Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/4rg3IyxZHJTUU59NRrIs1bD6FL0.roa
File: 4rg3IyxZHJTUU59NRrIs1bD6FL0.roa (raw, json)
Hash identifier: X9Cd+0nrt7E1esnHCDZhFN/Y9mwUI/53fD8Y1dbKNFk=
Subject key identifier: E2:B8:37:23:2C:59:1C:94:D4:53:9F:4D:46:B2:2C:D5:B0:FA:14:BD
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 01856F0B5208536489669F6D7CA748BC7387
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/4rg3IyxZHJTUU59NRrIs1bD6FL0.roa
Signing time: Sun 01 Jan 2023 20:34:50 +0000
ROA not before: Sun 01 Jan 2023 20:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206589
IP address blocks: 185.182.96.0/22 maxlen: 22
2a0a:ea80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:52:08:53:64:89:66:9f:6d:7c:a7:48:bc:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Jan 1 20:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2b837232c591c94d4539f4d46b22cd5b0fa14bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:61:78:d9:55:77:cf:6b:4c:c1:59:16:3b:
3d:38:4f:a2:6c:a0:72:53:34:74:2b:f8:0a:5b:29:
0d:55:2b:87:71:f8:97:88:d8:c9:26:ea:ad:00:b0:
17:80:12:61:23:bc:08:a6:03:cc:78:ea:91:cf:e9:
83:1c:c9:d9:8e:40:1e:bc:43:a6:75:9c:a2:05:70:
21:24:10:42:d2:a1:e9:ec:c6:f3:a9:65:8e:d0:dc:
23:c3:02:1b:8b:74:83:90:d9:c6:bf:45:ea:8b:e4:
d1:1d:04:d4:7d:82:e1:94:92:dd:ff:3f:3e:6f:68:
d8:2c:a4:a1:31:a6:94:14:b1:12:6f:59:b6:10:ca:
6f:2e:84:e4:ef:6d:97:59:37:fc:80:f8:ab:20:0b:
af:7e:4b:85:f1:ce:60:5b:9a:9f:9c:23:b0:5a:b6:
da:80:da:79:87:b1:5e:48:8b:bd:3a:e5:b0:62:0d:
ce:80:45:10:42:b9:f3:f5:1a:93:fb:14:66:ab:9b:
40:69:6f:ec:36:e8:31:f5:29:b9:0c:e9:0c:25:74:
91:74:a2:a0:44:09:ac:21:e4:8f:59:13:85:0c:82:
31:d1:e3:0b:84:16:9a:fe:c8:1e:c5:06:65:2b:80:
29:10:c2:cd:8e:ed:53:d1:eb:3a:6e:22:47:57:be:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:37:23:2C:59:1C:94:D4:53:9F:4D:46:B2:2C:D5:B0:FA:14:BD
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/4rg3IyxZHJTUU59NRrIs1bD6FL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.96.0/22
IPv6:
2a0a:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:ac:f6:9c:ff:62:5d:b1:c5:af:06:66:cd:34:55:1b:54:cb:
57:0b:17:6d:7b:31:4a:a2:a1:f7:80:7f:97:2e:bc:64:47:a7:
31:f4:29:57:70:f0:93:be:a7:10:e8:f8:65:95:35:bb:37:95:
0c:77:e6:c9:28:c5:4a:09:d2:bb:c4:a7:7a:90:a3:8c:7b:2d:
12:ac:12:90:06:37:3c:57:59:e5:4f:81:de:df:b4:12:54:92:
94:74:52:db:a3:2e:7a:56:1f:00:92:4c:5c:cd:2d:5c:8b:1e:
de:c0:d3:8a:2c:cb:27:a9:8b:b5:75:15:9f:37:0b:0d:f0:2e:
ef:48:97:b8:85:9c:40:b0:15:cf:fc:84:68:b9:6f:ec:28:7d:
82:05:b7:23:5a:4f:d1:0f:85:4f:4e:65:0d:53:6e:16:ad:71:
6e:a8:02:be:bc:61:dc:36:12:80:2d:7e:3e:65:f4:82:12:58:
e4:59:2f:8b:b7:cc:ae:83:a5:cd:92:7e:e8:f8:88:d0:16:06:
0a:a3:a7:98:29:89:3e:13:ea:4f:39:57:38:c5:41:06:89:52:
83:74:de:59:db:a1:09:8f:0c:57:c5:5c:9a:7b:48:7a:47:30:
12:82:81:ad:0c:0b:9a:be:0e:a9:ca:0f:81:79:56:18:01:45:
a7:fb:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:43 2024 by rpki-client on console.sobornost.net