Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/lGxqp8SQ121YkfBggGPIUjg97ho.roa
File: lGxqp8SQ121YkfBggGPIUjg97ho.roa (raw, json)
Hash identifier: gThLxLFhfqOHVSCWEbwn1Pqrr8TSMo+4MteRYywqnhE=
Subject key identifier: 94:6C:6A:A7:C4:90:D7:6D:58:91:F0:60:80:63:C8:52:38:3D:EE:1A
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01857246A62932615BD81A60A3ED0E059365
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/lGxqp8SQ121YkfBggGPIUjg97ho.roa
Signing time: Mon 02 Jan 2023 11:38:30 +0000
ROA not before: Mon 02 Jan 2023 11:38:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 85.235.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a6:29:32:61:5b:d8:1a:60:a3:ed:0e:05:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jan 2 11:38:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946c6aa7c490d76d5891f0608063c852383dee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:5c:31:f0:f1:22:50:1f:96:db:fb:ed:16:
11:bd:3f:26:b8:69:dc:99:28:8d:a9:e2:13:0c:b4:
33:55:70:08:d4:5d:23:55:db:5d:31:d7:85:08:5a:
27:ab:1f:ea:4e:78:ab:d6:4e:39:4b:63:71:0c:6b:
98:00:23:ab:36:3c:05:fc:6b:2e:7b:07:50:11:38:
8c:31:7e:68:fa:c2:85:0f:cc:ba:16:9d:d3:84:49:
ff:a2:cd:96:38:23:4a:9d:6f:56:cc:e4:c2:bc:61:
35:21:a1:ee:54:ba:fb:49:b6:68:eb:45:07:06:57:
bf:a3:8f:85:c2:c5:64:48:1a:32:b8:aa:38:08:7c:
59:c3:c5:39:5e:82:51:ec:0c:e0:fb:ee:a6:83:63:
81:00:8a:80:06:01:7d:f7:2a:32:66:89:dd:fa:92:
d0:38:4d:0f:c1:eb:d5:55:32:8a:cb:fd:e3:e0:51:
63:dd:eb:3a:98:bd:b0:57:0a:12:a8:58:12:65:94:
d3:84:c2:f1:bb:10:a2:68:fa:38:49:65:cf:dc:d8:
b2:cd:ab:1a:f2:e0:51:88:a6:c4:07:71:7b:84:78:
6a:b2:bb:57:f0:4d:b9:35:65:20:1a:21:86:e4:e3:
df:f6:ba:c1:79:6e:da:d1:6c:df:85:e4:04:69:38:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:6A:A7:C4:90:D7:6D:58:91:F0:60:80:63:C8:52:38:3D:EE:1A
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/lGxqp8SQ121YkfBggGPIUjg97ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:40:8e:15:64:9d:ff:d8:6a:a1:49:94:f4:21:4d:cc:c2:38:
fd:77:18:7a:29:98:a2:66:55:9e:66:d0:26:84:b4:5d:75:63:
9e:51:71:92:ed:d8:6f:70:cc:a9:65:2e:09:09:70:8c:5d:71:
07:d8:80:3d:c9:ad:c2:9e:64:d3:60:b4:95:86:e9:30:10:57:
3d:67:66:80:05:d0:87:9d:7c:71:c4:b2:94:88:8c:70:98:ed:
de:56:18:f8:b6:f5:f9:f2:36:dd:79:c4:14:4e:32:f5:1c:d3:
37:12:46:48:d4:e1:e8:ef:3f:11:ac:b0:00:b0:22:2d:8d:70:
1b:f8:1e:25:3a:b5:eb:7e:93:e1:18:92:90:6c:d0:d4:26:54:
e7:c9:49:e8:f0:9f:c5:28:19:df:f7:f5:05:64:7b:25:f4:78:
2d:6f:40:5a:6b:f2:aa:48:9c:d8:29:ca:15:4a:c0:1a:34:77:
e7:ca:97:33:ab:2b:35:2e:22:7c:d6:23:fa:6a:52:ec:e4:06:
ff:23:34:a7:07:cb:5d:1f:84:6d:e1:75:ff:a4:bf:ce:13:97:
94:ba:66:f2:cc:b2:33:0d:02:0e:3e:43:08:5f:24:70:73:cb:
b2:32:3d:48:20:1b:fa:39:c7:38:7c:6a:5f:91:4f:c1:8f:86:
06:6f:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net