Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/mYcymm6_-pYJZ99pZdEqCN1Vo9g.roa
File: mYcymm6_-pYJZ99pZdEqCN1Vo9g.roa (raw, json)
Hash identifier: z398i9MkXrbEjbq9gaKz3H5aUcbbqQ3NtRQ/XVEn2cw=
Subject key identifier: 99:87:32:9A:6E:BF:FA:96:09:67:DF:69:65:D1:2A:08:DD:55:A3:D8
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 0185BAB461192DDE2473A04D39A6876AAB92
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/mYcymm6_-pYJZ99pZdEqCN1Vo9g.roa
Signing time: Mon 16 Jan 2023 13:11:01 +0000
ROA not before: Mon 16 Jan 2023 13:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 81.92.217.0/24 maxlen: 24
94.46.244.0/22 maxlen: 22
81.92.219.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
81.92.218.0/23 maxlen: 23
94.46.184.0/22 maxlen: 22
91.109.112.0/21 maxlen: 21
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
81.92.192.0/22 maxlen: 22
94.46.220.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:b4:61:19:2d:de:24:73:a0:4d:39:a6:87:6a:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jan 16 13:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9987329a6ebffa960967df6965d12a08dd55a3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:69:38:dc:d6:16:bd:69:4c:89:ea:14:29:
9b:bf:54:de:55:d8:43:16:8d:1e:1d:32:64:49:75:
d0:eb:5c:b9:3d:37:08:8b:46:2c:f5:df:e3:bb:15:
97:da:3f:4a:1f:a9:ad:22:f3:a6:af:87:fa:9a:e2:
5a:e8:35:7a:f2:33:42:cc:06:42:91:1e:9a:9a:7b:
d1:95:1a:e9:5c:19:67:21:16:39:7f:a3:a4:46:b3:
55:51:54:b9:62:1d:0c:40:29:ee:82:7a:28:28:f6:
c2:e8:ff:2f:1c:b9:50:69:ff:3e:2e:e0:44:07:57:
f8:51:19:a4:0a:c5:ee:83:1f:92:15:55:f2:e4:50:
f0:17:16:ee:b2:bd:6c:a1:ce:a5:37:4b:7f:e3:7c:
1e:fa:c6:f8:e4:0d:41:e5:cf:42:41:7e:b9:bf:21:
78:c6:46:ad:49:6e:15:6a:ad:94:38:71:30:7f:6d:
fc:1e:e3:a0:14:51:63:5d:9e:ce:6c:03:f0:cf:f0:
ab:e8:cb:d8:1f:f9:72:34:bb:1b:74:b1:06:cc:81:
86:c0:2f:0b:96:e2:29:2d:99:50:d8:70:8e:d6:50:
5f:7a:97:02:cc:e8:e8:e8:d5:3e:68:48:ef:0e:8a:
d7:77:c6:d6:be:ca:e7:a0:80:6f:16:83:ce:50:dd:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:32:9A:6E:BF:FA:96:09:67:DF:69:65:D1:2A:08:DD:55:A3:D8
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/mYcymm6_-pYJZ99pZdEqCN1Vo9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.192.0/22
81.92.217.0-81.92.219.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
185.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:99:b3:3b:e8:59:6d:7d:df:b7:ca:af:83:8e:d8:3d:d4:cc:
3e:10:e6:b7:49:1a:fe:98:60:6e:5f:d6:ed:86:6a:53:51:28:
a4:e0:2a:af:14:78:74:c2:12:a4:9b:0e:41:9c:e4:ea:37:63:
0e:14:fc:6f:50:bd:4d:84:5c:b8:a0:b9:3e:03:3b:27:3c:38:
07:e4:8a:04:5b:1d:e5:9f:8d:d8:6e:ad:91:73:4e:9a:4e:8b:
f7:d4:a4:1b:51:1c:c1:bf:b5:0e:31:08:85:7a:89:fe:14:98:
08:61:60:5f:c5:9b:40:45:8d:da:77:dc:20:8f:d3:76:fd:25:
07:f4:ea:ee:20:84:8f:80:b6:34:af:84:e3:38:00:29:85:bb:
47:20:c7:80:ff:b5:e9:dc:3a:d7:87:23:4b:e0:79:fc:6d:6d:
29:eb:c1:07:d0:8a:c2:8e:be:b8:0b:f8:60:eb:a7:ca:24:bf:
0a:c2:1e:3d:6b:14:2e:5c:37:a9:54:93:75:31:c4:13:71:ad:
f1:13:de:66:62:9f:e7:60:17:76:6b:81:b9:4e:11:4d:f4:1c:
e4:35:b2:77:c3:c0:0c:bb:61:57:47:5f:a8:54:f4:a2:39:b0:
30:0d:13:bf:2d:ef:10:e6:2f:b9:24:a5:e4:79:8e:6e:3e:3b:
50:ac:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:20 2023 by rpki-client on console.sobornost.net