Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/RHzmO7RnMjN6HlDn9cWipxecuvI.roa
File: RHzmO7RnMjN6HlDn9cWipxecuvI.roa (raw, json)
Hash identifier: XRPs0X45wX32vlXqNGSPM7aYSFTNuCL0AuNMcbqQiyM=
Subject key identifier: 44:7C:E6:3B:B4:67:32:33:7A:1E:50:E7:F5:C5:A2:A7:17:9C:BA:F2
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 0185708CD6D1CBD9246286F5781E82AF0F68
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/RHzmO7RnMjN6HlDn9cWipxecuvI.roa
Signing time: Mon 02 Jan 2023 03:35:56 +0000
ROA not before: Mon 02 Jan 2023 03:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207356
IP address blocks: 185.16.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d6:d1:cb:d9:24:62:86:f5:78:1e:82:af:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jan 2 03:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=447ce63bb46732337a1e50e7f5c5a2a7179cbaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:d1:aa:95:05:14:ef:25:46:9a:fc:4c:5a:
2d:ab:74:e3:30:56:99:63:80:12:f6:c8:8d:63:c7:
ce:d0:d2:d3:30:71:42:80:11:09:f3:71:74:0d:7c:
82:0f:6f:5e:83:19:21:33:c6:86:2f:af:b9:9d:a9:
22:2d:3d:9a:c5:7b:3b:70:36:3b:d7:8c:e3:a2:72:
d5:03:12:74:3c:0b:8b:fd:98:11:35:e7:18:82:c0:
71:c0:89:d3:d5:b2:79:ee:2f:21:df:76:26:4b:dc:
fa:59:14:e9:b8:00:5a:f5:26:c9:92:e1:6b:46:b9:
44:43:cd:d0:68:5e:5d:d2:88:fc:92:3d:6e:7c:46:
e8:d5:b8:37:5a:c7:81:e3:35:ec:35:ee:06:ce:9f:
92:42:45:90:a4:5c:ea:b4:e3:d7:26:8c:b0:29:cc:
b2:da:fe:18:1c:b4:71:23:c1:f9:90:54:92:dd:98:
ce:87:a4:11:72:c6:63:6d:7c:dd:bb:32:b1:0c:1b:
78:f9:73:14:18:20:ad:6b:24:c5:fd:06:88:01:8b:
59:c9:a8:3a:32:4f:14:5e:b4:f3:d9:e5:70:90:a9:
64:95:37:61:61:fc:fd:11:1a:34:a7:b1:cd:10:3c:
69:f3:5e:5b:f7:51:af:18:31:17:d6:20:f0:ba:49:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:E6:3B:B4:67:32:33:7A:1E:50:E7:F5:C5:A2:A7:17:9C:BA:F2
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/RHzmO7RnMjN6HlDn9cWipxecuvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a2:31:c1:8f:b1:c2:6b:49:80:fb:3c:6e:9f:79:ba:8c:8d:
d7:fa:d9:3a:b7:ea:4a:5d:66:75:70:e1:27:52:ea:75:ff:bb:
99:a1:50:79:9b:26:10:02:f9:b0:2e:fe:3f:3b:87:d1:ed:bd:
6e:fd:ba:ac:49:09:7b:91:c7:02:b1:c7:86:be:6c:24:a5:71:
4c:ac:22:13:da:03:16:c7:f4:6e:bc:25:47:e5:f9:97:92:ef:
53:ec:7a:b9:41:d5:60:5e:33:1b:12:a0:21:e8:67:eb:4c:71:
8c:03:b3:f1:ab:0a:1e:50:45:0f:aa:fa:f8:40:4d:e7:b5:3c:
1c:ac:d9:9b:a1:99:50:18:22:f9:0c:e9:ef:94:5b:27:9b:3d:
41:09:7a:4c:e2:90:f7:7c:71:21:e7:1f:49:07:f9:9f:93:2f:
53:37:c3:14:39:0a:8d:e2:f4:ff:aa:64:6f:28:53:67:31:62:
17:d2:f5:7b:9e:44:89:d9:24:b8:4e:c8:f1:ab:91:43:9d:b1:
eb:68:32:1d:0e:22:3b:3c:27:c8:14:24:bd:b6:5a:86:04:f6:
df:ad:c6:76:7a:ad:d2:f5:e5:f6:92:47:5c:4d:b2:c3:58:aa:
44:56:c5:0c:fd:8d:e4:41:6b:2e:49:4d:7e:4d:bd:a0:41:f9:
5c:f2:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:18 2024 by rpki-client on console.sobornost.net