Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/M7buKvDGDyZtqX7qxbkRXOzFYCA.roa
File: M7buKvDGDyZtqX7qxbkRXOzFYCA.roa (raw, json)
Hash identifier: Wza3uHJDGozm9KUP9+Xc94JoGSMRXn+g+nBlh1Gp9Tk=
Subject key identifier: 33:B6:EE:2A:F0:C6:0F:26:6D:A9:7E:EA:C5:B9:11:5C:EC:C5:60:20
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 01898C447F33B979B1A79DBE6367B7F044FF
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/M7buKvDGDyZtqX7qxbkRXOzFYCA.roa
Signing time: Tue 25 Jul 2023 08:57:26 +0000
ROA not before: Tue 25 Jul 2023 08:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 194.34.199.0/24 maxlen: 24
194.35.73.0/24 maxlen: 24
194.35.75.0/24 maxlen: 24
2a00:7940::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:44:7f:33:b9:79:b1:a7:9d:be:63:67:b7:f0:44:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Jul 25 08:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b6ee2af0c60f266da97eeac5b9115cecc56020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:ce:7a:a8:d0:38:20:f5:2e:62:d4:84:e3:
ef:1b:4d:e3:24:d2:78:c7:72:bf:f8:20:9c:08:62:
b8:20:b9:a7:fb:89:d2:da:58:f5:6f:f6:eb:55:79:
6c:3c:50:0e:e9:59:69:47:f3:cd:ed:0c:89:c7:ee:
b6:5b:0c:83:97:79:93:6d:0a:10:09:ed:01:a2:90:
24:2f:c9:41:e1:db:32:3a:9c:57:28:11:fb:eb:47:
88:6f:4f:64:d5:98:22:3b:9f:f2:df:7e:ba:35:7a:
a5:53:26:36:4d:f8:63:16:b7:fb:e6:71:a3:c5:b4:
8c:c3:c8:d0:b1:06:f9:1b:6f:a3:4c:19:5b:80:be:
d5:8b:fe:92:82:cb:01:f8:c4:22:90:28:f0:98:1f:
40:5e:31:9c:7c:99:e1:ce:03:52:56:55:74:2a:2c:
da:94:1c:60:2c:94:73:d3:d5:ff:63:1e:9a:27:dc:
9b:bd:40:8c:72:41:10:17:a7:32:92:82:b3:09:87:
ee:40:16:2f:d7:04:99:c5:2a:1b:12:10:3b:71:a0:
71:3c:bb:b7:5c:1e:8f:93:34:03:12:71:97:67:f4:
dc:8f:0e:0a:0e:34:ec:95:48:6d:0f:b9:37:e7:87:
65:c9:77:70:7c:dd:68:eb:48:f4:ab:3a:b2:9a:2b:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:EE:2A:F0:C6:0F:26:6D:A9:7E:EA:C5:B9:11:5C:EC:C5:60:20
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/M7buKvDGDyZtqX7qxbkRXOzFYCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.199.0/24
194.35.73.0/24
194.35.75.0/24
IPv6:
2a00:7940::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d9:1d:4c:d0:dd:77:eb:a0:34:ef:80:3c:d2:e4:df:e1:ed:
5b:cb:77:6f:e8:89:92:5c:f8:5f:6c:75:9d:d8:8a:4a:fb:03:
b0:4a:71:4d:f0:9c:d3:83:c5:23:d0:e5:8b:e3:8b:ea:8f:20:
21:d5:d1:32:6f:38:8e:07:2e:4d:ae:53:d9:90:cb:bd:74:a0:
8f:30:1e:d3:d5:37:da:fa:37:25:4a:b9:cc:dc:93:87:ea:c8:
11:06:63:df:f7:68:47:1e:90:3b:e4:e8:18:68:a5:c6:ef:d0:
eb:fb:bd:54:0b:6c:24:d2:bc:dd:cd:54:dd:10:d3:df:4c:41:
50:bb:b2:88:bf:a7:5b:73:be:2b:81:d4:15:35:c7:c1:a4:51:
a1:db:92:0f:f8:9d:7d:94:b7:07:06:47:2a:eb:e8:d1:7a:71:
38:53:cf:72:70:58:74:25:d2:3c:6c:c7:d0:3d:2b:55:52:52:
33:cb:d6:9b:7b:71:38:da:35:75:a6:fa:23:12:36:6f:a7:32:
82:bb:71:04:6d:10:0e:4c:0d:52:25:90:0c:cc:a7:65:e1:99:
01:07:a7:b3:b4:cd:d9:8b:6f:09:88:61:3a:ca:82:e8:86:37:
ff:bf:bc:a0:e8:e6:3c:27:f4:38:53:bc:f1:07:9e:08:cb:36:
62:96:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:41 2023 by rpki-client on console.sobornost.net