Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/kWDAnS9jGh7nWpoA27KZuo3rDSQ.roa
File: kWDAnS9jGh7nWpoA27KZuo3rDSQ.roa (raw, json)
Hash identifier: MVAqG4/cFRPQIEpYcCeLLdpB7eKV6wO3O/xjZPvgN0o=
Subject key identifier: 91:60:C0:9D:2F:63:1A:1E:E7:5A:9A:00:DB:B2:99:BA:8D:EB:0D:24
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 018CCA9961A9F24C70227CFC61483C4C678A
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/kWDAnS9jGh7nWpoA27KZuo3rDSQ.roa
Signing time: Tue 02 Jan 2024 14:34:58 +0000
ROA not before: Tue 02 Jan 2024 14:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59742
IP address blocks: 185.73.236.0/22 maxlen: 22
2a03:46a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 23 Mar 2024 10:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:61:a9:f2:4c:70:22:7c:fc:61:48:3c:4c:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 2 14:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9160c09d2f631a1ee75a9a00dbb299ba8deb0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:3d:07:db:bd:2e:37:08:eb:a9:79:bd:58:
10:60:c1:40:e8:2e:a5:37:a6:55:90:92:65:a1:be:
7a:89:c1:80:e1:5b:cb:32:e8:20:77:b4:3b:78:bd:
a2:12:4a:80:61:0b:0f:61:57:c3:28:73:5c:db:16:
4b:c2:ef:05:3e:1f:b8:a1:ff:c9:2f:8e:ba:a4:e9:
7c:73:90:69:7d:c0:b8:42:d2:b0:a5:a5:e2:06:f5:
88:72:20:a0:fe:b2:ec:a6:65:7a:d2:66:80:6e:92:
62:92:34:4d:0a:50:95:50:22:34:37:84:8f:aa:9d:
d4:3c:7d:9b:34:7d:8e:27:80:8e:cd:da:a2:df:f7:
8b:cf:88:58:1f:3d:a7:e7:6d:ac:ff:38:ce:4c:e4:
79:5d:42:32:f4:b1:be:09:f8:06:f5:58:f8:b5:39:
2c:c5:20:56:7d:0c:60:a0:57:f9:73:38:36:8e:df:
c2:10:26:e9:a3:0a:61:5b:97:28:13:f7:77:68:f2:
e2:de:fd:c5:73:1a:06:9b:84:e1:e2:f1:51:e8:c1:
a8:dc:b3:eb:56:33:c0:13:7a:f3:0c:c4:b9:cf:77:
b1:ff:57:56:db:eb:b0:e0:b3:a4:85:54:31:ee:fb:
8f:40:28:91:f2:9b:b0:74:b6:83:6c:91:03:1e:ee:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:C0:9D:2F:63:1A:1E:E7:5A:9A:00:DB:B2:99:BA:8D:EB:0D:24
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/kWDAnS9jGh7nWpoA27KZuo3rDSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.236.0/22
IPv6:
2a03:46a0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:24:84:0d:68:48:6f:64:b5:01:fe:bd:3a:25:da:2e:d1:9d:
e5:06:40:5c:4d:dd:81:99:54:54:eb:b3:c8:2f:3f:ba:2f:c6:
7d:46:00:41:6d:13:34:3b:88:03:11:a5:ab:fa:5a:68:02:fa:
85:b0:b4:2b:ef:73:95:6f:59:16:e3:04:af:e1:74:dc:a5:41:
33:d9:10:c6:b4:c7:3a:21:8e:b8:c7:a3:e7:8c:25:f5:20:1c:
25:6b:ea:ce:76:29:f5:04:46:d4:25:88:e1:10:6a:c6:8f:3f:
fe:ba:8e:6e:12:84:93:f2:84:dc:ed:15:ef:a2:e5:61:c1:88:
0d:de:f7:09:89:22:a6:4d:d1:0e:28:f8:25:da:e8:40:b7:08:
fb:13:4b:e9:1f:ca:31:0c:71:fa:35:69:19:ff:8a:37:37:2c:
d9:16:5a:f6:60:78:e1:6b:70:a5:02:74:59:3d:8b:98:08:a8:
da:71:ff:cd:49:23:7e:3d:8b:be:7f:44:85:e5:2d:b8:83:88:
b5:29:65:ed:a2:4a:fc:52:f9:2c:b5:e0:21:85:74:5d:23:68:
4f:b8:92:81:a0:29:e4:48:7d:f5:55:b5:3d:aa:bf:cd:6c:56:
a8:10:33:8e:d0:44:7b:e3:d5:a3:15:96:32:f9:2f:b4:47:b3:
16:83:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 14:23:14 2024 by rpki-client on console.sobornost.net