Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/6P4Lg-labLl3E0pDAM4vfQ_Y744.roa
File: 6P4Lg-labLl3E0pDAM4vfQ_Y744.roa (raw, json)
Hash identifier: PmInUXFMi2RVX917WjfZk+gx65EcONHW89B/4n3xS3s=
Subject key identifier: E8:FE:0B:83:E9:5A:6C:B9:77:13:4A:43:00:CE:2F:7D:0F:D8:EF:8E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 0185720C7DE65BFFBCBBE2822A36C5EA6D79
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/6P4Lg-labLl3E0pDAM4vfQ_Y744.roa
Signing time: Mon 02 Jan 2023 10:34:59 +0000
ROA not before: Mon 02 Jan 2023 10:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197248
IP address blocks: 185.130.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:7d:e6:5b:ff:bc:bb:e2:82:2a:36:c5:ea:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Jan 2 10:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8fe0b83e95a6cb977134a4300ce2f7d0fd8ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:eb:34:7b:62:f7:3d:91:5a:9a:39:91:a0:
27:d3:81:b8:43:86:47:69:7b:a6:55:3c:1f:97:2a:
d7:8a:22:70:22:45:95:10:db:2b:c5:dc:ff:45:8a:
59:5e:cc:e1:2f:08:4b:16:57:65:21:48:08:78:26:
69:68:1b:37:89:02:eb:96:49:54:20:cc:d1:dd:1e:
a7:30:82:63:42:25:ca:79:7b:c8:4b:8f:85:8b:0e:
8e:bc:d5:2f:3d:b4:cd:e6:41:be:d7:f0:18:a5:5b:
96:9a:b2:6b:c2:dd:3e:4a:21:d4:c7:14:63:77:62:
ba:e8:12:f7:17:11:86:29:0d:e1:ee:e4:89:e4:f8:
9a:7a:99:e0:33:26:c2:b4:75:5a:93:08:a0:55:64:
37:93:26:77:36:6d:fb:ce:bf:1e:67:ba:d8:7f:5e:
9e:c4:2d:4c:b5:21:77:3f:76:52:27:67:ec:94:5d:
a6:9e:71:cf:17:dc:e2:a4:0e:bc:e6:8b:1c:f4:d1:
b8:dc:a7:33:42:7b:db:66:db:e2:2e:06:a3:58:d6:
71:a3:1c:dc:96:ab:4e:c2:5c:3f:e6:db:6b:0b:1c:
ee:81:64:b9:fc:bd:bc:7f:6b:0c:9f:fd:57:c9:fd:
77:be:00:a7:20:cf:87:a3:b5:a8:cf:ba:b4:84:3a:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:0B:83:E9:5A:6C:B9:77:13:4A:43:00:CE:2F:7D:0F:D8:EF:8E
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/6P4Lg-labLl3E0pDAM4vfQ_Y744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.193.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0e:40:3b:2f:59:d7:43:b8:fd:20:69:ed:76:15:e2:c4:9c:
36:ed:7b:9d:bf:aa:78:da:b2:66:58:e8:30:49:4a:75:81:3b:
eb:9f:8d:72:97:47:56:1b:5c:19:5a:4c:15:f3:f8:bd:75:69:
cb:2e:4a:d2:64:f9:e4:ab:e8:80:be:9a:9b:90:60:3e:3c:74:
26:61:ec:09:c5:c2:ea:b5:dc:b5:e5:b7:82:f6:b9:1e:73:83:
4c:2e:d2:bf:a9:0c:bd:df:fe:32:a3:86:ca:6e:92:8a:63:46:
ba:b7:10:56:c9:cd:fb:e4:9b:a9:a1:64:e6:c1:d0:6a:85:ed:
3b:df:09:1b:82:fc:2f:90:f7:3f:45:31:5c:f9:21:8a:52:01:
76:1a:94:6d:80:ec:93:3b:7c:4e:43:22:a5:e9:db:f8:01:19:
dd:31:c8:fc:1e:ec:08:b6:da:15:16:56:42:ba:94:33:2b:12:
7f:80:69:a4:ea:d6:6d:d9:af:f3:b4:51:49:29:51:bb:e5:2f:
29:02:d7:0b:03:3a:76:5b:1f:4e:a6:67:21:8e:fb:ce:59:7a:
e8:c8:9c:57:da:89:27:e5:cf:40:e5:54:2a:c6:d3:71:eb:25:
8f:95:5c:3f:d3:94:69:ee:6f:77:e9:4e:33:51:e3:ea:a4:72:
6d:f9:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:42 2024 by rpki-client on console.sobornost.net