Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/xO-uti84rZGc6EQDNRBczXWWRLE.roa
File: xO-uti84rZGc6EQDNRBczXWWRLE.roa (raw, json)
Hash identifier: 9H3mCnG7M5uCEVqj8lQImjFcYH1qu+yHG9ftKhqiHiY=
Subject key identifier: C4:EF:AE:B6:2F:38:AD:91:9C:E8:44:03:35:10:5C:CD:75:96:44:B1
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 01874CDC3C54628C33F27BB3A84FC6177E63
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/xO-uti84rZGc6EQDNRBczXWWRLE.roa
Signing time: Tue 04 Apr 2023 15:21:54 +0000
ROA not before: Tue 04 Apr 2023 15:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41230
IP address blocks: 78.109.176.0/20 maxlen: 20
31.205.192.0/18 maxlen: 18
31.205.0.0/18 maxlen: 18
31.205.0.0/16 maxlen: 16
31.205.128.0/18 maxlen: 18
45.154.248.0/22 maxlen: 22
185.198.228.0/22 maxlen: 23
185.134.138.0/24 maxlen: 24
185.134.136.0/23 maxlen: 23
45.81.120.0/22 maxlen: 22
185.134.139.0/24 maxlen: 24
31.205.64.0/18 maxlen: 18
185.134.144.0/22 maxlen: 22
213.143.0.0/19 maxlen: 19
176.119.145.0/24 maxlen: 24
81.23.48.0/20 maxlen: 20
185.134.128.0/22 maxlen: 22
2a0e:2a40::/29 maxlen: 29
2a0e:2ac0::/29 maxlen: 29
2a0f:dd00::/29 maxlen: 29
2a10:d00::/29 maxlen: 29
2a00:1a10::/29 maxlen: 29
2a07:c300::/29 maxlen: 29
2a0e:5680::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:dc:3c:54:62:8c:33:f2:7b:b3:a8:4f:c6:17:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Apr 4 15:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4efaeb62f38ad919ce8440335105ccd759644b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:70:7c:a4:ef:be:d0:bf:d6:33:da:15:d2:
b1:a8:5a:b1:95:c3:62:c7:42:87:ba:2d:85:c2:ba:
73:cd:c7:7c:ef:0c:19:87:81:d0:dd:b6:16:45:f9:
3a:89:87:c0:c5:80:24:ec:0d:37:65:23:9e:29:37:
5c:69:52:51:56:10:01:4f:01:84:b5:fa:06:33:47:
d2:de:b5:99:5d:b9:3e:a2:7e:3b:f8:ea:9d:27:22:
1c:4d:c6:9e:b8:0a:a9:03:50:d4:90:65:cc:d9:0c:
a1:c0:41:26:68:78:41:5c:bf:27:7d:6f:17:31:b3:
f3:a6:f3:3b:bd:89:53:0a:45:ef:8c:43:8d:59:32:
f5:7a:cb:b1:fc:5b:7a:45:63:93:3b:4b:24:c1:78:
d5:51:96:49:20:2b:d9:a0:1d:a6:73:5f:9b:bf:cb:
25:4c:07:82:61:cd:f2:f0:9e:78:e7:44:ae:59:19:
30:df:58:a3:4e:9b:18:29:4d:6b:90:c0:6d:ab:5c:
e8:c8:8c:e3:99:3a:90:0d:c2:76:1d:79:44:4a:e4:
98:c7:ee:4d:fc:a7:0d:a5:03:92:ab:b7:e3:ea:02:
f9:98:b2:5f:45:6e:fe:09:e8:84:06:03:27:9c:c2:
cc:9a:96:11:c2:77:45:75:90:d5:6a:b2:fe:a8:d9:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EF:AE:B6:2F:38:AD:91:9C:E8:44:03:35:10:5C:CD:75:96:44:B1
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/xO-uti84rZGc6EQDNRBczXWWRLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.205.0.0/16
45.81.120.0/22
45.154.248.0/22
78.109.176.0/20
81.23.48.0/20
176.119.145.0/24
185.134.128.0/22
185.134.136.0/22
185.134.144.0/22
185.198.228.0/22
213.143.0.0/19
IPv6:
2a00:1a10::/29
2a07:c300::/29
2a0e:2a40::/29
2a0e:2ac0::/29
2a0e:5680::/29
2a0f:dd00::/29
2a10:d00::/29
Signature Algorithm: sha256WithRSAEncryption
05:20:46:0b:65:7b:f7:83:59:3a:bd:5c:ed:be:b1:c2:b0:36:
22:80:c6:30:fa:4a:73:31:c0:44:ac:37:de:a4:a4:e3:47:49:
2a:0f:ed:43:b7:d9:c4:b4:9c:28:aa:25:50:eb:72:83:2c:a4:
79:76:a1:cb:fd:39:4f:ee:55:66:3d:c6:d6:94:86:52:a4:5a:
d2:d3:ff:f1:40:b8:51:c0:b2:08:65:68:6d:05:5a:c3:7e:a6:
1e:29:32:62:10:d8:4e:61:b6:77:70:5c:39:f5:17:a3:69:0b:
54:aa:0d:ca:e8:47:1b:f2:56:94:74:ef:15:39:de:8f:d1:8f:
81:d5:61:a4:a8:39:a3:a3:44:7d:3d:e8:f2:ae:34:df:2e:01:
1a:0b:43:c1:5e:e3:fc:1c:b8:44:17:89:cd:04:d8:d1:d4:ce:
dd:17:db:c5:9d:49:72:95:41:d4:ce:36:9b:dd:fd:f0:9b:fa:
55:f0:fb:d8:48:ec:ab:9d:4a:f1:cc:38:84:9b:77:26:81:70:
33:17:15:8c:d2:34:96:31:3a:ff:d6:b2:ef:d3:a1:60:8a:8f:
9a:ee:37:61:d1:ae:0b:fe:0b:f9:5a:37:8b:ad:b3:f7:5e:f0:
b9:da:4c:aa:53:63:48:a6:60:df:b2:30:de:1f:24:92:88:1a:
65:6e:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net