Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/1-BNIHkLSNJJCxjoFpey2mIGt7Dg.roa
File: 1-BNIHkLSNJJCxjoFpey2mIGt7Dg.roa (raw, json)
Hash identifier: W8mejOLkQ/1jhZW6YzLiktpRRlI/YFGZR+fbcdFo0Lk=
Subject key identifier: F8:13:48:1E:42:D2:34:92:42:C6:3A:05:A5:EC:B6:98:81:AD:EC:38
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0189BAD141FDE90030F93A942727D58338C6
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/1-BNIHkLSNJJCxjoFpey2mIGt7Dg.roa
Signing time: Thu 03 Aug 2023 09:53:43 +0000
ROA not before: Thu 03 Aug 2023 09:53:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198203
IP address blocks: 81.4.108.0/22 maxlen: 24
81.4.124.0/22 maxlen: 24
81.4.120.0/22 maxlen: 24
185.34.219.0/24 maxlen: 24
185.34.218.0/24 maxlen: 24
185.34.216.0/24 maxlen: 24
91.229.232.0/24 maxlen: 24
81.4.104.0/22 maxlen: 24
81.4.100.0/22 maxlen: 24
185.56.60.0/22 maxlen: 24
185.56.61.0/24 maxlen: 24
176.56.224.0/20 maxlen: 24
176.56.237.0/24 maxlen: 24
176.56.238.0/24 maxlen: 24
176.56.236.0/24 maxlen: 24
2a00:d880::/32 maxlen: 48
2a00:d880:4::/48 maxlen: 48
2a02:50e0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:d1:41:fd:e9:00:30:f9:3a:94:27:27:d5:83:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Aug 3 09:53:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f813481e42d2349242c63a05a5ecb69881adec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:6e:f8:dc:37:b1:26:bc:12:93:ea:a7:ae:
af:e4:b0:77:f3:36:b5:e6:ac:f7:4e:1a:a3:c4:81:
e1:d1:f9:3b:79:5e:36:3f:1b:7b:9a:72:32:5b:aa:
99:42:20:24:e1:48:be:8c:f5:5a:25:21:19:8f:a1:
c8:e6:6e:bb:d7:37:97:50:b5:ea:96:e3:01:74:b8:
69:27:2f:7c:e5:da:21:38:4e:3e:68:dc:88:78:3f:
88:cf:73:51:43:bd:d0:f6:ff:c8:5c:47:9d:a9:c0:
7d:4d:0c:e3:4f:ca:31:97:29:3b:df:3a:00:93:55:
c0:06:94:24:d4:c3:fe:88:2d:e2:3c:ff:74:fd:5a:
ec:3f:5d:df:55:45:69:94:93:5c:9c:3d:e5:93:de:
b2:12:3c:b1:d3:2a:5f:df:99:d9:69:9f:75:63:9c:
13:46:95:27:d4:1a:41:57:b2:cf:06:1b:a1:15:da:
e7:b7:5a:f0:29:5d:aa:48:3d:bf:84:f3:bf:c1:f9:
ea:c7:9c:b4:cb:7e:a4:4b:90:f1:cd:4d:60:9a:9c:
e9:36:98:50:a1:38:f3:14:ec:e9:dd:b5:48:66:b9:
69:13:fc:97:6f:94:83:c2:01:79:1f:54:b7:9f:0b:
6c:3a:c9:15:f8:6e:e1:ec:0d:c5:a0:eb:7a:90:3d:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:48:1E:42:D2:34:92:42:C6:3A:05:A5:EC:B6:98:81:AD:EC:38
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/1-BNIHkLSNJJCxjoFpey2mIGt7Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.100.0-81.4.111.255
81.4.120.0/21
91.229.232.0/24
176.56.224.0/20
185.34.216.0/24
185.34.218.0/23
185.56.60.0/22
IPv6:
2a00:d880::/32
2a02:50e0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:89:ce:e2:0e:7e:bc:66:5e:65:a2:74:bd:28:d5:99:a5:b0:
b7:37:29:69:ea:d7:fe:04:50:8a:62:29:49:f9:95:cc:4f:eb:
c8:a7:b0:32:fd:7e:ca:47:03:8d:e9:6d:be:cd:2a:a6:41:31:
de:ac:8b:31:0a:be:c4:d0:12:08:3d:98:44:20:33:14:a6:62:
1d:74:1d:5b:51:86:d5:ef:4d:eb:65:d6:d7:c9:b9:e4:53:1f:
ad:54:e6:48:db:5c:72:0e:7e:79:21:41:12:2e:dc:49:64:58:
e2:5b:07:6d:3d:c4:83:ff:44:37:66:63:f1:d1:3f:af:20:c6:
94:57:f3:fd:06:76:1a:09:42:45:31:c5:e2:80:b9:9f:69:90:
92:16:b0:be:87:8c:34:4a:00:01:c4:5b:cc:2d:9f:de:62:fb:
4b:f0:bf:e9:ea:52:24:c1:34:6a:08:77:3e:b2:f7:cf:ba:41:
50:05:f5:0a:67:94:38:bd:4c:77:7f:50:7a:a2:db:b9:58:61:
ca:01:c5:d9:2a:86:8d:85:44:30:2e:93:77:93:21:16:74:4d:
c0:24:0c:e2:3b:2c:e6:2f:47:22:47:7d:36:a5:f6:17:a1:f8:
92:1b:3c:aa:03:14:17:09:9b:43:68:f4:ca:14:85:5e:f9:e6:
ea:5d:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net