Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HMdNv1fZwm5L4QEIZ1w0VeAjxSc.roa
File: HMdNv1fZwm5L4QEIZ1w0VeAjxSc.roa (raw, json)
Hash identifier: PGXSqiFbmO42qSEpanAzPDjVt2DquGZvKH2uNckacFM=
Subject key identifier: 1C:C7:4D:BF:57:D9:C2:6E:4B:E1:01:08:67:5C:34:55:E0:23:C5:27
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018C61E2DAA43480D34AA637545F4A7C9704
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HMdNv1fZwm5L4QEIZ1w0VeAjxSc.roa
Signing time: Wed 13 Dec 2023 06:35:06 +0000
ROA not before: Wed 13 Dec 2023 06:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15974
IP address blocks: 93.157.208.0/21 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
83.234.164.0/22 maxlen: 32
193.22.6.0/24 maxlen: 32
2a02:e842::/32 maxlen: 128
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:e2:da:a4:34:80:d3:4a:a6:37:54:5f:4a:7c:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Dec 13 06:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc74dbf57d9c26e4be10108675c3455e023c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:ef:2a:8b:51:7f:b9:c0:b3:cd:a2:4b:f3:
8e:b4:3d:e8:e1:15:55:9a:07:4f:72:09:b8:a5:80:
10:9e:b6:67:93:55:da:5a:20:bc:d8:7a:d7:12:d0:
96:63:da:3c:13:48:d8:9d:4f:f3:6a:90:ed:16:aa:
5e:55:7f:60:12:3f:c7:98:d1:83:28:a3:aa:e0:4d:
43:7c:8f:e8:61:e3:f8:e3:de:b8:82:35:65:39:eb:
1f:2a:c3:ea:c5:6a:89:11:fa:22:9b:fe:f0:65:84:
f1:0c:13:63:30:9a:a6:c6:d8:71:84:06:07:0f:ab:
1d:ae:85:c0:30:a6:f5:a7:a1:00:97:8e:4b:10:80:
9e:aa:f8:96:34:65:c2:c5:9f:6e:ee:6e:98:9c:0c:
8a:1f:fe:16:47:72:24:2d:75:0f:80:a7:37:78:00:
2f:f3:e9:48:0f:bb:ac:d5:49:19:b2:ee:d9:8e:17:
72:37:6f:9d:46:a6:f0:4f:26:8f:5b:03:87:2e:07:
cb:63:7f:d1:2c:18:69:f2:cf:b6:d5:fa:fc:7f:c0:
7e:34:c0:c0:cb:40:8d:30:af:30:39:13:99:8e:05:
cf:1f:9e:2a:44:16:20:81:7f:e7:2d:9a:39:81:fd:
fd:2f:b3:1b:e8:dc:99:ec:49:4c:80:c9:cd:ad:c2:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:4D:BF:57:D9:C2:6E:4B:E1:01:08:67:5C:34:55:E0:23:C5:27
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HMdNv1fZwm5L4QEIZ1w0VeAjxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.234.164.0/22
93.157.208.0/21
193.22.6.0/24
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:be:fa:7a:6b:a0:04:45:44:25:5a:cc:fc:29:34:76:0b:b2:
42:f1:1f:e9:a8:b8:b6:d7:7d:7a:2a:6b:c6:fb:49:41:85:49:
c3:25:12:1d:4e:27:0c:90:24:93:54:72:db:5f:45:5e:38:c0:
7a:ef:6f:86:0f:e4:28:5f:e4:cb:4d:c2:f3:b7:d9:d8:ff:16:
e3:38:73:d4:0b:98:df:ea:42:6d:e3:c4:5a:c0:41:b0:ba:0e:
e8:1c:0c:93:32:de:ce:1d:63:e8:97:93:8b:cb:5e:67:3f:af:
90:d6:00:ca:5c:4b:11:c5:b7:53:fa:0c:b7:17:83:76:56:e9:
a7:bc:bb:82:07:fb:33:31:dd:07:98:00:a3:6e:07:53:46:63:
56:86:d2:41:1d:3e:97:a3:3e:8e:cf:90:74:fa:5c:da:1d:c0:
60:dc:5c:e5:f5:d1:c5:ab:23:c3:dc:94:cc:21:ce:96:c4:e4:
49:48:e7:38:3c:48:c7:08:26:a2:16:f2:ff:d8:20:27:9b:22:
e9:e9:96:e2:1c:97:f0:c8:be:00:fa:68:7d:f1:a8:10:e3:e9:
4c:c6:e9:c7:48:30:96:b5:60:79:d3:64:f3:13:5e:be:1e:b1:
f1:a3:45:9b:9f:c5:f0:d9:8f:1c:63:99:78:90:f8:14:61:2c:
88:01:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net