Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/8szxJFytnwDy_pvURch6nJM8Qm0.roa
File: 8szxJFytnwDy_pvURch6nJM8Qm0.roa (raw, json)
Hash identifier: UsY4uSosEdzYkwgvQ1uRF9Bp7gGi+AuHQF8y1TRltco=
Subject key identifier: F2:CC:F1:24:5C:AD:9F:00:F2:FE:9B:D4:45:C8:7A:9C:93:3C:42:6D
Certificate issuer: /CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Certificate serial: 018A88D27B3759F6704288D1215C656B1233
Authority key identifier: AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/8szxJFytnwDy_pvURch6nJM8Qm0.roa
Signing time: Tue 12 Sep 2023 09:56:50 +0000
ROA not before: Tue 12 Sep 2023 09:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29255
IP address blocks: 89.237.176.0/20 maxlen: 20
82.147.192.0/19 maxlen: 19
212.24.224.0/19 maxlen: 24
89.237.128.0/19 maxlen: 19
89.237.128.0/18 maxlen: 18
212.24.230.0/24 maxlen: 24
85.194.64.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:d2:7b:37:59:f6:70:42:88:d1:21:5c:65:6b:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Validity
Not Before: Sep 12 09:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2ccf1245cad9f00f2fe9bd445c87a9c933c426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:f4:5e:06:d1:ff:28:ad:a0:86:34:0f:79:
aa:a1:19:8b:86:a0:2e:04:4b:5f:cd:a3:02:8b:bb:
26:55:4e:8e:55:bc:c2:9b:35:4f:45:e3:47:99:67:
3e:c8:89:07:c1:ab:da:9d:2b:69:27:3a:e8:17:14:
79:6e:b3:b8:57:0a:51:28:9a:14:cd:5d:32:b3:09:
4e:c3:11:2a:82:5b:7f:22:4b:16:6b:dd:d3:9a:89:
13:d4:ed:cc:2e:31:ba:97:95:8d:18:2f:0a:b3:60:
17:9d:a0:ac:cf:64:a0:38:7d:0d:aa:fe:36:cb:ee:
14:59:ae:8c:82:2c:10:59:f6:f3:57:8b:4c:28:c3:
38:0d:a9:da:89:30:9e:aa:58:c8:e3:8c:56:da:f5:
d0:d4:92:c3:59:d1:26:aa:92:87:5e:be:92:0a:bf:
f2:2f:ab:19:c3:75:8a:fe:1f:43:a8:40:78:12:ee:
68:ea:ba:bc:d4:70:99:4f:a7:c3:af:e4:5e:aa:5d:
24:e7:d3:49:b4:df:83:3e:fb:f5:95:97:f8:59:91:
2f:10:3e:d1:74:c0:03:67:ae:46:0b:9b:c2:22:12:
67:46:ff:62:fa:71:ee:c0:9d:67:38:1c:c3:bf:ad:
c5:26:dc:ac:2c:ac:06:d2:fc:83:c3:87:af:68:0a:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:F1:24:5C:AD:9F:00:F2:FE:9B:D4:45:C8:7A:9C:93:3C:42:6D
X509v3 Authority Key Identifier:
keyid:AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/8szxJFytnwDy_pvURch6nJM8Qm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.192.0/19
85.194.64.0/18
89.237.128.0/18
212.24.224.0/19
Signature Algorithm: sha256WithRSAEncryption
51:bf:64:7b:4a:19:cb:2b:2b:c9:39:c2:05:7b:ae:8e:35:fe:
f6:6f:47:08:56:e8:c1:51:ff:35:13:a6:39:66:19:a9:5b:2b:
25:bc:2f:15:38:ea:8e:59:f5:36:4f:07:bc:a4:8d:ac:3c:0e:
ec:98:20:12:83:24:0e:a1:47:75:50:7c:83:7a:37:56:06:28:
ea:d2:3b:05:90:de:de:ac:b5:2e:71:fb:d3:fb:98:a6:72:d8:
6a:f9:96:5a:d2:df:ae:17:ef:d6:31:b2:45:6b:71:0b:d2:3a:
2b:a9:bb:47:8e:32:0f:98:01:a0:88:99:50:25:7b:ed:8c:f5:
26:d2:47:18:61:9d:2b:7e:cb:d0:10:fc:41:e2:9a:3c:b4:5c:
00:ba:84:6f:40:ad:43:94:9a:b1:57:9d:d6:03:18:e7:1c:2f:
6a:19:d8:07:a8:3b:03:06:3e:ad:ce:38:cf:8e:91:47:89:ad:
9e:1e:84:0d:f4:e1:4e:e4:da:46:d6:e3:60:df:4b:a2:7c:36:
0f:d1:83:ef:9b:bb:5e:6f:b8:08:5e:27:2d:13:a2:db:58:34:
6b:c6:60:ab:a1:6f:8f:fe:b4:9e:03:3e:81:f3:15:77:37:6f:
6b:85:8f:d3:cd:4a:a9:6f:b4:39:b6:e1:42:28:95:7e:d0:b1:
91:bb:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:01 2024 by rpki-client on console.sobornost.net