Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/U8Ioc048Z7OlrX3Gz4JEnXrif3A.roa
File: U8Ioc048Z7OlrX3Gz4JEnXrif3A.roa (raw, json)
Hash identifier: eXsmJyEZ/3To0CGEC5ZDYOYwI+NvSSuQ5cQAEfosxPw=
Subject key identifier: 53:C2:28:73:4E:3C:67:B3:A5:AD:7D:C6:CF:82:44:9D:7A:E2:7F:70
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 01856D0A8CC98B9611FE649D369353F9E4B8
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/U8Ioc048Z7OlrX3Gz4JEnXrif3A.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57653
IP address blocks: 109.69.232.0/24 maxlen: 24
109.69.232.0/21 maxlen: 21
109.69.233.0/24 maxlen: 24
109.69.239.0/24 maxlen: 24
109.69.238.0/24 maxlen: 24
109.69.234.0/24 maxlen: 24
109.69.235.0/24 maxlen: 24
109.69.237.0/24 maxlen: 24
109.69.236.0/24 maxlen: 24
185.191.85.0/24 maxlen: 24
185.191.84.0/22 maxlen: 22
185.191.84.0/24 maxlen: 24
185.191.87.0/24 maxlen: 24
185.191.86.0/24 maxlen: 24
94.156.96.0/24 maxlen: 24
2a00:1ba8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8c:c9:8b:96:11:fe:64:9d:36:93:53:f9:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53c228734e3c67b3a5ad7dc6cf82449d7ae27f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:15:66:0a:4e:8d:66:c7:e2:1f:ff:ca:1f:
bf:4c:86:d3:94:2d:a8:fe:c3:49:ba:32:73:f4:1d:
63:2f:cb:4d:d0:5a:f9:2b:4d:f3:8d:8a:f8:eb:eb:
e5:75:00:9d:80:1b:c3:8b:bd:b2:07:6b:a1:20:7f:
54:83:72:59:a7:f4:33:ef:af:e1:20:09:d9:9e:da:
1a:19:73:34:05:d1:ef:58:19:ad:14:ea:63:a9:71:
f5:a0:1b:5d:3d:10:8e:29:f4:0e:4a:85:78:62:5b:
8a:48:85:81:32:40:7e:15:e4:c0:98:67:96:db:35:
5c:2b:bc:66:ed:4b:80:9c:0d:ff:50:e4:8b:5c:a8:
43:00:b2:a2:a8:dc:a1:e1:e9:27:c1:de:10:e7:41:
63:11:05:c3:cd:61:a2:36:14:5d:cd:11:91:c1:20:
a1:8d:9d:62:23:50:94:9b:78:12:88:a1:08:c8:13:
ee:f1:6e:3f:5c:b5:e6:4a:9c:be:fd:78:79:21:62:
0d:ab:0d:dd:39:dc:f5:af:31:b5:bc:20:66:47:d9:
df:8c:e1:51:0e:cf:b6:fa:95:fc:1c:a6:c6:7a:d4:
25:2a:bd:ea:2d:a6:fc:c1:73:b0:8b:02:9c:17:37:
01:24:a1:ce:8b:98:c4:21:52:8a:f7:12:90:ff:ed:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:28:73:4E:3C:67:B3:A5:AD:7D:C6:CF:82:44:9D:7A:E2:7F:70
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/U8Ioc048Z7OlrX3Gz4JEnXrif3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.96.0/24
109.69.232.0/21
185.191.84.0/22
IPv6:
2a00:1ba8::/32
Signature Algorithm: sha256WithRSAEncryption
62:88:30:a4:b1:fa:c5:60:d0:0e:fb:88:65:db:cc:58:76:4e:
10:78:03:79:88:f2:c0:9e:12:f5:6d:13:d3:82:9b:d7:16:bc:
bd:25:53:d6:52:7a:84:be:2d:49:e3:7d:cd:1d:09:28:86:92:
ac:12:ad:c5:45:4f:59:ed:ec:5f:bc:2b:84:1e:09:8f:7b:ee:
ab:f8:57:23:68:04:27:79:58:22:a3:01:b5:eb:dd:35:e7:97:
1d:91:e3:48:46:b9:f2:a7:69:01:7e:df:04:8e:40:86:07:6b:
cb:89:7b:5b:5f:b0:0f:cb:83:04:ed:3a:31:c0:d3:5f:7b:38:
68:9e:68:9d:4e:f7:ff:84:ff:5d:14:9d:9e:fd:c5:32:f7:fd:
c4:17:5e:f7:46:44:25:4a:ac:fc:fb:3d:f7:0d:39:8c:a1:b6:
4f:cb:35:d1:d9:c8:74:a9:a0:93:83:e8:e2:bf:4a:fa:70:7c:
77:97:7f:c1:3f:8f:9f:1d:03:68:19:ce:c3:c9:bc:cf:85:29:
b6:f5:8d:91:c2:cf:d9:0a:16:6a:dd:4f:86:e3:43:c6:21:b1:
d6:d6:19:2e:e4:60:90:49:35:0c:88:18:c2:de:9a:f2:87:d5:
d1:04:1d:5e:cb:6c:e2:33:c0:9c:db:ab:34:5e:fe:37:56:19:
5a:c8:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:56 2024 by rpki-client on console.sobornost.net