Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/10wPvuGJ5jlxmGJ_4ixXZVGblr8.roa
File: 10wPvuGJ5jlxmGJ_4ixXZVGblr8.roa (raw, json)
Hash identifier: +dhzYWy5V7X7PnGkyEP2rUgU2LuijGo0iMj1udLhKDE=
Subject key identifier: D7:4C:0F:BE:E1:89:E6:39:71:98:62:7F:E2:2C:57:65:51:9B:96:BF
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 018616ED362554D3F83F78082FAAB678FA89
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/10wPvuGJ5jlxmGJ_4ixXZVGblr8.roa
Signing time: Fri 03 Feb 2023 10:58:09 +0000
ROA not before: Fri 03 Feb 2023 10:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 178.157.88.0/23 maxlen: 24
5.154.178.0/24 maxlen: 24
5.154.177.0/24 maxlen: 24
2a0e:1d00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:ed:36:25:54:d3:f8:3f:78:08:2f:aa:b6:78:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Feb 3 10:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74c0fbee189e6397198627fe22c5765519b96bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:1e:58:f4:8c:b8:82:a6:c4:74:52:9d:f7:
f7:23:c3:89:05:44:fa:44:fa:ff:51:dd:78:8f:50:
ac:5a:be:9b:d9:4e:c1:f3:1f:bb:a7:09:8f:01:2c:
de:f5:24:47:67:ac:34:fb:be:62:8a:b0:18:4c:bd:
40:71:ba:3e:7f:9e:9b:cc:5a:08:20:30:78:4d:06:
0c:42:9b:df:c2:c3:fe:06:9c:5f:41:63:71:13:33:
a3:16:74:75:59:03:e8:0d:c0:15:0d:b1:66:fb:11:
07:f6:bd:ac:f5:da:92:c7:05:11:8f:1d:1b:4a:e4:
0a:5c:75:63:eb:43:5b:aa:9d:53:3d:0b:a1:c7:4f:
e2:02:08:52:b2:fc:3f:d4:84:51:ae:53:f8:0b:9c:
6f:f4:0c:e1:7d:9b:ed:7a:c3:c3:fd:95:76:23:6c:
fa:73:89:e0:37:0a:c5:c3:fe:ee:10:d6:6a:4a:82:
8f:d8:5b:d0:f8:5d:ff:b0:00:22:78:06:db:e1:b3:
8f:08:b1:cd:24:ff:04:d8:06:23:ea:ba:91:17:e5:
f9:ba:9a:76:a6:c2:53:15:9d:ce:8a:81:f3:1a:09:
cb:8a:f3:3f:c1:a4:b1:41:02:0b:0f:c7:6b:ff:80:
9c:8f:02:25:f2:00:ed:9b:d0:aa:3a:9c:0f:f9:88:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:0F:BE:E1:89:E6:39:71:98:62:7F:E2:2C:57:65:51:9B:96:BF
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/10wPvuGJ5jlxmGJ_4ixXZVGblr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.177.0-5.154.178.255
178.157.88.0/23
IPv6:
2a0e:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
7c:fb:d0:97:fc:dc:b1:e5:20:e6:b1:a0:92:f6:e1:80:01:30:
90:91:b1:43:48:55:45:cc:29:0f:6a:ae:0b:71:9a:ad:02:8f:
c6:a7:61:27:76:8a:29:36:f2:d1:91:b6:d9:c1:47:b7:99:be:
71:84:de:7c:d3:bd:0a:68:f3:de:df:50:af:5b:d2:98:7a:2c:
24:de:c6:7e:70:8e:ce:f3:68:da:b0:cd:89:23:0c:9f:d7:e5:
0b:f8:72:14:ea:86:d2:f8:00:ba:91:17:0f:1d:86:0f:08:98:
cd:e5:c6:14:67:f1:14:da:6c:d3:d4:f5:54:b5:46:58:6f:59:
3c:6f:42:3d:3c:92:09:b3:e4:e9:be:6c:27:12:fb:d7:73:1c:
9d:1c:db:fd:06:1c:9d:27:60:e6:76:43:03:e6:21:70:ac:98:
77:1b:6c:7c:e0:55:c6:32:d1:93:aa:f9:52:20:09:e4:67:7b:
ae:67:31:8a:67:3b:0d:0d:66:60:2e:6e:00:dd:48:28:82:49:
73:4a:89:1d:ab:95:6c:9b:8e:70:64:7b:c5:3b:f5:5b:e9:8e:
56:8b:42:5b:09:8a:86:dc:22:22:da:01:2b:1e:07:b6:c0:be:
b7:f9:85:76:4a:57:d7:c6:e8:ce:43:d2:6e:9c:27:3d:42:2d:
88:92:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net