Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/lTtz4y0kTXpGgnbaot_uiKAaZUk.roa
File: lTtz4y0kTXpGgnbaot_uiKAaZUk.roa (raw, json)
Hash identifier: PePCBZV7DLGoP/QPwCPux1tJv/RqMg3q/hdeYC6ZLE0=
Subject key identifier: 95:3B:73:E3:2D:24:4D:7A:46:82:76:DA:A2:DF:EE:88:A0:1A:65:49
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 018756B1C122395FC1BF34F1CCB33DE8AEF1
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/lTtz4y0kTXpGgnbaot_uiKAaZUk.roa
Signing time: Thu 06 Apr 2023 13:11:42 +0000
ROA not before: Thu 06 Apr 2023 13:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51984
IP address blocks: 185.182.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:b1:c1:22:39:5f:c1:bf:34:f1:cc:b3:3d:e8:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Apr 6 13:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=953b73e32d244d7a468276daa2dfee88a01a6549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:c9:ce:d1:a8:8e:7f:38:c4:da:fa:4f:56:
e1:b9:5f:11:ea:95:02:b7:eb:0f:de:3b:10:f9:2f:
01:0c:3e:f6:54:6a:c1:6d:b4:5c:67:da:08:e5:68:
28:ba:97:5d:40:52:5a:c0:a2:95:d6:f5:02:af:75:
fb:1f:7c:36:93:51:f2:35:11:20:00:07:89:54:a7:
a2:0d:76:ba:0c:25:20:bf:78:6d:8b:f7:d2:0f:e8:
25:ad:88:2b:d3:4f:00:b3:f8:a6:62:b2:19:2a:86:
e3:f4:36:86:f9:1c:e0:41:f8:e0:ea:98:0e:52:8e:
6a:a2:3b:b1:24:cf:a8:4e:63:b5:e5:71:97:d6:87:
72:51:da:0e:4e:c0:70:c3:e4:cf:ed:1d:89:38:af:
6d:c0:11:96:2b:97:f3:6b:0c:cf:a4:06:c0:3d:a4:
b6:8b:b1:6c:7f:2b:30:99:f8:7f:63:47:33:18:10:
6c:2b:0e:52:58:c1:08:26:e3:47:3f:7e:82:99:e1:
c9:0c:6e:fe:cd:d5:81:5b:f7:c3:c8:08:c3:fc:8d:
ea:2a:22:7e:87:f5:14:a0:f3:05:09:c5:07:22:5c:
32:18:a6:e7:39:47:4a:0f:01:bb:c4:2c:03:fe:6e:
51:10:05:56:16:d0:4a:64:18:ce:0a:27:5a:14:3c:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:73:E3:2D:24:4D:7A:46:82:76:DA:A2:DF:EE:88:A0:1A:65:49
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/lTtz4y0kTXpGgnbaot_uiKAaZUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.152.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2f:c0:c1:c1:c7:a7:95:4b:91:3c:22:aa:52:39:7a:c4:d1:
3f:30:6e:fc:b1:f4:05:23:0a:5c:3c:92:ce:ae:9a:98:d7:74:
98:86:9e:a4:2a:da:42:8c:da:0d:3c:08:39:cf:74:28:a4:9d:
fe:69:f0:b9:c2:24:e0:8b:cf:f7:20:a8:d9:65:02:9d:15:e0:
49:1d:a4:60:63:75:77:6d:9c:50:1f:24:89:bc:85:bf:1f:64:
3d:b4:a1:8b:f1:8e:a3:da:27:93:af:4f:b7:8b:15:d8:14:e6:
ba:fa:2c:ed:97:b9:3f:00:7a:ba:b5:51:79:9a:49:f1:9c:ea:
fc:6b:9e:4d:af:7f:91:d9:08:f1:b1:9b:4f:5c:87:56:bf:44:
51:24:be:03:e1:42:d7:c4:1b:c8:e9:73:64:9d:c7:ac:c0:7c:
88:19:99:11:14:68:e2:8b:8c:a3:67:d7:d1:fc:10:0d:e4:97:
74:21:4d:ab:39:19:c3:c3:99:87:05:ed:ed:62:5e:e6:fa:bd:
01:60:97:d2:c3:da:06:de:7d:1c:25:63:ec:23:ef:62:38:4f:
39:28:f1:b3:5b:d7:fe:b8:b7:8f:da:c9:b6:54:57:c4:7c:87:
de:1f:46:85:0d:35:e4:fb:6b:2b:dd:a3:6d:5f:ea:3c:6e:80:
31:a9:eb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net