Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/uC7FW7CE00t6EloNFo_K5z5OoKA.roa
File: uC7FW7CE00t6EloNFo_K5z5OoKA.roa (raw, json)
Hash identifier: dX2Fy0k8gQNv+vOmqpImR18621Q+z5nXNGed6P9jQ04=
Subject key identifier: B8:2E:C5:5B:B0:84:D3:4B:7A:12:5A:0D:16:8F:CA:E7:3E:4E:A0:A0
Certificate issuer: /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial: 01856F14F0B87148FFF360C4ED753467DF8E
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/uC7FW7CE00t6EloNFo_K5z5OoKA.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 185.155.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f0:b8:71:48:ff:f3:60:c4:ed:75:34:67:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82ec55bb084d34b7a125a0d168fcae73e4ea0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:5f:1b:4c:82:01:b6:e4:31:22:a3:7f:ce:
13:24:62:16:98:ee:5b:89:0c:5d:e2:30:25:50:13:
75:c1:70:2b:44:a6:97:15:82:32:37:74:1e:b8:58:
e0:ec:68:41:b9:6d:c9:63:22:19:7c:94:e9:94:6e:
25:69:46:ef:b2:5e:0e:8c:dd:54:d2:90:10:86:51:
2a:00:9e:71:2d:67:34:db:37:b1:00:00:1b:c9:d7:
06:99:10:01:ab:2d:34:0b:b4:44:32:87:c3:ef:96:
3e:45:85:83:58:19:07:88:d8:50:f0:93:21:e6:13:
2f:29:12:a8:ad:4a:3b:fb:20:dd:35:40:da:18:0f:
92:95:69:20:68:c9:13:3b:29:f3:5b:1d:cf:c0:bd:
21:af:c8:b0:88:6a:7f:ac:a9:09:30:86:31:ed:40:
61:bb:e0:be:3d:fb:4c:db:12:46:29:e3:e3:2c:71:
f1:11:14:3b:91:9a:cb:34:04:91:4c:96:72:54:23:
e2:da:6d:dd:d6:e9:00:83:f7:c3:74:b7:55:bd:ca:
34:09:bb:ba:ac:55:af:9d:63:2d:53:41:b9:e4:d2:
ee:40:fd:9e:95:89:02:2a:b4:da:60:96:cb:02:07:
bb:83:93:12:e0:ff:8a:be:7a:75:bb:ad:42:64:fa:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:C5:5B:B0:84:D3:4B:7A:12:5A:0D:16:8F:CA:E7:3E:4E:A0:A0
X509v3 Authority Key Identifier:
keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/uC7FW7CE00t6EloNFo_K5z5OoKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.101.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2d:c4:7c:05:21:41:6a:97:67:a3:8c:32:a3:62:46:fb:9e:
45:fb:48:f7:ec:0a:bf:fa:20:a4:b2:86:0d:3d:38:87:dc:b0:
42:e8:48:29:a0:c7:67:f0:e4:56:4f:0d:98:79:ca:0b:fb:e4:
0b:e5:ec:ac:94:f0:47:66:bb:e1:2c:8a:02:e7:ba:ca:c5:7f:
81:44:d9:3c:60:b7:98:2b:2c:4e:5d:48:ec:14:e1:33:ab:3d:
19:19:79:fc:22:b2:82:04:d0:59:33:ad:d4:5a:1e:1f:f5:56:
93:06:59:38:11:87:fd:a6:bf:41:06:f9:94:b7:80:24:e2:15:
09:a7:72:09:c2:d8:be:9e:32:ba:d9:09:01:a3:09:0d:0b:90:
40:45:e7:b6:f0:78:96:c3:f2:df:f8:06:2a:96:01:fb:75:79:
18:38:0a:d4:95:6d:0b:72:ec:67:c5:3d:a1:e2:2f:45:62:e7:
2a:68:d8:f5:0d:d7:7a:96:0c:a2:ff:72:bf:31:62:be:34:a8:
d0:12:7d:51:94:b2:8d:2e:41:14:d0:47:c5:73:87:23:6d:11:
6f:da:3d:99:c1:4b:45:d3:11:a6:86:14:ba:11:05:cc:4f:47:
bd:3c:c6:26:f7:9f:5e:c0:f0:75:61:4b:c2:a5:8a:80:be:2d:
8a:20:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net