Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/7RE5TdUZwZwGs0GM6mbq2D20qqE.roa
File: 7RE5TdUZwZwGs0GM6mbq2D20qqE.roa (raw, json)
Hash identifier: Z5ydK018S/HAhlCiNizw5GVQ2IO03KJgb954IVGFqdE=
Subject key identifier: ED:11:39:4D:D5:19:C1:9C:06:B3:41:8C:EA:66:EA:D8:3D:B4:AA:A1
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 01856DC1D59414BECA6404BB2A484589537C
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/7RE5TdUZwZwGs0GM6mbq2D20qqE.roa
Signing time: Sun 01 Jan 2023 14:34:57 +0000
ROA not before: Sun 01 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204810
IP address blocks: 89.150.47.0/24 maxlen: 24
89.150.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d5:94:14:be:ca:64:04:bb:2a:48:45:89:53:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 1 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed11394dd519c19c06b3418cea66ead83db4aaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:d8:1c:58:74:8b:03:6b:15:dc:2e:9b:ee:
15:c6:f3:b9:84:48:fb:d8:0a:23:a6:d3:ac:e3:12:
7a:04:4b:d1:54:00:dd:a0:08:db:81:40:06:45:bf:
59:61:4d:be:5a:43:2e:19:c7:3e:20:b5:b9:7e:47:
64:78:e9:e5:1a:da:79:d0:95:00:80:34:71:33:cb:
75:1e:12:23:06:6b:b0:f9:fb:85:1b:11:43:e6:43:
62:0c:53:f0:3d:0c:38:db:d1:d3:ed:14:4c:4d:48:
88:7a:90:6a:97:8e:60:cb:e4:43:82:4b:4b:84:8f:
a3:93:9d:f4:a1:11:a9:8c:c4:10:01:83:99:d8:eb:
91:e4:c1:68:72:1a:da:00:23:2a:7c:ab:d6:d3:a2:
70:e6:62:26:98:3a:cc:b1:70:04:93:31:16:6d:3c:
4d:69:5c:9c:c7:ed:06:bb:2c:79:fb:58:dc:91:c9:
86:4f:fc:84:b6:39:f5:79:69:b8:8c:1c:fb:71:62:
92:ce:01:df:e4:7f:6b:90:e0:c1:83:fc:6b:a1:c4:
46:56:3c:5c:42:b3:3b:4e:b9:aa:a9:5e:81:ca:0a:
3e:4a:12:6c:89:89:9d:6f:10:a6:fc:8b:92:11:1a:
68:a0:52:b3:e6:e6:87:b9:02:48:c0:8a:0f:5c:9a:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:39:4D:D5:19:C1:9C:06:B3:41:8C:EA:66:EA:D8:3D:B4:AA:A1
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/7RE5TdUZwZwGs0GM6mbq2D20qqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
47:85:e1:af:92:d7:8b:31:77:35:ae:19:4d:6e:46:1e:ba:3c:
2f:9b:72:76:1e:a0:58:e9:84:26:86:69:dc:65:db:23:c2:65:
e3:10:ad:71:18:5f:a1:69:06:07:bd:6f:8a:cf:e3:d0:d1:7c:
d3:f9:01:6e:32:b7:62:90:1f:4f:77:f1:fd:ca:b2:d0:32:67:
63:f2:6d:5f:c7:d0:7d:e8:fe:c9:a3:70:f3:05:d4:cf:97:a1:
d6:02:33:2a:0a:cb:4f:28:d9:4e:58:4d:67:e8:5b:38:85:89:
01:cf:04:9f:ea:b3:96:26:ad:cd:d8:57:03:1c:8c:f3:9f:4b:
70:c3:8c:47:5f:7d:a2:26:f2:0f:69:6c:c2:2a:1e:4e:b0:e4:
7f:0a:6a:71:81:35:f5:56:6b:9d:9b:61:8c:fb:a2:6a:a9:5d:
7c:a5:d9:c9:15:7c:ec:97:ef:f2:2c:cf:dc:8a:cf:8d:eb:9e:
23:dd:6b:c0:bd:03:b4:12:2c:1d:35:1a:ad:1f:97:03:46:2f:
74:48:fa:9b:ae:08:c1:a1:e0:b3:18:b9:04:f0:d3:a3:16:4c:
f8:d5:5a:f1:aa:45:e9:ce:99:b7:42:68:a8:8f:0f:b6:cd:8c:
36:7b:c4:6a:f7:81:e1:a3:19:b9:dc:c1:b8:34:f5:2e:4f:0a:
4a:cb:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net