Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/Sj5VLJJm1d7-Y6l1SjXtQ5uBvZE.roa
File: Sj5VLJJm1d7-Y6l1SjXtQ5uBvZE.roa (raw, json)
Hash identifier: xeNmgKUT6iO4dCm+OzqqESZK3VjyWTzP/Ys17dra5Bc=
Subject key identifier: 4A:3E:55:2C:92:66:D5:DE:FE:63:A9:75:4A:35:ED:43:9B:81:BD:91
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01856BC11945A8444EDF920F922936713C23
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/Sj5VLJJm1d7-Y6l1SjXtQ5uBvZE.roa
Signing time: Sun 01 Jan 2023 05:14:55 +0000
ROA not before: Sun 01 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5413
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:19:45:a8:44:4e:df:92:0f:92:29:36:71:3c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 1 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3e552c9266d5defe63a9754a35ed439b81bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:1d:02:e5:ca:29:88:3c:c6:2d:9b:48:88:
77:39:3f:53:4f:9c:8f:99:07:48:a7:a6:2f:36:50:
00:9c:52:52:43:d9:e9:47:5e:37:e5:20:70:ce:1f:
41:e5:38:4f:2b:1b:3a:0d:ee:35:bf:5a:64:1e:32:
b9:70:fd:97:bd:fc:29:bc:d9:a4:00:ee:ca:f6:f6:
e8:9f:83:56:84:a2:0d:15:87:4c:f3:62:f8:42:4b:
53:0f:7b:c6:45:58:b0:be:40:eb:ef:d9:78:b7:de:
ca:11:2e:a3:68:2a:b1:9a:c2:cf:50:4f:c1:04:b7:
18:f8:0e:bd:b8:59:8a:95:be:96:71:8e:89:12:95:
6d:d1:e4:32:7f:ed:fe:d8:da:69:c7:cc:01:0f:22:
d2:ce:b1:c7:27:bf:0e:43:e1:18:c8:5e:9c:31:fa:
09:02:10:19:cb:0b:ef:b4:42:4a:cf:75:e2:16:19:
84:03:34:fa:e7:e9:ba:ad:fa:66:e7:1c:a1:92:d6:
48:6a:e4:7d:11:86:c8:ba:0a:57:50:4e:b9:83:c7:
a2:d5:fc:00:0c:43:7f:6d:2d:7d:73:bf:3c:8a:78:
3c:93:df:18:30:2c:d1:20:c2:8f:af:b1:f9:78:2c:
c7:0c:97:ed:83:5d:65:f9:0f:b3:19:25:94:9d:d7:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:55:2C:92:66:D5:DE:FE:63:A9:75:4A:35:ED:43:9B:81:BD:91
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/Sj5VLJJm1d7-Y6l1SjXtQ5uBvZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/24
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c6:34:3e:d1:be:e2:eb:88:23:da:38:82:00:37:bb:01:23:
54:49:40:4f:38:7c:c0:3b:c6:29:a3:6c:3c:c2:e8:4f:da:e3:
c6:a1:60:55:5e:2e:92:e3:48:d2:77:d4:24:06:3a:d8:1d:c7:
ff:e9:ad:cf:78:e0:b4:9c:5a:a5:79:86:53:d5:34:d4:fd:57:
df:d7:d0:ba:49:da:b5:fa:b1:8f:d3:03:ac:c4:10:76:76:2a:
e5:07:5f:77:dd:82:b7:ec:af:c1:9a:2f:cf:dc:0a:e4:1b:33:
bf:cc:fc:44:20:e1:f2:55:b6:be:ac:68:a0:33:b7:d0:92:38:
92:47:8b:1e:94:56:78:2c:fe:6f:83:c7:94:d5:49:0c:2c:1f:
76:97:5f:60:19:1b:68:d7:c3:b8:6a:1b:19:76:a9:ca:a4:c5:
16:e3:44:ca:10:c4:36:96:ae:09:a1:dc:d7:16:23:b9:44:65:
8f:75:9d:dc:7d:69:a5:84:fc:8d:ce:ed:dc:c0:5c:28:30:c8:
a4:e2:59:64:e7:fe:9c:1f:71:3e:b5:40:ef:bf:3d:b3:da:e5:
92:39:e3:ce:2a:8e:64:27:ec:51:35:de:20:e2:87:d4:99:45:
cd:fe:50:d7:91:0f:bf:a6:6d:7b:ae:7f:e1:87:1c:f7:e4:24:
ac:11:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net