Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ih8XSWAB7L9m7m4AOrluahMDEGw.roa
File: Ih8XSWAB7L9m7m4AOrluahMDEGw.roa (raw, json)
Hash identifier: YC/HPidCuW20a61zeGE8hQXH1ETR+9XOjViXjoNgBhs=
Subject key identifier: 22:1F:17:49:60:01:EC:BF:66:EE:6E:00:3A:B9:6E:6A:13:03:10:6C
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01857079BDD5BFFDF48B04C7B39DF2F8B85B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ih8XSWAB7L9m7m4AOrluahMDEGw.roa
Signing time: Mon 02 Jan 2023 03:15:04 +0000
ROA not before: Mon 02 Jan 2023 03:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34369
IP address blocks: 151.240.0.0/13 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
31.56.0.0/14 maxlen: 24
94.182.0.0/15 maxlen: 24
84.241.0.0/18 maxlen: 24
151.238.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:bd:d5:bf:fd:f4:8b:04:c7:b3:9d:f2:f8:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 2 03:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=221f17496001ecbf66ee6e003ab96e6a1303106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:07:fb:41:71:57:84:cd:6c:17:84:2a:a4:
66:97:d7:b8:51:b3:d0:37:d7:b3:0c:83:a2:1c:b2:
cb:8c:71:15:43:68:cb:c7:7d:f4:73:92:28:8c:d4:
ae:7e:49:4a:66:a4:3e:b0:3e:83:02:75:b5:b1:57:
12:98:40:36:2f:fa:b3:f0:c4:44:68:60:01:97:8f:
3f:40:b0:d9:38:e3:0e:50:b0:7e:a7:3e:f9:e1:ec:
e6:80:92:13:05:83:62:fe:f5:b5:b7:8d:0e:e5:08:
47:8e:71:2d:41:b0:92:01:c3:04:76:11:4b:50:d6:
59:b4:bb:d8:fc:83:00:01:33:83:f9:58:ad:c3:72:
7f:cd:85:ab:e4:20:10:8a:12:c3:ed:19:cf:fc:ba:
17:a8:05:0e:64:2c:7b:cf:9c:e7:39:23:92:e3:eb:
42:55:35:f3:ad:c0:4e:51:e2:98:ff:28:a1:f5:93:
38:1d:99:73:e3:4d:5c:e4:89:a4:10:2c:71:56:fc:
7d:09:7b:34:c2:f6:5a:27:fb:a5:b3:26:97:aa:83:
1a:e1:97:ae:9e:f7:bc:5d:a2:7e:f8:a6:10:e6:94:
5a:01:80:9b:3a:d5:a3:a7:1c:ce:c1:88:71:f0:82:
19:ea:b5:41:ed:4f:2b:fa:98:aa:fd:de:bc:4e:4d:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:17:49:60:01:EC:BF:66:EE:6E:00:3A:B9:6E:6A:13:03:10:6C
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ih8XSWAB7L9m7m4AOrluahMDEGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
84.241.0.0/18
94.182.0.0/15
151.238.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
0c:87:e3:43:0d:77:b9:29:5e:9f:2c:32:8f:b9:e5:4b:8d:88:
dc:c8:29:56:1b:64:0d:8a:a2:32:3b:68:60:86:28:7f:75:bb:
ff:1a:c4:72:68:0a:0f:e3:43:d8:a2:ed:5a:d6:0a:3a:88:26:
c5:ad:06:26:32:2a:6c:b3:ad:6c:bb:2a:23:fd:1e:5a:2b:7c:
b7:9e:ad:ab:45:7c:9b:04:c8:c4:17:28:fe:2a:4f:f1:86:70:
77:60:27:96:fb:47:fb:5d:63:d8:9d:8a:a1:4f:c2:d2:77:72:
38:af:da:e3:1d:d6:8d:f4:bb:24:f4:ef:2b:53:88:16:22:d9:
d7:e5:d1:0c:b3:9c:f0:c8:2d:bf:57:4d:54:f3:2e:85:96:99:
17:59:e7:8f:f5:c6:b0:9f:9d:4a:c2:82:e0:44:12:a4:ef:a7:
8b:51:b2:08:5d:fd:0f:d7:67:af:eb:b4:a6:a0:66:b1:75:b9:
b4:ca:c4:9b:c9:48:00:93:51:08:13:78:92:45:85:a9:35:26:
64:32:4c:8d:ec:32:bc:9f:7f:36:a4:73:a5:30:4f:4f:25:84:
4d:0f:70:29:af:35:c8:24:15:d4:91:ce:7e:34:0f:d4:aa:73:
ab:4c:3f:54:6e:21:1a:06:03:0d:43:32:50:c3:7f:1e:0a:40:
2d:73:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:01 2024 by rpki-client on console.sobornost.net