Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/VhJf2mVQQzFGr5RwBBvOuYQ60qI.roa
File: VhJf2mVQQzFGr5RwBBvOuYQ60qI.roa (raw, json)
Hash identifier: WNlUsFXIpvY7q9CoaKdZLznh+CMcyL0b0SpNpbztaH0=
Subject key identifier: 56:12:5F:DA:65:50:43:31:46:AF:94:70:04:1B:CE:B9:84:3A:D2:A2
Certificate issuer: /CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Certificate serial: 018793378F6E0C5D39F7BE51092F37743476
Authority key identifier: 07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/VhJf2mVQQzFGr5RwBBvOuYQ60qI.roa
Signing time: Tue 18 Apr 2023 07:15:04 +0000
ROA not before: Tue 18 Apr 2023 07:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197653
IP address blocks: 94.185.64.0/23 maxlen: 23
94.185.68.0/23 maxlen: 23
94.185.66.0/23 maxlen: 23
94.185.70.0/23 maxlen: 23
185.118.16.0/23 maxlen: 23
185.118.18.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:37:8f:6e:0c:5d:39:f7:be:51:09:2f:37:74:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Validity
Not Before: Apr 18 07:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56125fda6550433146af9470041bceb9843ad2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:48:b1:76:16:76:a0:6f:72:ab:82:d3:fc:
f3:03:de:ab:3e:67:9f:85:e7:79:5a:c7:ff:f8:85:
82:12:7a:b7:74:d1:76:d4:d0:83:07:0a:70:1c:df:
a1:68:d6:e2:a4:49:d8:a9:86:a3:18:94:73:ad:23:
b2:ea:39:a5:36:24:2a:22:aa:b7:85:5c:73:b4:41:
26:06:22:b6:ed:cb:7f:b9:f6:78:ad:57:02:91:9d:
a8:70:9e:83:d6:eb:8b:79:3c:0b:77:1b:30:7a:84:
c8:7f:6c:8d:0b:48:37:f9:e9:9f:b5:c6:db:e4:b6:
b0:be:fd:d2:58:21:66:1d:75:6a:f1:26:05:96:7f:
4c:49:5c:8e:79:8f:9f:df:29:de:c3:52:bc:5b:89:
ef:56:2e:cc:b7:ed:8c:48:47:49:78:86:3f:07:11:
7e:39:74:39:e7:09:e0:ed:14:89:e2:b8:c3:76:4a:
39:f0:9f:3e:65:a1:a2:b1:e4:b3:8e:7c:1f:fb:4d:
86:6c:ce:2b:44:3b:18:9f:a2:b4:0d:23:3a:78:05:
18:42:26:aa:ad:2f:1c:19:74:4e:98:f6:0e:c2:0b:
d2:ac:e3:f6:d1:c8:91:dd:b7:e8:66:61:ff:b3:95:
86:fd:1f:74:96:b2:32:27:34:68:0e:fc:3b:eb:97:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:5F:DA:65:50:43:31:46:AF:94:70:04:1B:CE:B9:84:3A:D2:A2
X509v3 Authority Key Identifier:
keyid:07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/VhJf2mVQQzFGr5RwBBvOuYQ60qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/BwH_uJiTia4oyzMsiNydOZ2YrqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.64.0/21
185.118.16.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8c:c9:8d:85:45:5b:16:a9:50:c0:af:67:1f:ad:64:5c:f9:
af:44:7b:51:ed:f9:ef:7c:8e:18:ec:06:cf:2b:e3:27:0c:ee:
1e:4a:42:d1:a5:38:db:80:c6:08:ee:f9:8f:3a:09:40:c9:e7:
a3:03:44:96:0b:62:5c:8f:cc:47:9a:e2:41:b6:c4:33:d5:7d:
14:03:69:77:5e:c8:55:33:f8:af:22:c1:60:c5:17:19:a3:b3:
ab:de:bb:d1:77:05:91:9f:e3:0d:4a:b2:05:89:2a:52:82:d0:
db:65:ff:91:86:8c:8d:dd:00:a8:5b:96:7a:08:78:4d:79:f6:
c4:43:ec:e7:b0:7d:e1:82:ab:83:e4:c9:f4:bc:7a:f7:0e:d9:
7e:64:b0:fc:6f:8b:66:31:41:e0:db:0b:18:4e:74:b8:5a:b1:
e3:45:e9:47:15:42:c7:2c:7a:5c:05:32:40:2a:dc:6f:63:57:
79:38:9c:f5:5b:0f:3b:88:08:ee:9f:2d:5a:01:c0:b2:76:c6:
57:be:1e:3c:6a:a4:06:70:19:a5:5b:29:c3:60:29:9e:37:cf:
dd:a4:83:2d:78:93:1c:f1:57:57:92:f8:f1:a2:ff:b3:34:40:
22:92:23:fb:a5:6c:08:ed:b5:a1:59:d0:95:ad:38:7d:70:8e:
20:4b:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:11 2024 by rpki-client on console.sobornost.net