Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/wNipN1xkZVmBEgKhX6g3paeReSA.roa
File: wNipN1xkZVmBEgKhX6g3paeReSA.roa (raw, json)
Hash identifier: Vki/VpCv24ltWRITDEyXQX1fKUTGV4f8Ox5xCZBfmZc=
Subject key identifier: C0:D8:A9:37:5C:64:65:59:81:12:02:A1:5F:A8:37:A5:A7:91:79:20
Certificate issuer: /CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Certificate serial: 01856FCBC355FDEECD38EEDF2AC940075BA0
Authority key identifier: 63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/wNipN1xkZVmBEgKhX6g3paeReSA.roa
Signing time: Mon 02 Jan 2023 00:05:02 +0000
ROA not before: Mon 02 Jan 2023 00:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50599
IP address blocks: 193.105.125.0/24 maxlen: 24
128.0.54.0/24 maxlen: 24
185.170.104.0/22 maxlen: 22
188.210.220.0/22 maxlen: 22
185.72.196.0/22 maxlen: 22
91.204.162.0/24 maxlen: 24
91.204.160.0/23 maxlen: 23
89.40.144.0/22 maxlen: 22
195.177.217.0/24 maxlen: 24
195.177.216.0/24 maxlen: 24
91.236.52.0/24 maxlen: 24
91.236.54.0/23 maxlen: 23
185.11.128.0/22 maxlen: 22
2a0b:5480::/29 maxlen: 29
2a02:e7c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:c3:55:fd:ee:cd:38:ee:df:2a:c9:40:07:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Validity
Not Before: Jan 2 00:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d8a9375c646559811202a15fa837a5a7917920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:3b:be:e4:8e:cc:f0:a8:11:5b:4b:14:c1:
74:fd:7c:7b:14:b4:f5:72:f5:88:9b:bd:0b:aa:5f:
f4:8f:c3:87:e3:52:06:9f:f7:2f:6c:15:62:c4:3e:
1c:38:eb:13:5c:3e:74:65:e2:b9:21:44:7f:71:06:
72:b9:44:e6:32:92:4b:5f:79:26:84:59:1a:d2:9f:
6e:c1:1c:f4:a2:92:bf:a2:6e:d9:b6:f1:0e:0b:27:
50:59:5f:99:3b:51:60:57:26:0e:48:a5:87:c8:a7:
d8:00:4b:83:56:c8:6f:00:cc:e3:af:7c:2d:e1:cb:
73:86:bb:aa:18:2d:7e:01:4e:c0:ac:dd:6c:da:46:
53:ad:87:57:2d:d6:19:6c:3c:31:90:01:c4:25:23:
11:38:e5:48:e9:a4:ba:0d:f8:f3:89:2b:d3:db:5d:
1b:0a:25:6a:19:0d:d4:57:9b:c8:49:e5:68:96:61:
dd:ae:e3:c4:ad:d1:d9:0f:d8:45:f9:fd:1e:f1:02:
6c:55:75:34:4e:e8:e0:ac:c2:77:63:94:da:23:54:
81:22:48:84:73:dd:87:e3:33:69:7e:33:f0:d2:42:
2a:f6:a0:90:4f:a9:c9:2c:73:9a:c4:cb:cb:4c:03:
e7:13:2e:98:e7:77:72:e8:46:87:9e:0e:3f:d1:c9:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:A9:37:5C:64:65:59:81:12:02:A1:5F:A8:37:A5:A7:91:79:20
X509v3 Authority Key Identifier:
keyid:63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/wNipN1xkZVmBEgKhX6g3paeReSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.144.0/22
91.204.160.0-91.204.162.255
91.236.52.0/24
91.236.54.0/23
128.0.54.0/24
185.11.128.0/22
185.72.196.0/22
185.170.104.0/22
188.210.220.0/22
193.105.125.0/24
195.177.216.0/23
IPv6:
2a02:e7c0::/29
2a0b:5480::/29
Signature Algorithm: sha256WithRSAEncryption
7a:e2:80:7f:0c:cf:f3:bf:f1:26:9d:70:6e:9a:87:90:62:00:
7a:e0:78:02:c5:db:d1:6c:92:35:9d:7c:ba:5c:60:08:a6:6c:
2a:b2:db:ae:0d:77:32:ba:6b:c5:f5:3c:1e:49:4f:fe:e4:21:
21:67:8b:b0:3d:1a:69:44:13:8a:84:b6:d2:f6:80:04:40:89:
a0:f4:8f:c2:d2:30:c6:a3:32:1c:80:25:4c:c0:24:cc:22:d9:
70:5d:f3:8d:a5:56:0c:f5:75:60:99:b2:ce:58:2e:8b:d1:4c:
f5:70:da:41:2c:ea:e5:cf:7f:d1:fd:79:18:3f:f8:93:6f:54:
0a:d2:82:0d:1b:f7:41:b1:fc:52:0d:47:1a:fe:1c:c1:c6:a9:
19:13:56:32:b4:af:66:29:ce:3c:a3:40:01:cb:ed:90:6e:d2:
bd:14:fb:99:1a:46:b4:10:bc:88:01:c9:bb:0c:a7:0c:41:dc:
40:b4:7c:80:65:f6:83:2e:81:52:3c:8a:47:be:9f:6f:f2:3a:
53:2a:9b:54:63:d8:76:07:b4:d7:b2:06:18:de:36:2b:32:f7:
d3:51:5a:9f:88:8d:1b:d5:5a:ec:89:97:39:3b:19:f0:91:9c:
9e:f0:9d:3e:91:96:3d:e0:ed:04:e6:f1:1d:fd:b5:fd:6b:3b:
37:97:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:10 2024 by rpki-client on console.sobornost.net