Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/M9gviI2XEVfqf3kD3QDBXo4-MDM.roa
File: M9gviI2XEVfqf3kD3QDBXo4-MDM.roa (raw, json)
Hash identifier: ZUPhNdNWonZiJy5UKuhO8yx/jDssnxAG8tIpsJrmCuM=
Subject key identifier: 33:D8:2F:88:8D:97:11:57:EA:7F:79:03:DD:00:C1:5E:8E:3E:30:33
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705E3992A05B8260C11406232EEFF7
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/M9gviI2XEVfqf3kD3QDBXo4-MDM.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51190
IP address blocks: 82.200.77.0/24 maxlen: 24
94.251.92.0/24 maxlen: 24
82.200.122.0/24 maxlen: 24
82.200.123.0/24 maxlen: 24
82.200.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5e:39:92:a0:5b:82:60:c1:14:06:23:2e:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33d82f888d971157ea7f7903dd00c15e8e3e3033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:81:e1:eb:18:c6:a8:90:2a:6d:b3:6d:fa:
53:ac:e3:4f:0e:cd:71:fc:cc:84:ac:4e:0a:a7:76:
47:3c:26:4a:85:98:5e:00:f5:51:61:12:15:36:ca:
f1:5d:13:d3:46:ca:f9:2c:a2:a8:e9:86:fe:d8:9f:
12:b9:27:22:9f:28:28:38:c2:ae:ad:4a:74:7f:32:
de:59:15:c6:0b:6f:79:c7:ee:be:64:4e:bf:87:1b:
cf:8b:97:b5:00:10:26:3c:78:e7:1d:ae:87:76:00:
2e:5b:5f:ed:13:07:89:ac:b7:f0:b7:d9:53:01:8f:
9f:d5:f7:2b:42:83:67:79:22:1b:1a:dc:b8:d0:ee:
1b:cd:03:18:47:bc:fd:a0:ec:08:2c:d4:0e:66:f3:
8b:6b:f0:8c:2e:f7:23:8f:f9:5b:95:a4:82:ac:88:
65:12:37:96:4f:97:39:84:e7:b7:35:5d:1b:61:13:
29:39:5e:7a:f0:f1:3e:5b:75:31:30:e9:ff:24:68:
87:ba:a7:ce:be:17:2c:2b:47:b8:a6:19:48:2f:c7:
17:03:e3:f8:38:6c:fb:36:ad:03:7b:8b:9a:87:41:
50:1b:3c:fa:80:b4:79:f7:fa:83:bb:7b:9a:e2:05:
52:56:73:3e:3a:55:57:12:13:6a:1b:e7:49:56:e9:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:2F:88:8D:97:11:57:EA:7F:79:03:DD:00:C1:5E:8E:3E:30:33
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/M9gviI2XEVfqf3kD3QDBXo4-MDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.200.17.0/24
82.200.77.0/24
82.200.122.0/23
94.251.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:ec:e1:bc:bb:99:7f:1c:5e:ae:9b:08:b1:54:02:ed:76:
3b:42:72:52:f8:66:6d:b7:0d:3e:34:72:b2:d2:2e:5f:64:3a:
ba:c2:bc:b8:26:ab:d4:45:07:45:b6:bc:d9:59:83:ea:4d:01:
15:8d:f5:36:d8:82:1a:5c:5f:e2:87:f7:9d:e2:e9:8c:94:9e:
21:f3:66:22:56:3e:ac:16:d2:f3:e7:1c:08:89:d5:ca:b4:1c:
cf:65:74:59:a4:90:6b:b5:b2:fa:df:c3:8f:ad:5b:ab:8a:54:
65:eb:a2:b0:89:03:a0:49:10:81:01:e3:89:a6:bb:f2:d4:21:
cf:57:ed:f5:8d:27:34:8e:96:1b:c7:a8:55:ee:f0:a0:99:69:
e5:40:23:88:82:86:52:b1:92:84:7b:30:9e:50:13:51:b4:ca:
4d:97:8f:2c:17:b5:f3:11:5c:20:f9:cc:34:4b:bf:f5:33:72:
63:ba:3c:74:77:f9:12:ee:a7:5d:94:59:7e:e3:ca:ee:cb:65:
d0:cc:7b:e9:5a:9b:ee:46:a0:33:88:7f:c7:cc:42:f0:12:37:
f0:bc:09:a2:ff:35:ec:2e:56:58:b4:65:d2:21:0a:b4:cc:c7:
7a:cd:f2:9f:f8:8b:99:59:92:88:5a:54:9a:c1:98:c2:0a:58:
01:78:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net