
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa
File: JlMOdKXLr_F2NQv9St5ik-0Itbw.roa (raw, json)
Hash identifier: UnwY7QmoBmxEitbVJXOq6lBV0wusF7fha507mnWwd/E=
Subject key identifier: 26:53:0E:74:A5:CB:AF:F1:76:35:0B:FD:4A:DE:62:93:ED:08:B5:BC
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018B28207679C00CE15C85414831E76C3246
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa
Signing time: Fri 13 Oct 2023 08:21:38 +0000
ROA not before: Fri 13 Oct 2023 08:21:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3302
IP address blocks: 185.82.0.0/22 maxlen: 22
81.92.32.0/20 maxlen: 20
213.136.128.0/18 maxlen: 24
217.29.160.0/20 maxlen: 20
193.219.30.0/24 maxlen: 24
194.20.0.0/16 maxlen: 24
217.15.208.0/20 maxlen: 24
213.149.192.0/19 maxlen: 19
212.90.0.0/19 maxlen: 24
213.183.128.0/19 maxlen: 19
194.21.0.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
83.211.0.0/16 maxlen: 24
212.110.0.0/19 maxlen: 24
62.94.0.0/16 maxlen: 24
195.62.224.0/19 maxlen: 24
194.153.208.0/22 maxlen: 24
213.198.128.0/18 maxlen: 24
2001:750::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:20:76:79:c0:0c:e1:5c:85:41:48:31:e7:6c:32:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Oct 13 08:21:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26530e74a5cbaff176350bfd4ade6293ed08b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:5b:68:5e:ca:e7:2f:ff:e7:a6:bc:da:5f:
ce:0f:82:29:ee:53:38:77:a8:09:f1:3e:22:dc:c9:
7c:4a:62:e8:97:b2:2d:3e:00:24:94:6f:aa:04:e8:
98:93:94:e7:95:af:47:d4:3b:97:44:20:fd:94:39:
78:11:ab:82:a9:16:ce:ab:df:7b:7d:98:f6:cc:5d:
43:17:f5:db:f3:a9:26:a9:a9:51:0b:ee:16:03:f7:
db:99:f4:55:ca:98:03:9d:1a:72:2e:45:11:4c:5f:
38:1b:75:51:57:4b:56:fb:28:21:9c:43:3c:ee:fe:
d1:37:83:59:93:c4:5e:f2:0d:86:eb:74:eb:a7:43:
75:1e:42:72:12:c0:cc:0b:fa:d9:26:37:e4:43:7d:
02:5c:69:b0:8d:cd:b1:e6:ae:20:b6:e5:3d:e4:70:
0b:c9:69:aa:82:5a:f5:d9:a3:a0:3a:b3:93:0b:d7:
8d:17:b3:1a:11:1f:38:9d:27:88:73:be:73:f8:b7:
3e:2a:fc:56:e5:55:f7:1a:0c:ea:4d:a6:b2:7b:0f:
79:1b:ce:ef:5d:54:53:53:3d:5c:53:26:f4:2c:30:
b3:e8:f9:ad:24:23:46:65:d9:65:95:f0:6c:31:a0:
83:ad:bc:7f:04:41:64:ec:61:73:fb:2c:6b:83:ef:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:0E:74:A5:CB:AF:F1:76:35:0B:FD:4A:DE:62:93:ED:08:B5:BC
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
185.82.0.0/22
193.219.30.0/24
194.20.0.0-194.21.63.255
194.153.192.0-194.153.211.255
195.62.224.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.149.192.0/19
213.183.128.0/19
213.198.128.0/18
217.15.208.0/20
217.29.160.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
a0:f1:ac:1a:79:cf:f6:bf:74:f0:66:95:5a:31:e0:47:7f:52:
b9:60:96:4b:53:31:68:8e:3f:e3:e7:f6:45:2a:9c:1e:2d:32:
20:b1:17:67:c1:5e:a0:81:5c:e1:c8:fd:87:90:66:ca:31:5d:
97:f8:af:ba:35:d4:25:1e:60:3f:be:f7:e3:b4:b9:26:3f:ad:
17:eb:89:b7:76:ca:d6:7b:5e:1f:c7:13:f5:57:3f:46:f6:4a:
01:1b:81:77:a0:28:d6:1a:db:fa:71:b3:5f:01:88:71:b2:06:
75:d5:a3:6a:15:ff:85:03:ab:5f:a9:bc:60:9c:e7:42:83:e3:
57:d3:49:a9:19:ec:cd:29:0f:a1:d6:3f:f1:7b:10:14:e6:4f:
fe:2e:f8:23:87:f5:b6:38:d4:65:88:d1:7c:a8:78:61:4a:a3:
d7:af:9d:bd:be:cd:f1:c0:91:dc:1d:ab:03:ea:5f:dd:ca:3a:
52:ce:30:b8:88:ec:79:b3:83:01:6a:e6:09:cc:6d:87:4d:40:
b8:e1:49:26:32:60:45:32:20:45:79:96:85:f7:13:70:5c:7a:
ad:94:21:04:6b:b2:5d:d4:86:02:ac:40:c9:e2:f2:88:dd:fa:
62:28:3f:44:3b:ca:7d:f0:43:75:11:69:66:b9:df:e4:8f:ed:
c2:83:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net