Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/txXefvEFBF_-FmB_Wyf2dQThYHA.roa
File: txXefvEFBF_-FmB_Wyf2dQThYHA.roa (raw, json)
Hash identifier: M6RfOhSVnVOZHqyQNsR/jyLJRQbxnRn1xAGn1gFcYwE=
Subject key identifier: B7:15:DE:7E:F1:05:04:5F:FE:16:60:7F:5B:27:F6:75:04:E1:60:70
Certificate issuer: /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial: 018C6D30D611FA97321417FF931971A08C10
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/txXefvEFBF_-FmB_Wyf2dQThYHA.roa
Signing time: Fri 15 Dec 2023 11:16:06 +0000
ROA not before: Fri 15 Dec 2023 11:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 185.218.2.0/24 maxlen: 24
2a11:2800:215b::/48 maxlen: 48
2a11:2800:792e::/48 maxlen: 48
2a11:2800:3dc6::/48 maxlen: 48
2a11:2800:131c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:30:d6:11:fa:97:32:14:17:ff:93:19:71:a0:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Validity
Not Before: Dec 15 11:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b715de7ef105045ffe16607f5b27f67504e16070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:6a:af:a8:bd:3b:96:d5:30:de:6d:34:4b:
b6:89:86:cf:76:33:f5:32:a2:7e:ff:58:2f:11:93:
06:14:9c:5c:e4:79:36:0e:91:c0:35:d2:4f:de:c5:
57:a0:10:cb:76:02:d8:31:11:26:6b:61:79:01:1b:
65:cb:3f:2a:a6:42:5a:69:c2:60:c1:46:0b:d7:8b:
dc:34:88:51:b1:5f:29:79:49:18:96:eb:45:f5:b8:
61:ff:fc:07:e5:07:76:8b:78:b3:d3:04:57:8e:86:
ae:52:22:54:64:d7:02:0a:92:f5:5a:fa:49:f5:1b:
4f:24:ee:32:41:2e:28:48:30:b3:bb:86:dc:0a:45:
2a:12:6a:96:df:75:75:ad:d3:25:9d:be:15:20:b9:
0c:a4:4e:b8:35:6f:0c:98:9a:00:6f:4c:f0:ae:db:
1b:e6:aa:03:46:b7:2b:fd:4a:ad:33:a5:6c:47:7c:
b5:80:88:5f:8f:e8:1f:c0:eb:88:65:8f:39:ff:b3:
22:f6:13:78:9a:b9:51:e1:c9:92:25:80:49:7c:22:
c4:cc:e9:b1:59:b3:ef:8e:17:16:0e:4c:a8:07:13:
85:b0:91:35:a9:18:0b:31:13:fb:4c:2f:df:bd:0a:
98:03:f6:0b:3e:d4:f1:81:26:cd:24:71:84:3c:a2:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:DE:7E:F1:05:04:5F:FE:16:60:7F:5B:27:F6:75:04:E1:60:70
X509v3 Authority Key Identifier:
keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/txXefvEFBF_-FmB_Wyf2dQThYHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.2.0/24
IPv6:
2a11:2800:131c::/48
2a11:2800:215b::/48
2a11:2800:3dc6::/48
2a11:2800:792e::/48
Signature Algorithm: sha256WithRSAEncryption
3b:80:00:01:bd:2d:5c:ce:a8:07:57:10:3e:25:3a:64:74:99:
82:a8:36:62:58:07:89:9b:92:29:b5:b7:c2:6c:ec:22:0f:1f:
c9:01:00:6b:5f:cf:2d:45:5b:6c:bb:45:5e:8d:9f:59:d8:c5:
74:10:65:f0:99:6b:77:60:38:da:13:c3:7c:c1:22:f5:7a:20:
a3:06:22:22:97:e7:f9:d4:ea:60:b0:1f:56:4a:20:61:98:ee:
3f:39:e8:6d:dd:d5:f6:b0:68:df:e2:08:6e:83:c2:b1:25:eb:
9e:39:aa:64:98:d9:3a:67:0f:54:d1:30:96:71:b7:7d:f3:d3:
9f:1d:b2:78:46:1d:b8:a5:f2:21:5c:a2:23:6c:28:09:e2:12:
80:a1:bb:88:16:7f:d7:ba:78:c5:44:4b:98:ec:28:62:9f:a5:
53:78:f0:ee:d7:a0:d6:48:c1:2a:f8:22:c3:4f:4c:df:7e:b9:
d3:ba:5f:ad:ae:35:df:02:75:27:6a:4c:56:f7:c7:04:ea:b5:
fd:2f:db:d6:15:2e:8b:82:7f:8c:97:ec:91:8a:e7:1d:4c:c6:
d7:5d:1c:dc:e0:d6:a4:45:7a:15:37:cd:57:fa:fa:72:81:8b:
d9:4c:d2:17:36:ce:d7:03:10:8a:36:4b:02:3f:c5:94:e3:bf:
e9:1b:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net