Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/O54wC3yDOcfqaD5u3ZsFtBFPem0.roa
File: O54wC3yDOcfqaD5u3ZsFtBFPem0.roa (raw, json)
Hash identifier: xX/a8iw1NoQIGhtj1fey1ZV18yTsCGwx8bBuqdjObvg=
Subject key identifier: 3B:9E:30:0B:7C:83:39:C7:EA:68:3E:6E:DD:9B:05:B4:11:4F:7A:6D
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 0186D52BA7847479E842792AF1BC700992AE
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/O54wC3yDOcfqaD5u3ZsFtBFPem0.roa
Signing time: Sun 12 Mar 2023 09:34:13 +0000
ROA not before: Sun 12 Mar 2023 09:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56800
IP address blocks: 185.110.144.0/23 maxlen: 23
185.110.146.0/23 maxlen: 23
176.10.40.0/21 maxlen: 21
176.10.40.0/22 maxlen: 22
176.10.44.0/22 maxlen: 22
2a0b:26c0::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:2b:a7:84:74:79:e8:42:79:2a:f1:bc:70:09:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Mar 12 09:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9e300b7c8339c7ea683e6edd9b05b4114f7a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:6b:39:b3:e1:61:55:2e:8d:f5:49:7e:a4:
32:e1:e9:51:bb:c8:b9:96:95:e3:fd:f2:ba:16:af:
81:eb:84:f1:50:1b:fb:bd:52:f7:dc:e2:bd:58:e9:
f9:2d:86:fe:f5:ea:75:6b:6f:9a:41:b1:36:f5:d6:
02:7c:af:fc:84:9c:fc:e0:9d:53:52:f5:17:99:f0:
38:d4:8c:b0:7f:fa:92:e6:36:67:86:eb:95:31:ff:
41:66:91:ea:8e:24:71:28:5a:30:b7:34:c2:cc:96:
c7:6d:e7:98:8f:96:62:a3:f0:c2:1a:77:a2:ba:05:
58:71:00:c5:e3:95:8f:72:11:fe:df:e6:72:63:d2:
ee:94:1a:12:bb:4f:34:ba:76:75:23:e3:5a:73:ee:
c0:2d:20:fa:13:03:4f:4d:7d:6b:59:ef:a6:6e:33:
cb:81:26:0c:b8:b3:59:e5:90:e1:a6:fb:00:a2:7a:
7d:5d:8d:3f:b5:19:4b:a2:cf:e9:72:e8:57:54:64:
0d:62:63:35:b7:24:0c:91:e8:8d:94:a8:d7:8b:34:
2b:3a:e7:cd:a8:74:da:6e:70:9a:27:77:d7:ea:4f:
b4:d1:07:2f:e1:48:a4:f7:4f:da:b1:3c:84:8d:88:
ee:7b:9b:42:97:7d:be:36:e3:fa:7e:fa:36:16:0e:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:30:0B:7C:83:39:C7:EA:68:3E:6E:DD:9B:05:B4:11:4F:7A:6D
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/O54wC3yDOcfqaD5u3ZsFtBFPem0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.40.0/21
185.110.144.0/22
IPv6:
2a0b:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:cb:6e:b5:d7:cf:f5:1e:a5:2c:b9:1f:78:f5:aa:d5:7b:a6:
a4:3d:09:61:c1:3f:2d:a5:0d:9a:86:50:d9:74:75:86:94:47:
28:00:9a:6d:c6:20:65:56:e1:b0:e7:8b:de:6e:fa:64:3d:56:
05:c9:56:58:9f:c8:4f:ed:91:7c:ef:52:ce:1e:91:c4:77:46:
74:bc:dd:6d:6f:a1:f9:b5:c4:bc:2c:63:f5:52:c2:ee:ba:cd:
ef:38:89:5a:d7:71:9b:f0:bd:75:9e:8b:9c:81:c5:28:79:bf:
ab:8f:19:fe:0a:8e:d6:16:7d:ed:9e:29:c8:99:51:68:f0:9c:
b3:33:a6:3d:65:56:ad:62:5e:7c:13:41:6f:3e:1f:be:28:7f:
fb:38:c8:bf:49:47:24:01:5e:e8:df:73:b4:37:b2:b7:c7:62:
2a:71:5a:11:21:d7:44:dc:34:40:4d:bc:88:cc:43:c2:f8:c1:
2b:0b:5d:62:23:cd:0d:19:09:e2:41:a3:af:ed:51:c4:77:43:
82:7b:72:af:d1:f0:4f:cd:4c:83:f8:5f:bb:f4:56:91:02:44:
61:d1:87:24:bb:e3:d4:7e:11:7e:92:bc:5a:dc:7a:12:24:67:
8d:fa:35:b8:2b:92:37:e1:ac:a4:45:5a:fd:44:b8:6b:d0:6e:
c4:19:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net