Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/P6ILEW_tz_nHAXvN-XRV51cwpR0.roa
File: P6ILEW_tz_nHAXvN-XRV51cwpR0.roa (raw, json)
Hash identifier: RB0mjW2h6k/AnaiF0bAPF97GHq5CXSlO1u8Mv2yY4xE=
Subject key identifier: 3F:A2:0B:11:6F:ED:CF:F9:C7:01:7B:CD:F9:74:55:E7:57:30:A5:1D
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 018571D7903464AADE1A410D521BCC0F30D5
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/P6ILEW_tz_nHAXvN-XRV51cwpR0.roa
Signing time: Mon 02 Jan 2023 09:37:10 +0000
ROA not before: Mon 02 Jan 2023 09:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205659
IP address blocks: 64.190.252.0/22 maxlen: 22
216.246.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:90:34:64:aa:de:1a:41:0d:52:1b:cc:0f:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 2 09:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa20b116fedcff9c7017bcdf97455e75730a51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:a0:c9:bf:e7:97:05:a0:98:88:f3:1d:72:
11:09:93:3c:cd:9e:31:f8:ca:03:5d:0c:e2:e2:84:
7a:6b:ee:70:9c:4c:5b:d8:9d:2d:ee:f6:18:4b:a6:
ad:e8:a7:4f:0e:1d:f6:ed:0d:d8:37:df:2c:32:e9:
f3:e5:c9:60:1c:1a:6a:63:92:5e:af:f6:b7:dc:29:
9a:01:24:59:df:81:07:2b:77:e2:f9:8c:cf:86:b4:
2c:00:f0:b1:a5:42:f3:a9:dd:6a:8e:2a:91:16:0b:
7e:5d:59:6d:1a:f1:6d:b0:51:a2:8c:83:5b:ef:6f:
2d:be:cb:d6:cd:1f:b5:2c:14:5b:32:ff:cc:7e:20:
a2:78:42:5e:f4:6e:c5:92:a8:9e:e2:8a:23:2d:93:
74:11:0c:6b:a4:89:ca:3e:b3:f7:5b:2f:b2:fc:61:
db:d4:61:51:d5:21:18:dc:35:95:07:e7:df:95:95:
bd:aa:77:4e:06:d7:c0:cc:fb:66:25:b3:31:b5:95:
64:c0:51:a5:67:cc:bc:1d:01:a6:80:5b:15:35:0a:
3d:3c:56:e0:30:2e:c8:6e:08:d2:bd:3f:a0:5b:88:
8c:46:8f:f6:6f:50:e6:d7:bc:3f:86:9e:27:3a:2f:
4b:99:a9:c8:f1:01:a1:6d:32:39:a8:5b:e5:ad:d5:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:0B:11:6F:ED:CF:F9:C7:01:7B:CD:F9:74:55:E7:57:30:A5:1D
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/P6ILEW_tz_nHAXvN-XRV51cwpR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.252.0/22
216.246.212.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b7:1b:ff:35:b9:4d:21:ef:c0:e8:dc:a1:28:ce:46:d5:70:
74:f0:a5:eb:a8:a7:e9:96:2d:4d:71:99:50:90:bd:57:e7:7e:
c7:b4:e2:55:34:02:2c:ed:93:c7:50:13:a7:90:ee:ec:6e:5d:
52:8e:d8:ca:a7:53:d2:76:28:12:c7:37:91:de:12:46:ea:ab:
dd:f9:9d:04:37:2b:7d:81:55:f6:84:30:7e:c6:a1:37:f3:0c:
15:3e:43:b0:aa:3f:0c:8f:b9:a3:0c:29:96:e8:d7:cb:b8:2a:
a1:01:5b:31:f2:56:f9:55:e7:b5:f1:e6:64:b6:b1:d2:11:b0:
04:bf:bd:79:aa:1a:58:c1:80:42:ab:fb:f8:06:c3:c1:47:48:
6c:aa:72:6b:87:cf:32:e2:a7:9e:c3:63:15:72:7b:ca:39:b8:
53:cc:97:b8:b5:73:70:c6:89:15:c0:64:f6:ff:9c:17:22:87:
f6:79:e4:a1:fe:14:b1:06:f7:c3:4e:eb:87:f7:c3:60:5a:83:
e4:7c:f8:a8:3f:68:76:1f:4b:f9:9a:39:77:c5:3b:56:65:81:
50:00:02:7e:16:ab:71:12:79:dc:78:92:b3:41:db:96:71:14:
dc:18:2c:9c:ba:15:ba:b0:9e:23:3a:95:ef:ac:1b:e5:29:37:
28:c7:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:30 2024 by rpki-client on console.sobornost.net