Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TEcbEaNgKMuRAAEYi7KtwTs5C1M.roa
File: TEcbEaNgKMuRAAEYi7KtwTs5C1M.roa (raw, json)
Hash identifier: tPszHLcnQEVXoRKpH1OTg/1dIL69LeMepvAPFDudX14=
Subject key identifier: 4C:47:1B:11:A3:60:28:CB:91:00:01:18:8B:B2:AD:C1:3B:39:0B:53
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A2E44DD3E1E3BBDC87B6153FA5C2192E6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TEcbEaNgKMuRAAEYi7KtwTs5C1M.roa
Signing time: Fri 25 Aug 2023 19:56:19 +0000
ROA not before: Fri 25 Aug 2023 19:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 2.57.240.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:44:dd:3e:1e:3b:bd:c8:7b:61:53:fa:5c:21:92:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 25 19:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c471b11a36028cb910001188bb2adc13b390b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:d4:cf:21:c4:f0:ba:9f:92:db:63:a4:48:
d3:89:62:c2:6f:8d:6e:e6:12:eb:5a:67:3a:4e:a0:
43:f2:ca:91:be:cc:2a:18:49:b2:fd:d4:7f:51:98:
69:77:9c:d4:82:85:c8:f5:89:93:a0:3c:06:42:61:
a6:1e:3a:3e:d9:e3:69:d5:81:26:9b:4e:a8:76:61:
0e:d3:bd:ab:9a:97:6b:72:2c:ae:d0:dc:10:f8:ba:
61:12:2b:a1:e4:b6:3d:03:f4:3e:f5:d8:13:5b:d7:
d6:f3:5b:c3:78:84:c5:33:4f:89:6c:5d:d8:e5:df:
97:d6:36:d8:fa:26:a0:9f:39:c3:33:91:4e:76:2d:
59:07:a8:ca:5d:18:d2:c6:87:de:4e:f0:0d:72:a3:
e4:4d:79:66:52:fa:6f:04:00:5f:39:76:b5:8c:e3:
8f:d5:c9:a2:f9:48:0d:d7:33:03:83:f6:25:f8:3e:
da:47:fb:09:c3:da:bf:76:41:fb:2a:56:25:fa:89:
5b:5a:b7:49:62:1e:94:26:7b:09:db:59:99:92:fe:
e1:6e:c4:43:2b:d8:2f:7b:e3:75:71:c1:10:48:68:
66:dd:f0:41:fd:77:6d:98:61:5d:da:ac:97:27:71:
b7:d5:00:a7:0b:0e:34:64:06:df:1d:77:a1:0a:e8:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:47:1B:11:A3:60:28:CB:91:00:01:18:8B:B2:AD:C1:3B:39:0B:53
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TEcbEaNgKMuRAAEYi7KtwTs5C1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/24
77.81.182.0/24
86.107.168.0/24
89.43.62.0/24
Signature Algorithm: sha256WithRSAEncryption
07:36:c1:4b:d7:6e:9a:d8:30:09:a5:01:d9:a7:97:03:e5:fe:
31:52:f6:cc:d6:19:b1:d9:b3:0d:cc:e4:33:71:02:1f:f2:35:
34:0e:d4:d5:37:68:0e:9e:85:a6:0e:eb:c2:5d:87:8a:cc:76:
0e:9b:a7:5f:26:0e:19:e7:db:16:07:87:b8:2c:0d:71:7c:c2:
31:57:39:f2:dd:77:e9:b3:ae:8b:ac:13:29:20:88:35:76:10:
16:9a:aa:99:53:01:03:cc:cd:b7:82:3e:0e:c3:be:58:d7:01:
0e:a9:6e:8e:cb:0d:b3:71:54:31:93:ac:bc:9d:46:95:62:d7:
a5:5c:bd:c8:d7:10:e4:f6:98:02:a6:e9:6a:17:30:17:68:46:
1f:71:9b:dc:13:cf:9d:34:cf:6e:f3:eb:05:53:be:0d:c1:c1:
42:d6:cb:c5:a5:3f:12:92:de:a6:21:46:24:d4:55:b5:bb:3f:
12:e4:d8:8a:ee:31:95:f2:ad:2c:5a:2d:fb:85:32:97:91:94:
47:17:fd:a1:d8:f9:83:3c:f5:80:e7:8f:90:50:47:e4:44:3f:
f0:6e:a5:27:44:4f:ff:09:e1:4e:0b:ec:74:a5:6a:57:73:4e:
8f:56:35:93:e0:25:f0:8d:a4:a7:39:75:72:5a:46:43:e0:99:
3e:7e:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net