Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/582wqzymWylsPSwDVbBTZ91Uh8M.roa
File: 582wqzymWylsPSwDVbBTZ91Uh8M.roa (raw, json)
Hash identifier: aDItafC4ShBXosCjgj7zMR/Puprjs7Sd3p9lPvauZE4=
Subject key identifier: E7:CD:B0:AB:3C:A6:5B:29:6C:3D:2C:03:55:B0:53:67:DD:54:87:C3
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 01856F700080BF99876BDAE6DD9ECB71EE0D
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/582wqzymWylsPSwDVbBTZ91Uh8M.roa
Signing time: Sun 01 Jan 2023 22:24:49 +0000
ROA not before: Sun 01 Jan 2023 22:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397403
IP address blocks: 185.198.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:00:80:bf:99:87:6b:da:e6:dd:9e:cb:71:ee:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 22:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7cdb0ab3ca65b296c3d2c0355b05367dd5487c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:46:f0:12:bd:73:0d:f8:96:73:b9:98:bc:
e4:29:87:71:a7:96:ba:1f:e7:8b:0c:61:a8:dc:f4:
02:c7:60:28:cd:a2:e1:15:1c:15:79:66:88:70:35:
32:16:99:89:c7:dd:bc:52:68:86:49:1f:cc:6b:c6:
34:c6:fb:c2:4d:0f:41:d6:f7:53:46:e2:29:2c:bb:
21:8b:4a:0e:8b:7c:51:80:f0:3d:89:cd:7c:2f:8c:
4d:6b:d7:f0:0b:65:2b:6a:78:02:ef:da:3d:ed:32:
4a:87:e9:d5:02:eb:ed:ff:5d:ea:b6:87:47:fc:50:
2a:0c:9a:d2:cf:ad:f4:16:4f:8f:d7:15:8f:36:fe:
f6:7e:c4:d3:21:9d:a2:df:e5:a0:34:b5:64:03:ea:
f0:e5:1f:af:c9:7b:f0:c6:db:97:47:f6:6b:5d:5c:
fc:7b:3d:c2:f7:1d:2e:da:a1:bd:cd:74:e3:bf:0a:
a0:30:27:7a:39:5b:02:ab:9d:ac:e4:01:35:7a:16:
dd:08:55:6f:1c:0f:85:f0:f1:99:1c:9a:2b:49:ec:
a0:3c:68:bb:41:c6:d2:79:f3:33:a8:d9:18:cb:72:
98:c6:30:9e:47:b1:19:51:97:2c:76:e4:38:5b:10:
e4:88:4e:6a:b3:e2:7b:1a:d6:70:10:20:53:c7:db:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CD:B0:AB:3C:A6:5B:29:6C:3D:2C:03:55:B0:53:67:DD:54:87:C3
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/582wqzymWylsPSwDVbBTZ91Uh8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c1:a7:b9:7a:c8:72:ec:ee:f5:56:8d:b6:67:f1:2c:b4:a0:
f5:06:a1:70:23:d6:64:bf:30:43:e6:59:a1:e0:ab:bb:fc:09:
9c:e4:e5:68:f9:13:bc:88:15:fe:b3:72:1f:e7:55:d4:b2:4c:
3e:ee:de:9d:7e:31:c5:7c:be:52:a0:b8:ee:49:71:31:e2:34:
46:91:d3:a9:24:52:70:d3:12:75:b0:29:36:a0:98:a7:4c:db:
77:2b:76:1d:14:a1:82:77:1e:c3:a1:50:64:44:d3:84:6a:d2:
84:38:0c:18:05:07:75:ae:a5:4e:f9:1e:25:46:0d:4a:9a:e5:
78:bd:a2:6c:0a:5b:d3:1b:b2:c0:59:3e:3b:cd:b8:05:f4:72:
c6:9f:ca:9e:a8:91:70:98:fb:d5:12:7d:f4:43:e5:08:2f:e8:
0d:90:16:9b:2c:98:c9:87:ce:98:5e:33:9a:3a:22:4c:00:fa:
dd:4f:00:9e:ef:b3:72:fb:dc:1d:14:38:cc:f3:50:94:a4:e4:
2c:17:11:67:d2:b8:35:25:47:64:06:c1:4e:f5:96:99:55:2e:
ca:d0:6f:24:8a:43:a4:0a:66:25:e5:03:c7:27:0a:ae:e7:6c:
2e:82:e8:23:35:33:c2:ab:86:51:46:3d:a6:97:4f:17:a5:0a:
2b:08:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:28 2024 by rpki-client on console.sobornost.net