 23
45.145.190.0/24 maxlen: 24
45.145.188.0/23 maxlen: 23
185.247.192.0/22 maxlen: 24
185.228.48.0/22 maxlen: 24
178.159.32.0/23 maxlen: 24
188.64.150.0/23 maxlen: 24
188.64.149.0/24 maxlen: 24
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00:200::/40 maxlen: 40
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00:300::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:b5:f3:7c:27:c4:39:33:4c:f2:78:a3:50:7d:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Oct 24 12:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4ee78f0a8bce6e1dc02517cd251b974ed0cc7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:7f:ce:c0:69:99:06:0e:84:33:27:fe:57:
2b:59:2a:74:c6:a3:91:42:0e:75:56:fb:31:82:71:
0a:97:9e:08:88:c3:e3:ee:99:6b:e6:41:bb:48:97:
3a:ec:50:b2:52:09:04:66:87:bb:a2:38:14:c7:50:
f2:42:da:ca:cf:06:31:b3:23:00:70:2c:63:9f:9e:
c4:36:cc:0a:ce:1b:51:67:e0:35:34:eb:18:b3:65:
9e:a3:5d:ed:7d:8c:8f:94:53:5d:30:ab:3d:65:96:
fd:46:95:47:ba:5a:4e:07:25:d1:20:c1:96:97:9b:
32:39:24:4f:e3:e2:7e:48:c0:55:50:23:03:58:ee:
96:f5:65:b1:14:3b:31:86:c3:65:a4:63:69:dc:97:
08:37:71:9b:2b:20:b7:96:65:a3:33:5b:3e:e7:97:
dc:a0:9b:a0:f3:66:97:83:8b:9c:d2:27:60:66:cc:
6d:a9:aa:d1:a4:db:e0:ef:f7:7b:51:9f:cc:d0:c4:
d5:62:0e:3b:66:f7:b4:3e:9c:5b:d9:4b:2b:28:c3:
9e:da:fa:29:7e:be:03:6c:35:9b:2c:78:dc:4d:06:
4a:20:c3:99:56:d0:77:4e:4b:b9:b8:01:0b:9b:28:
34:0c:d5:d5:23:c9:79:c6:75:f9:70:8e:a8:1c:e9:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:78:F0:A8:BC:E6:E1:DC:02:51:7C:D2:51:B9:74:ED:0C:C7:DC
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/xO548Ki85uHcAlF80lG5dO0Mx9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0-188.64.151.255
193.19.100.0/23
IPv6:
2a0c:ee00::/38
Signature Algorithm: sha256WithRSAEncryption
4c:c1:60:e7:9b:3b:2f:d6:27:70:9f:5c:21:e9:5a:74:ff:e1:
4e:fd:45:16:82:9f:42:b7:c5:01:bb:0f:4d:da:37:db:99:d0:
5c:9a:c6:42:c5:37:10:eb:c5:2d:44:c6:ae:3e:27:6b:ab:6c:
be:be:e3:e3:75:07:13:1d:fd:99:73:d0:e7:dc:c7:9c:5e:56:
a1:e5:c1:0f:85:58:57:46:1f:f9:5d:5d:aa:ae:c9:31:9f:9a:
9c:bb:f8:0b:e6:a5:48:37:3b:5c:7b:48:d6:bc:6e:3c:39:dd:
79:85:a8:02:a5:bc:0d:b5:66:76:d2:54:b6:e0:37:59:04:5b:
fc:62:9e:8d:d9:9b:81:ce:35:5e:5a:91:23:f9:37:4d:01:9d:
e0:c8:21:c4:f5:03:f0:12:dc:ff:01:34:3a:13:65:5e:25:10:
40:48:93:4a:ef:d9:c1:1e:f0:df:8f:2c:d3:23:29:f8:c3:24:
bd:3c:e2:16:d9:99:74:14:83:d0:de:fd:b4:7f:f7:42:71:2f:
8a:49:38:e9:cf:cd:a4:c3:cd:00:cf:88:8a:6d:84:6a:ee:9c:
ad:db:db:33:ed:42:64:13:c3:3d:9c:4c:ff:7d:bb:14:61:ab:
74:73:6c:6d:80:fe:34:66:29:3c:3a:87:e3:f7:13:63:ef:89:
1b:08:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net