Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ab2FRNBxpiQEz39AthbWUTOwQFM.roa
File: ab2FRNBxpiQEz39AthbWUTOwQFM.roa (raw, json)
Hash identifier: m49+gA7fdI1/Rd2rtd4443GmyWH+XWUhmQvJR5HAMdc=
Subject key identifier: 69:BD:85:44:D0:71:A6:24:04:CF:7F:40:B6:16:D6:51:33:B0:40:53
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018A73E6B6F449C26CB90B4BAD0951662034
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ab2FRNBxpiQEz39AthbWUTOwQFM.roa
Signing time: Fri 08 Sep 2023 08:26:54 +0000
ROA not before: Fri 08 Sep 2023 08:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204108
IP address blocks: 185.229.232.0/22 maxlen: 24
185.229.232.0/23 maxlen: 24
185.229.234.0/23 maxlen: 24
31.133.32.0/22 maxlen: 22
185.253.42.0/23 maxlen: 24
185.253.40.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:e6:b6:f4:49:c2:6c:b9:0b:4b:ad:09:51:66:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 8 08:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bd8544d071a62404cf7f40b616d65133b04053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:65:d6:2f:65:07:44:ac:07:a8:45:fc:0c:
85:83:f3:7d:dd:4b:10:8a:18:23:b7:06:db:02:e6:
53:f0:e7:2b:3f:ee:4a:3c:3a:d4:fc:b3:77:b6:ca:
cd:c7:90:a5:59:68:42:59:8a:01:92:90:89:58:ce:
c5:3f:1a:a7:92:2c:29:2e:ca:2a:44:8e:3f:b4:76:
3f:6f:52:78:50:e2:ea:1c:c8:56:18:ee:bb:a9:04:
3c:4a:14:7a:b7:66:f7:4d:69:6c:ff:e7:f1:86:18:
12:bd:1e:d2:bc:48:6f:9a:0c:10:d2:f9:bf:01:f3:
66:0f:00:0f:43:c9:ec:64:60:21:49:0b:0d:59:56:
07:42:d8:c3:f3:4d:ce:40:c6:90:ab:96:7d:67:13:
66:43:19:b3:54:5d:8f:37:7e:c1:0c:da:ab:ab:58:
6c:be:ed:cb:5e:98:f4:4c:de:46:4a:2e:bb:00:d1:
47:12:f9:43:6e:00:3e:46:cc:86:13:75:53:02:2c:
58:91:f6:aa:e9:e8:10:95:fa:de:4b:06:17:0b:61:
5a:f4:1a:d6:ba:95:2e:0d:db:88:54:8b:70:8b:d7:
13:ae:0b:91:f9:ad:91:7e:8c:b2:fa:99:ae:07:ab:
ed:1d:0b:ce:66:bd:5c:67:6d:e6:61:cf:23:d4:fb:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:85:44:D0:71:A6:24:04:CF:7F:40:B6:16:D6:51:33:B0:40:53
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ab2FRNBxpiQEz39AthbWUTOwQFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.32.0/22
185.229.232.0/22
185.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
81:40:73:b7:55:14:cd:62:e7:ef:5b:0e:b5:2f:70:31:51:9d:
0e:1b:2f:c1:34:46:bb:1a:6d:5d:6a:65:a1:7b:7a:2c:49:c8:
0c:e7:94:d1:45:20:52:f1:f9:9d:42:8f:05:99:b3:16:c2:3a:
3e:97:be:24:1c:46:73:f7:a4:89:e9:0a:8a:b1:c7:88:35:a3:
a7:f1:5b:6c:68:d1:8b:09:47:bf:a8:92:91:28:b9:ab:91:b6:
f0:84:02:95:d0:3e:6b:90:09:fe:e9:e0:92:2f:ac:65:1e:83:
36:69:13:60:e3:93:84:80:07:a9:b3:3d:ab:d0:ac:d3:40:0b:
4e:72:a1:47:c6:43:19:32:04:82:c0:4e:59:64:ed:a2:88:f9:
5b:10:05:6b:11:68:54:3e:fa:51:dd:6c:a6:36:cd:73:4d:27:
11:4c:e7:24:24:a9:6a:fc:d6:72:c3:e9:52:1e:1d:0f:b2:0a:
41:e9:53:98:c0:4b:b7:ee:cd:29:d8:fd:da:b7:ff:47:ee:54:
6f:57:2d:9f:0d:b9:15:71:97:74:a1:a9:b6:f2:30:f6:36:2b:
e4:5b:9f:6b:46:f9:d3:6e:0a:fb:3e:08:b0:b9:a4:73:6f:17:
bf:57:59:a3:9f:d8:db:c4:0f:bd:20:f3:47:9a:16:62:35:18:
50:5b:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net