Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/P3PMbWGuyBfMDVRMS54UcBgDWxQ.roa
File: P3PMbWGuyBfMDVRMS54UcBgDWxQ.roa (raw, json)
Hash identifier: 9pjrtzMYOay20wBsy5mvjNnAQEG9pN/CncSzjlt2v+0=
Subject key identifier: 3F:73:CC:6D:61:AE:C8:17:CC:0D:54:4C:4B:9E:14:70:18:03:5B:14
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0188B9BFA02241891EAC1CCB20F65B553EE8
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/P3PMbWGuyBfMDVRMS54UcBgDWxQ.roa
Signing time: Wed 14 Jun 2023 11:52:03 +0000
ROA not before: Wed 14 Jun 2023 11:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5413
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:bf:a0:22:41:89:1e:ac:1c:cb:20:f6:5b:55:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jun 14 11:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f73cc6d61aec817cc0d544c4b9e147018035b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:29:27:ed:fb:b7:65:ea:ea:11:0a:e4:24:
43:b6:74:5b:fe:39:f5:d8:c0:0a:71:69:1f:ad:fb:
19:9c:f1:c3:eb:49:61:e3:db:83:65:23:a1:a4:8f:
d9:85:2c:19:ea:ab:ff:ff:1c:4b:50:11:88:5a:98:
22:f9:5d:32:fc:05:61:cb:e4:83:49:3b:69:94:31:
4f:29:ac:3b:fe:0a:3b:5e:f9:68:d3:d5:38:b0:c4:
cd:cd:2a:b9:bc:50:36:a6:79:3e:c4:aa:3d:35:4c:
27:d7:a5:88:09:b1:a9:af:6f:66:79:49:41:12:cd:
ea:85:d0:9f:c3:ca:41:a0:45:bf:2a:81:dd:20:e3:
a5:15:76:ac:14:05:e6:84:6f:17:18:34:7f:b2:e7:
91:ae:28:cb:3b:4a:ec:d1:94:35:2b:77:57:e1:12:
3c:b0:73:02:c5:7b:9e:cf:f9:dd:ca:4b:ca:13:c2:
ab:e7:9d:07:4d:f4:6b:ee:b7:97:dc:44:19:8d:2a:
3b:1d:f2:47:7d:e1:84:e5:24:4f:ea:3b:eb:4a:d5:
8d:ee:79:5f:ea:fb:29:bf:d0:47:81:95:24:93:40:
cc:00:f4:ef:3a:89:15:c9:24:b8:a7:00:fd:d8:e0:
27:8a:5d:89:3c:32:d4:4f:45:68:f0:fa:fa:40:c1:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:CC:6D:61:AE:C8:17:CC:0D:54:4C:4B:9E:14:70:18:03:5B:14
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/P3PMbWGuyBfMDVRMS54UcBgDWxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/24
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3f:3f:32:ec:c7:cb:0d:cc:65:ce:16:af:b7:cb:1a:38:c8:
86:85:00:51:4b:0e:fe:03:42:b7:9e:57:a5:2f:b0:e9:1e:99:
16:ad:1d:e4:2c:1e:37:e0:ad:9f:83:36:9a:ab:b4:32:43:03:
45:a7:51:5a:87:3d:cb:62:12:30:f8:cd:b1:89:d4:94:af:23:
1a:10:76:9f:f9:5d:c8:83:ae:9e:96:0b:94:a0:7d:c2:eb:e2:
d6:76:6c:b2:35:63:1f:1e:ce:11:a5:6b:ec:59:bb:18:32:3e:
99:30:99:5d:1a:48:5d:af:b1:d3:14:03:b6:27:a8:5c:fb:e4:
2e:8f:63:d9:bb:ec:c8:20:c5:af:b3:2c:e6:f3:e5:3b:be:49:
26:ed:4d:bc:d6:5a:82:84:97:0d:aa:b3:f1:16:fc:e5:1d:0d:
fd:de:1b:63:e7:5a:9f:52:f7:a6:c3:7a:86:8a:92:70:c4:0e:
29:cf:06:87:ec:7b:ab:31:3b:71:57:51:1e:80:a6:1f:9b:a5:
0a:1b:86:11:20:8f:71:7b:c7:65:d5:68:4b:2d:c8:a4:11:52:
08:5d:83:7c:86:25:2b:f4:37:07:76:38:9f:b8:f0:ed:a2:3d:
32:f5:55:db:dc:f8:fc:89:2c:c1:8e:df:a7:16:6a:bb:60:61:
f3:55:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:34 2024 by rpki-client on console.sobornost.net