Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/hs-Zp5zDRiWfXeka0PdiWLWevRs.roa
File: hs-Zp5zDRiWfXeka0PdiWLWevRs.roa (raw, json)
Hash identifier: ilHQIbzYWsJyZwOrMFDtdIZ5X0+tyMkVRIgaXgARIjo=
Subject key identifier: 86:CF:99:A7:9C:C3:46:25:9F:5D:E9:1A:D0:F7:62:58:B5:9E:BD:1B
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 01860223D464D81AC2D36CD444131337583A
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/hs-Zp5zDRiWfXeka0PdiWLWevRs.roa
Signing time: Mon 30 Jan 2023 10:05:47 +0000
ROA not before: Mon 30 Jan 2023 10:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34934
IP address blocks: 78.24.89.0/24 maxlen: 24
185.55.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:23:d4:64:d8:1a:c2:d3:6c:d4:44:13:13:37:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 30 10:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86cf99a79cc346259f5de91ad0f76258b59ebd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:af:54:0e:59:98:40:8a:74:79:c4:be:1a:
2a:dd:9c:88:15:dd:21:b0:45:d4:00:b6:98:2c:cc:
46:b8:a2:08:8f:bb:ee:11:75:bc:52:cf:9b:99:ec:
a4:04:e4:c7:69:bd:fd:2a:9a:2d:bb:b2:b8:c5:c3:
04:9b:c5:15:e9:c7:f6:df:91:fd:90:e9:19:0a:be:
ec:07:88:7e:f5:50:8c:61:8c:a2:67:6e:4c:38:19:
5a:bd:34:ef:43:90:57:90:82:4f:39:81:96:5a:d5:
94:be:2d:d9:98:9b:f8:b4:9d:8d:58:43:1a:ba:4d:
3b:4b:81:5b:39:fd:b4:51:d6:47:93:35:bd:b2:b4:
1a:15:15:eb:34:3f:2c:07:8a:fc:32:6f:97:18:65:
85:1b:01:bb:79:5d:b4:5d:16:f4:4b:58:f2:9d:43:
45:d8:35:48:89:bd:1a:f1:ed:f6:c3:c0:29:33:3b:
7c:cd:60:91:e8:5d:de:03:68:c0:61:e7:45:57:17:
96:ec:10:88:fa:69:af:08:d5:c5:fc:6b:b0:18:fe:
45:dc:27:cb:a1:7c:f8:44:c8:dc:05:d3:65:43:63:
2b:6f:dc:a5:d6:c1:9d:11:40:6f:a8:11:9c:54:89:
70:39:2b:ed:7d:f4:c0:70:60:e1:46:9d:7f:1e:e8:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:99:A7:9C:C3:46:25:9F:5D:E9:1A:D0:F7:62:58:B5:9E:BD:1B
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/hs-Zp5zDRiWfXeka0PdiWLWevRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.89.0/24
185.55.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:32:0b:0f:95:ec:26:f3:64:ae:88:1b:cc:2e:90:b5:82:48:
56:77:ff:27:87:a3:e3:6c:89:5f:22:a6:e4:da:90:57:2b:d6:
71:01:d6:7b:ca:0e:58:6c:94:96:44:25:dc:0b:09:fe:d0:c4:
aa:fe:67:9d:0c:8f:68:57:64:a2:38:ca:37:e6:eb:c2:a0:86:
f2:db:31:45:c6:9a:2a:5c:96:2b:ac:9c:52:ea:cf:ea:c7:0e:
ad:9d:4d:b1:54:71:82:b9:4b:5d:7d:83:9a:2e:c3:c8:15:08:
3c:5f:8b:bf:dd:53:e0:be:3e:d2:5d:f6:7f:e0:4f:53:81:25:
46:4b:e0:57:37:22:23:1f:5e:9d:33:d0:46:2a:ab:23:c1:41:
16:a2:57:d7:7d:17:e8:a6:a7:aa:1e:78:0d:90:9e:05:b1:d1:
ee:15:3f:aa:be:33:a9:80:04:15:66:ab:b0:a0:90:8c:15:f4:
24:33:4c:0f:d4:26:53:e8:aa:14:59:41:b9:45:2d:1d:da:b2:
63:26:41:1f:f3:a0:fc:4d:60:2e:7f:17:24:77:8e:62:3c:9d:
e2:fd:4e:71:e3:22:ce:a0:4a:06:08:cd:05:e3:78:3d:40:68:
3d:3b:39:73:c3:4f:ce:b8:fe:94:b6:db:03:64:79:87:48:95:
a6:44:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net