Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/_EYOV7R0MOoGaYDSqlyGe8TryII.roa
File: _EYOV7R0MOoGaYDSqlyGe8TryII.roa (raw, json)
Hash identifier: XWepzlGxczfSVOC4v4seVXFnuaEEToLRqvJKYiOgcHM=
Subject key identifier: FC:46:0E:57:B4:74:30:EA:06:69:80:D2:AA:5C:86:7B:C4:EB:C8:82
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01856EB9062154EFBBCFA202738031B3AA54
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/_EYOV7R0MOoGaYDSqlyGe8TryII.roa
Signing time: Sun 01 Jan 2023 19:04:57 +0000
ROA not before: Sun 01 Jan 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205933
IP address blocks: 185.147.64.0/24 maxlen: 24
185.147.66.0/24 maxlen: 24
185.147.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:06:21:54:ef:bb:cf:a2:02:73:80:31:b3:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc460e57b47430ea066980d2aa5c867bc4ebc882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:2d:cb:1a:60:76:5f:8e:c0:c2:47:ee:29:
c7:93:e7:e9:06:2c:8e:92:e8:e3:9b:9e:77:ea:de:
bb:15:e4:5d:9a:1f:da:37:0f:39:3e:8b:6c:5e:39:
65:54:7b:7b:b3:43:d0:53:79:66:85:a4:f0:bb:cd:
a7:ca:cf:5b:1f:14:27:8c:34:44:63:f5:4d:cc:87:
87:33:4f:24:48:38:9a:b2:9a:fe:80:d3:ab:3b:93:
79:6b:4b:90:fc:63:5a:ff:f5:b2:eb:c7:3b:69:61:
7b:77:3e:74:42:7a:cc:76:2b:ed:f2:ab:3d:67:3b:
5d:5f:2e:78:9a:2a:77:c3:69:d3:99:1c:b9:4c:23:
c6:94:13:3c:f7:fe:90:96:e6:22:6e:6d:04:70:f2:
ea:9e:66:33:d2:10:8d:dd:15:77:fb:df:84:8c:b9:
3d:f9:aa:57:d7:7a:96:c2:cb:d6:90:fa:93:14:cf:
51:7c:6c:a8:56:ac:ab:ce:35:4d:e4:a8:b9:99:55:
06:88:79:c2:b2:27:0c:43:32:44:88:63:b3:47:04:
92:b4:bb:7e:25:6c:dc:5b:70:67:2a:28:cc:3b:f7:
77:56:13:a1:aa:b0:54:63:61:6a:ba:53:c8:b1:36:
16:a1:ae:bf:0c:4f:cf:89:bd:25:79:7c:b8:ec:0b:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:0E:57:B4:74:30:EA:06:69:80:D2:AA:5C:86:7B:C4:EB:C8:82
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/_EYOV7R0MOoGaYDSqlyGe8TryII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.64.0-185.147.66.255
Signature Algorithm: sha256WithRSAEncryption
0d:5e:73:6d:b4:a3:3d:2e:06:14:dc:55:3d:50:af:d1:57:a9:
1c:5c:99:20:ad:bc:03:d1:88:83:dd:2c:90:4a:99:58:81:8c:
af:2d:2d:58:b0:21:44:eb:b9:f1:cf:8f:16:01:48:60:3c:cf:
a6:f4:48:d2:72:ef:93:49:13:0e:32:0c:29:ec:28:a2:97:b8:
f0:d1:11:af:dc:15:36:83:79:71:4a:e7:2b:5f:a1:7a:2e:b4:
6d:1f:27:9e:cd:1d:ee:45:7f:85:a7:d6:f6:d9:9c:53:c7:26:
54:bc:81:ba:53:59:41:b3:eb:dd:d1:71:05:d1:59:51:97:f4:
c7:b3:55:ad:9e:7a:e2:20:69:ef:0e:3e:b5:b4:dd:41:8f:b4:
0b:0a:0a:5d:24:5b:e0:71:e7:aa:f1:5c:cd:c7:6d:69:5d:bf:
f5:f6:5a:b2:c8:e7:f7:12:7b:67:c9:7e:6c:13:6d:6b:7a:c8:
8d:08:00:0a:28:b3:83:4b:e2:9b:3c:ac:e9:bf:ab:f5:ad:ce:
e0:41:98:fe:9b:4e:e0:47:4a:6e:3b:2d:a3:66:5f:b0:2d:e0:
01:52:65:d2:22:63:20:b7:ce:df:d4:73:18:4f:f4:69:8a:83:
2c:82:93:5a:df:41:ba:c3:97:8e:e1:c5:23:c2:f6:29:44:34:
c3:f0:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:06 2024 by rpki-client on console.sobornost.net