Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/6M_-S8M1MwDSfsdTYwUQeVQcdOE.roa
File: 6M_-S8M1MwDSfsdTYwUQeVQcdOE.roa (raw, json)
Hash identifier: kWoqFoA18WPP37Owaoa2vQYAz1FMr91dcrtEehIECGk=
Subject key identifier: E8:CF:FE:4B:C3:35:33:00:D2:7E:C7:53:63:05:10:79:54:1C:74:E1
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 018CC8017D13D3AA6DA7DC680F0F1A940FAD
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/6M_-S8M1MwDSfsdTYwUQeVQcdOE.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8822
IP address blocks: 195.182.224.0/24 maxlen: 24
195.182.225.0/24 maxlen: 24
195.182.224.0/19 maxlen: 19
195.182.226.0/24 maxlen: 24
2a0f:4c00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Jul 2024 07:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7d:13:d3:aa:6d:a7:dc:68:0f:0f:1a:94:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8cffe4bc3353300d27ec75363051079541c74e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:7b:cf:6a:56:8e:c9:47:89:63:ec:b4:10:
53:e7:cf:e0:f3:6d:96:f7:12:fd:11:ca:fd:1e:ed:
14:90:58:e2:b1:8f:ce:9e:d1:61:ba:e4:bc:a0:78:
24:7a:68:98:f2:db:7e:8e:06:31:38:ac:b6:15:0e:
71:82:39:16:f6:a6:06:61:76:fa:7b:5e:6a:af:36:
39:56:0c:1e:a4:d2:c2:89:21:85:d1:71:a4:e5:e4:
a7:c9:7a:91:1b:08:59:fd:2b:dd:2a:8b:be:1a:ae:
14:92:b3:15:01:84:c7:48:5e:6b:a5:15:ca:22:8d:
c5:ce:d4:bb:d4:a1:c4:67:eb:52:9d:8d:d3:2b:33:
7b:ab:1c:a3:09:19:e0:24:8a:ed:22:50:c0:60:6d:
72:34:19:a0:e2:b7:6c:42:e6:23:05:c9:da:c4:6f:
de:db:3c:1a:64:ad:18:7f:ee:12:a3:8f:60:1a:d3:
a3:88:6b:2c:be:f6:58:20:cb:38:7e:91:8a:e5:69:
62:d6:38:5e:45:18:e7:62:3a:d7:6e:35:ea:52:d5:
90:f9:f4:51:42:a0:9e:a6:cf:13:14:5d:9b:85:e0:
2a:24:56:a9:bd:4b:5a:be:2e:41:e3:7e:46:c3:13:
16:6e:cb:0a:c7:20:dd:39:5a:16:2a:8b:b2:c9:46:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:FE:4B:C3:35:33:00:D2:7E:C7:53:63:05:10:79:54:1C:74:E1
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/6M_-S8M1MwDSfsdTYwUQeVQcdOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.224.0/19
IPv6:
2a0f:4c00::/29
Signature Algorithm: sha256WithRSAEncryption
19:c4:2e:ab:17:e0:ac:6d:16:7c:ec:29:26:c7:9c:aa:2e:a9:
8e:09:ce:e9:ce:3b:86:bd:bd:2c:7e:80:71:52:ce:63:fa:31:
dd:20:1d:2c:fe:f3:7b:41:53:3b:79:73:b3:07:ac:ea:58:bc:
87:55:a3:38:2a:07:e1:14:a8:08:41:e1:f6:5d:44:81:7b:22:
d3:32:9d:3f:20:10:eb:fb:cc:9b:8b:17:96:28:37:de:c7:db:
6b:3b:23:8b:67:98:99:20:8d:11:35:8c:0d:17:e0:d1:e4:3a:
d3:09:bc:2b:d0:47:24:47:ec:1b:a8:2b:26:b5:48:61:b5:59:
e6:a7:76:84:11:97:f1:3a:e9:4a:dc:b2:52:ef:10:23:73:1a:
91:1b:77:89:4b:ad:05:19:b4:79:d6:ed:67:1d:ec:8a:c6:2c:
2d:f4:59:7c:87:fa:77:e9:17:33:d5:4d:a4:18:91:45:fa:9e:
ca:4f:60:fc:94:22:39:95:74:9c:0d:d4:19:6e:8b:61:4a:d3:
52:85:be:37:d0:46:69:0e:a5:45:21:a9:6c:2c:bf:cc:b2:65:
d6:28:c6:80:83:7e:20:cd:86:9c:de:e4:3f:bf:15:bc:f0:2d:
0f:33:19:ca:0e:bc:4d:c1:ec:6b:89:b3:19:91:87:3f:4c:10:
83:9a:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:47:01 2024 by rpki-client on console.sobornost.net