Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xMVoBk1pW4DgZLewQ10ojFF_MOk.roa
File: xMVoBk1pW4DgZLewQ10ojFF_MOk.roa (raw, json)
Hash identifier: Sh/Rhb9QollzifLeXaj4ceMygyqO9h6CwGsLxDW6l/k=
Subject key identifier: C4:C5:68:06:4D:69:5B:80:E0:64:B7:B0:43:5D:28:8C:51:7F:30:E9
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0189204E5050FD221DD2A6F3074D0558D9F1
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xMVoBk1pW4DgZLewQ10ojFF_MOk.roa
Signing time: Tue 04 Jul 2023 09:49:10 +0000
ROA not before: Tue 04 Jul 2023 09:49:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8218
IP address blocks: 185.75.241.0/24 maxlen: 24
2a05:5504::/30 maxlen: 30
2a05:5504:6::/48 maxlen: 48
2a05:5504:11::/48 maxlen: 48
2a05:5504:1::/48 maxlen: 48
2a05:5504:7::/48 maxlen: 48
2a05:5504:2::/48 maxlen: 48
2a05:5504:8::/48 maxlen: 48
2a05:5504:3::/48 maxlen: 48
2a05:5504:9::/48 maxlen: 48
2a05:5504:4::/48 maxlen: 48
2a05:5504:5::/48 maxlen: 48
2a05:5504:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:4e:50:50:fd:22:1d:d2:a6:f3:07:4d:05:58:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jul 4 09:49:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c568064d695b80e064b7b0435d288c517f30e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:66:f0:bc:9f:2a:15:1e:d7:fa:f8:10:e7:
2d:48:14:49:f1:3e:b6:4f:ae:93:fb:c9:0f:d3:44:
4c:b1:a6:b9:a1:95:00:de:eb:64:b4:d5:9c:38:64:
7d:70:69:30:8f:7a:c0:65:7a:9d:63:5f:1c:13:85:
90:9e:af:f7:7c:40:c3:4d:f8:fe:8e:db:2f:06:8f:
af:8a:34:e2:5b:4a:00:8c:6f:8c:c9:ad:da:eb:0a:
53:db:f4:db:5d:15:33:34:c8:41:a1:46:d2:cd:6f:
3b:8b:cb:dc:9b:d9:3e:1b:69:1c:6e:f8:37:51:a7:
ed:82:47:8d:cc:3a:13:e2:50:70:63:31:d5:f4:a5:
22:60:98:79:16:6c:7b:e0:d1:c5:f0:a0:58:b3:fc:
97:93:70:f3:26:ee:7b:61:a9:dc:87:b5:63:62:5d:
38:2c:90:0f:ed:23:aa:52:52:79:dd:ac:6f:46:ab:
ca:75:1d:f4:d9:1f:fd:99:9c:bd:9e:95:0d:f4:ea:
eb:c6:62:d7:24:cb:27:14:eb:d4:f3:76:3a:40:28:
39:e7:35:e4:41:c3:88:2f:5f:fd:2e:2c:b0:29:ba:
1b:29:3f:51:9f:1a:0d:d0:ae:f1:43:b3:6e:21:91:
63:f5:aa:44:c2:75:c9:27:ee:0d:0a:5f:d4:21:f5:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:68:06:4D:69:5B:80:E0:64:B7:B0:43:5D:28:8C:51:7F:30:E9
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xMVoBk1pW4DgZLewQ10ojFF_MOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.241.0/24
IPv6:
2a05:5504::/30
Signature Algorithm: sha256WithRSAEncryption
17:29:cb:5b:cd:f9:1e:de:b0:cd:bb:5a:f2:0d:13:0f:1e:4d:
6d:4c:4c:47:b6:81:04:da:67:71:f3:6e:6b:1b:80:ae:2a:60:
3f:24:d3:d8:3c:eb:77:eb:dd:a6:47:22:a6:c3:b5:b4:6c:b3:
54:0c:43:f4:b4:ab:06:19:ec:08:bb:6d:bb:2b:0f:ee:46:b8:
9e:4b:ee:45:d9:b5:91:88:9f:76:57:24:6f:8a:39:f3:d4:99:
ee:d8:80:13:b6:f6:c2:f6:60:d8:fd:81:37:df:65:a8:be:5a:
4a:bb:90:76:f9:8a:98:89:e7:ce:cd:b6:95:29:8f:ed:7e:28:
b8:88:02:8d:be:4a:d3:9d:30:e3:b9:9e:85:39:95:a8:35:70:
3c:3b:94:6c:ad:4e:6e:4e:b5:d6:45:41:ab:44:e9:22:ea:30:
ed:6a:66:cd:4e:a3:85:d9:f7:d7:20:70:99:fb:c6:ca:2c:fe:
ee:f3:c9:2e:33:72:5f:bd:96:6e:5d:a6:b4:08:20:d8:18:c5:
dd:9c:f2:fe:42:8a:02:ec:a7:25:4f:bf:f1:a7:ba:d9:2a:0d:
91:8c:03:3e:b4:71:51:71:32:2b:4f:a2:e1:59:bc:2f:83:69:
26:c0:a5:09:f0:a9:6e:3e:1c:7b:79:dc:b2:d1:d8:11:44:4e:
6e:b7:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:44 2023 by rpki-client on console.sobornost.net