Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/FFBuXiC63894cH5P4oSKyn5LOt4.roa
File: FFBuXiC63894cH5P4oSKyn5LOt4.roa (raw, json)
Hash identifier: 6vHVo86oa0fg4mNhReJ6GigCi3d0mEjSSZ1JdsMXe/s=
Subject key identifier: 14:50:6E:5E:20:BA:DF:CF:78:70:7E:4F:E2:84:8A:CA:7E:4B:3A:DE
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 01856EB92634C60F27982C835C9857EC5E8C
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/FFBuXiC63894cH5P4oSKyn5LOt4.roa
Signing time: Sun 01 Jan 2023 19:05:05 +0000
ROA not before: Sun 01 Jan 2023 19:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 185.155.64.0/24 maxlen: 24
185.155.67.0/24 maxlen: 24
176.98.223.0/24 maxlen: 24
176.98.220.0/24 maxlen: 24
185.187.183.0/24 maxlen: 24
185.187.182.0/24 maxlen: 24
185.187.181.0/24 maxlen: 24
185.187.180.0/24 maxlen: 24
2a0d:59c7::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:26:34:c6:0f:27:98:2c:83:5c:98:57:ec:5e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Jan 1 19:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14506e5e20badfcf78707e4fe2848aca7e4b3ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:16:d7:5f:37:2d:7e:e3:b9:96:d1:dc:25:
c6:49:c0:91:88:93:e7:43:70:75:5b:3c:09:5a:32:
21:28:14:3a:8f:5b:05:24:8e:f9:a5:07:9d:97:99:
7a:8f:9c:c7:cc:b0:c7:80:c2:c5:cd:7a:96:5d:1b:
8f:e8:c4:08:5a:7c:55:52:18:9e:cb:f2:b3:41:c1:
21:a0:8f:c4:e7:37:27:cd:c8:e6:40:71:f9:c9:31:
5a:2c:13:be:9a:f5:5d:89:4f:fd:d7:6e:0c:53:ed:
0a:b9:cf:81:fa:61:b3:75:a4:86:ca:9c:be:17:53:
7e:e5:ab:87:12:26:96:10:c0:f9:9a:2d:aa:b8:c7:
11:ce:43:53:74:d7:b5:de:ae:67:71:2d:cf:c5:ee:
93:05:c5:0e:3b:cd:0e:74:f7:21:b0:ba:b1:4e:f1:
d0:8c:63:41:7f:d7:98:1a:96:1b:b4:68:9d:b9:64:
77:1f:43:cc:4b:9d:ac:24:18:b2:38:4c:81:b6:37:
9a:08:70:b5:2e:75:f8:72:66:e6:33:3a:f1:b9:ae:
a6:3f:74:58:13:78:80:b3:e9:8e:33:0b:14:f2:53:
63:41:00:d6:65:96:4c:d2:fb:50:fe:66:81:5c:97:
cc:e1:8c:59:09:75:22:1e:9d:41:fd:c3:d7:87:36:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:6E:5E:20:BA:DF:CF:78:70:7E:4F:E2:84:8A:CA:7E:4B:3A:DE
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/FFBuXiC63894cH5P4oSKyn5LOt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.220.0/24
176.98.223.0/24
185.155.64.0/24
185.155.67.0/24
185.187.180.0/22
IPv6:
2a0d:59c7::/32
Signature Algorithm: sha256WithRSAEncryption
2c:a7:b6:ba:c8:a8:e8:8c:f1:6d:eb:20:6d:c9:3a:78:94:5f:
44:80:18:e7:ce:5d:62:92:ab:a3:15:64:f8:73:e0:19:67:2b:
73:93:21:a2:17:92:71:02:f9:16:33:f5:01:37:34:fe:cb:64:
05:f9:f3:35:91:48:91:0d:37:66:5f:1b:49:4b:ad:8b:cc:8d:
08:22:80:2e:2b:33:24:0c:7b:60:a1:7d:86:e6:44:0c:68:c4:
bd:9c:c5:cf:c5:19:2b:8d:c3:56:52:ca:c8:ba:44:af:31:0b:
a5:f6:f5:52:0c:22:2a:cd:62:0e:1d:12:a8:75:bc:cd:69:06:
27:7a:41:7b:b9:0f:92:9c:76:da:be:bb:a1:fa:a9:bd:91:7b:
c3:2d:7b:cd:63:72:22:ce:9d:f9:f5:9b:42:48:2b:1e:c5:0e:
9b:1e:cf:30:42:70:d1:0a:c9:f3:fe:fa:ef:ad:38:40:71:c7:
ec:bb:6a:b0:63:f0:da:a1:0a:cb:86:38:a8:53:4b:f1:4d:b7:
f2:45:d7:de:13:e4:aa:bd:15:0b:21:c9:94:ce:7f:ae:c9:c5:
0f:b8:15:30:6c:69:af:70:a9:e6:3b:a9:4f:bf:08:07:10:31:
7f:4d:c5:9d:0c:56:57:3b:27:01:fb:a4:bc:56:c4:9e:dd:6c:
b9:e9:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net