Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/KOE0dmPLIPqOdyivg_WkT39olPk.roa
File: KOE0dmPLIPqOdyivg_WkT39olPk.roa (raw, json)
Hash identifier: 6BLljcx6J36vg0dW7gcWXcp6HujXsaXY2lA5CcBpRS4=
Subject key identifier: 28:E1:34:76:63:CB:20:FA:8E:77:28:AF:83:F5:A4:4F:7F:68:94:F9
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01898C01ABC0D5F28C22CC2549BB29AAB712
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/KOE0dmPLIPqOdyivg_WkT39olPk.roa
Signing time: Tue 25 Jul 2023 07:44:26 +0000
ROA not before: Tue 25 Jul 2023 07:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 45.113.238.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
43.245.119.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:01:ab:c0:d5:f2:8c:22:cc:25:49:bb:29:aa:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 25 07:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e1347663cb20fa8e7728af83f5a44f7f6894f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:d7:4b:57:e1:76:d8:73:39:c3:5a:cc:6a:
c0:e9:b3:57:b9:a6:ee:09:4b:23:49:0f:34:bc:62:
78:00:ce:60:72:69:04:e5:f5:bc:bd:a4:d7:f3:95:
7b:7b:9b:4b:17:6a:f3:11:56:ec:b5:c6:4a:d7:d6:
f3:93:ad:ff:08:22:b7:19:a7:30:dc:6e:da:fd:3d:
11:16:f8:ca:83:e2:9c:b6:45:42:58:02:a3:4c:bd:
13:d6:32:c9:22:53:33:c2:9b:5d:3e:43:82:85:61:
da:ee:81:64:de:3c:b3:a3:d2:14:d9:ec:f3:18:fb:
75:de:71:99:17:cd:7e:16:57:7b:67:21:89:2a:2f:
34:a6:21:7b:4d:c1:b3:fc:63:7b:8d:8a:4c:b9:a9:
f9:5e:ae:3d:e3:b6:75:e4:66:f0:81:7b:ed:6c:53:
de:f2:21:a1:cf:b9:21:df:ae:dc:e8:e0:6d:61:5b:
74:47:f3:2b:2c:13:e0:c1:df:5a:31:11:7e:90:b2:
b5:d5:b1:fd:b5:f7:a7:fb:fc:94:f3:8a:9e:72:a5:
89:97:35:0a:68:45:0b:c3:18:ec:da:48:21:f8:88:
0d:4a:80:8b:69:60:8d:23:a6:a2:d7:a8:13:0a:62:
d7:11:c7:34:5c:b0:18:58:bc:b1:8d:cf:03:9d:13:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:34:76:63:CB:20:FA:8E:77:28:AF:83:F5:A4:4F:7F:68:94:F9
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/KOE0dmPLIPqOdyivg_WkT39olPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.119.0/24
45.113.238.0/24
147.185.217.0/24
147.185.250.0/24
193.36.86.0/24
193.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:50:d3:e5:bd:f7:2d:0c:6b:09:4d:e4:6a:20:29:54:42:89:
e9:f9:3d:80:40:3e:e8:c7:4c:66:b2:17:ac:cb:3a:68:c5:83:
24:24:51:a7:ba:7a:bb:eb:8a:ec:f0:fb:63:9c:a8:9f:6d:b0:
1f:f1:2e:ce:e2:29:0c:25:e2:c1:99:33:d4:bc:63:4d:a6:7b:
20:d1:a1:2e:7e:c7:c9:6e:0f:ec:fa:2a:a4:5b:46:aa:a3:07:
a9:ba:b1:1e:4e:4c:a3:ea:c1:11:3c:fd:f0:25:3e:fb:14:c4:
54:e6:3c:79:06:a8:74:17:a9:18:f7:2c:b0:45:26:23:ab:a1:
9d:78:89:ed:33:62:8c:8c:9d:24:94:58:ed:40:9f:1c:f4:82:
e3:40:fe:9c:fb:88:43:52:87:84:b8:ca:87:97:0d:f3:13:53:
d7:75:87:3c:87:8f:a7:16:eb:0c:52:3c:37:38:f2:a6:30:eb:
92:33:78:84:2b:d8:53:aa:87:75:d9:d8:5f:37:1f:f8:20:f0:
3b:d7:7b:6e:b4:3f:5b:79:a7:19:fb:d6:14:af:f6:41:8c:62:
d8:06:4d:d6:b2:b5:ac:56:3c:5e:a1:2d:fb:aa:1c:55:87:28:
01:a0:67:37:98:98:50:eb:43:aa:52:e1:91:51:2f:7c:86:1a:
93:d6:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net