Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/JMHps1Rb5gka-EuYc-Aeqx-nBxg.roa
File: JMHps1Rb5gka-EuYc-Aeqx-nBxg.roa (raw, json)
Hash identifier: La5hJCYkSuyR9ReOqbZW0RwdDz8G0dkftfe7y/W3hno=
Subject key identifier: 24:C1:E9:B3:54:5B:E6:09:1A:F8:4B:98:73:E0:1E:AB:1F:A7:07:18
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 01856F4B7812C829FBF392B40446F9110C83
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/JMHps1Rb5gka-EuYc-Aeqx-nBxg.roa
Signing time: Sun 01 Jan 2023 21:44:54 +0000
ROA not before: Sun 01 Jan 2023 21:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202664
IP address blocks: 185.158.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:78:12:c8:29:fb:f3:92:b4:04:46:f9:11:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Jan 1 21:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c1e9b3545be6091af84b9873e01eab1fa70718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:28:e9:c1:6f:de:6f:a0:0c:c0:95:24:10:
88:d4:68:3c:23:ea:7d:18:53:10:8b:a9:ca:f1:f0:
16:b2:ca:e4:8f:eb:21:46:24:42:79:90:63:37:01:
a2:a4:7e:70:30:c6:c9:64:72:6b:57:b4:c5:0d:25:
61:6e:76:e8:82:7e:ad:eb:69:8c:11:fc:6e:6f:8d:
71:e5:9e:ef:05:6f:69:b3:df:50:3c:ee:ff:65:47:
d4:b6:f2:9e:1a:e4:36:75:a2:77:34:aa:af:34:45:
b4:b5:47:e3:af:fb:88:2c:01:50:22:2f:82:b4:e9:
7a:1d:17:f8:31:f4:a7:1a:23:2c:c8:b7:d9:f8:26:
8a:1f:0b:36:59:16:98:4b:e8:b6:cf:be:a4:7b:3f:
e4:24:90:88:7c:25:ec:36:b5:11:21:7c:40:f2:c6:
74:26:19:70:cc:32:b6:80:b1:69:51:1d:87:95:c5:
8e:76:36:2e:7f:a1:49:a7:b6:51:56:e3:66:99:06:
b2:53:1a:b4:5a:38:fe:90:a1:0c:ca:73:f9:d5:af:
4d:ef:55:4d:71:5a:eb:e5:ab:d4:17:8c:d0:c5:cc:
0a:8d:0d:a2:4e:49:88:c1:53:20:50:02:18:11:63:
c1:b5:0a:c1:bb:3d:23:3a:44:13:ae:a6:d3:1d:d9:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:E9:B3:54:5B:E6:09:1A:F8:4B:98:73:E0:1E:AB:1F:A7:07:18
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/JMHps1Rb5gka-EuYc-Aeqx-nBxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.16.0/22
Signature Algorithm: sha256WithRSAEncryption
08:9b:f7:84:7f:a0:69:a9:9a:b3:d0:15:28:58:e6:b2:29:5e:
a9:25:f8:de:f6:de:a2:81:35:53:91:ed:88:06:53:cd:e9:98:
50:a6:75:ac:74:76:fd:70:9b:3a:93:28:f2:b8:10:85:c0:d4:
7b:47:7e:be:e4:5c:f1:a6:af:19:69:38:b1:8d:0b:8a:a3:ca:
32:bb:eb:85:2a:ae:de:2f:c1:26:01:42:c3:6f:4d:3a:f8:4b:
46:3b:9f:cf:e4:0f:30:58:8b:c7:db:35:a9:20:e0:55:7b:81:
56:e5:f0:3e:b4:ee:2b:98:a2:2b:24:71:d6:67:9d:b1:dd:40:
a1:dd:af:dc:d6:08:61:41:ab:54:83:51:a0:d7:c5:d6:08:78:
81:e8:2f:c9:a6:fe:86:06:1e:cd:be:4a:74:82:8f:b9:7a:71:
8f:38:4f:9b:fe:d6:b1:3f:3e:ae:79:b5:82:1e:a5:d3:e7:9e:
c7:9c:56:be:07:2d:2a:d5:24:fe:65:e0:ab:56:cc:83:8d:0f:
c4:34:67:2e:f1:e7:66:63:58:a4:cc:82:64:83:dc:02:98:35:
0c:f6:89:2e:e8:ec:c7:9e:01:3e:ce:1f:90:d4:15:0f:6c:c1:
48:b6:43:b8:bb:8e:b8:d1:90:09:3c:a3:72:40:83:af:8a:d7:
2b:f4:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net