Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/6WBH3j6WSTOOH5Xmb8PlUh2kjlg.roa
File: 6WBH3j6WSTOOH5Xmb8PlUh2kjlg.roa (raw, json)
Hash identifier: 6E7KVIXv3D2XaLOglRmP/QDaTs6BSK4TlRqSx4pdqhU=
Subject key identifier: E9:60:47:DE:3E:96:49:33:8E:1F:95:E6:6F:C3:E5:52:1D:A4:8E:58
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 018C3E32A2A7878B937C3D757E8E566B50F5
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/6WBH3j6WSTOOH5Xmb8PlUh2kjlg.roa
Signing time: Wed 06 Dec 2023 08:15:54 +0000
ROA not before: Wed 06 Dec 2023 08:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8814
IP address blocks: 212.47.132.0/22 maxlen: 22
212.47.128.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
212.47.148.0/22 maxlen: 22
158.181.44.0/22 maxlen: 22
158.181.40.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:32:a2:a7:87:8b:93:7c:3d:75:7e:8e:56:6b:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Dec 6 08:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e96047de3e9649338e1f95e66fc3e5521da48e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:c8:01:4e:f6:49:81:bc:85:54:e1:17:ef:
00:ba:9e:de:f2:1d:51:e7:5e:65:55:78:80:2b:b0:
a1:3d:99:21:94:c4:e5:be:61:9c:e2:a6:c2:52:79:
c4:5a:e0:fe:34:df:73:73:06:09:6a:56:37:0a:45:
8c:70:e9:34:d8:61:de:10:9c:e3:5e:b3:40:c0:94:
a5:25:f2:2b:0b:29:8e:f8:bf:c0:b6:13:00:92:ae:
79:c4:df:4d:b5:b7:53:d8:56:81:7f:3d:d3:ef:2b:
24:8b:37:ed:55:dd:9b:12:2b:d5:8c:60:d7:33:ed:
a8:10:dc:2f:f1:31:2c:07:b3:2b:e1:3c:17:e7:83:
cb:c4:e3:55:1c:49:38:43:44:04:60:bb:c2:06:07:
99:a2:1d:c3:dd:13:85:20:1a:13:a2:71:a2:e2:9a:
c1:a5:cb:9e:19:9b:a0:b0:d5:dd:b4:90:39:aa:0d:
51:6e:0d:b5:c5:a0:4e:bf:77:6e:ae:fe:b1:08:81:
20:d4:86:09:37:2a:0b:10:e0:a1:09:50:f9:29:7e:
e8:61:cd:a5:0a:63:dc:ad:f2:f1:c1:be:b0:2b:07:
6d:4e:e5:3a:ce:67:d8:71:70:cd:c4:15:8e:05:24:
e4:a5:47:60:1c:fa:95:5d:07:f6:02:36:3e:44:10:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:47:DE:3E:96:49:33:8E:1F:95:E6:6F:C3:E5:52:1D:A4:8E:58
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/6WBH3j6WSTOOH5Xmb8PlUh2kjlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.181.40.0/21
212.47.128.0/21
212.47.140.0-212.47.151.255
Signature Algorithm: sha256WithRSAEncryption
91:53:66:49:31:0d:ea:65:81:c6:eb:c4:8d:4e:a6:0b:8e:c4:
12:0f:e8:fd:8f:92:e5:c2:8a:73:80:10:6f:3b:c3:6f:81:8a:
1a:95:6d:09:73:d2:d4:4d:ad:aa:64:93:dd:ff:5e:aa:81:1f:
6f:7f:69:db:c3:70:0e:b8:b8:1d:09:90:69:fd:a3:d7:12:9e:
44:4f:ad:84:07:d5:e0:ba:f8:cc:dc:5d:93:d0:4e:d0:a0:b9:
c0:b9:2a:68:1f:7f:ce:67:a8:cf:c7:99:aa:01:94:54:fe:b7:
91:e4:ca:3e:0d:d9:b5:5a:c5:83:3f:3c:9c:dd:f5:3b:05:29:
93:ad:09:87:81:61:ac:2f:e6:f7:72:34:d7:0d:21:3c:33:3b:
29:02:c6:ca:06:0e:02:50:83:55:8e:28:40:ed:66:5d:1e:44:
3a:95:25:4c:76:2b:47:e0:ec:6c:34:eb:6e:4c:0f:dd:72:75:
92:61:d2:5a:c8:fc:4a:82:ca:a9:aa:5c:ad:65:c1:dc:2c:93:
8f:2f:47:28:f8:05:d1:02:72:c5:07:ae:80:02:01:82:4d:80:
1d:d1:06:18:0c:00:e4:ee:4e:d5:cb:9e:e5:f9:a7:af:6e:f1:
fc:af:e9:47:13:3a:c2:78:24:87:a1:13:cf:12:64:d5:1d:78:
91:c4:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net