Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/s1W9_U2daxbWiDbta-L4iElEfd4.roa
File: s1W9_U2daxbWiDbta-L4iElEfd4.roa (raw, json)
Hash identifier: koqrUHihVwR2hLDu9lj7wbaInVNjbRhXEnGTwb3kEjI=
Subject key identifier: B3:55:BD:FD:4D:9D:6B:16:D6:88:36:ED:6B:E2:F8:88:49:44:7D:DE
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 0185701511064CF0D5E17ACCC0DA232E939C
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/s1W9_U2daxbWiDbta-L4iElEfd4.roa
Signing time: Mon 02 Jan 2023 01:25:06 +0000
ROA not before: Mon 02 Jan 2023 01:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200129
IP address blocks: 185.36.183.0/24 maxlen: 24
185.36.180.0/24 maxlen: 24
185.36.181.0/24 maxlen: 24
185.36.182.0/24 maxlen: 24
2a00:e860:181::/48 maxlen: 48
2a00:e860:182::/48 maxlen: 48
2a00:e860:180::/48 maxlen: 48
2a00:e860:183::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:11:06:4c:f0:d5:e1:7a:cc:c0:da:23:2e:93:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Jan 2 01:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b355bdfd4d9d6b16d68836ed6be2f88849447dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:a4:42:d4:11:32:32:b4:6d:0a:74:ff:26:
6e:52:ab:5f:96:2c:3a:ea:41:a0:0a:99:c6:1a:28:
16:ed:94:e5:75:ae:9c:35:8d:d2:89:16:75:ee:80:
48:0e:e1:dc:05:02:2f:a3:ca:09:d9:5a:70:d9:e9:
97:37:56:c4:59:21:e6:05:80:7d:ec:95:e3:41:18:
2f:09:5f:33:24:27:e6:5b:cf:04:36:d8:30:5d:90:
8e:c6:95:c3:0a:8b:f2:d5:49:65:19:3f:61:ca:a8:
b9:01:8d:01:a0:38:55:14:e6:60:96:6e:25:f3:33:
e9:81:30:39:74:a2:ca:73:ce:3c:b5:d0:7b:f2:50:
69:c2:72:e8:3b:0d:dc:70:8f:0d:73:8e:9c:62:3f:
32:b3:24:5b:4e:37:18:9b:8a:21:7e:77:00:6b:5e:
eb:76:d6:90:b5:45:7d:cc:6f:2b:1d:c9:a0:01:0a:
aa:8d:b5:70:86:5f:36:24:7c:92:79:5b:fb:b2:22:
15:95:6f:ac:70:4b:40:da:e1:92:46:06:6e:e9:2d:
1e:3b:93:8f:97:68:64:65:38:d3:d0:a9:c5:df:be:
0d:f9:84:80:bb:2a:6b:15:34:3e:3d:f4:4e:89:b0:
d7:ef:44:08:d2:68:46:0a:9f:cc:bf:bf:f6:0c:34:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:55:BD:FD:4D:9D:6B:16:D6:88:36:ED:6B:E2:F8:88:49:44:7D:DE
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/s1W9_U2daxbWiDbta-L4iElEfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.180.0/22
IPv6:
2a00:e860:180::/46
Signature Algorithm: sha256WithRSAEncryption
48:23:16:d2:53:48:ba:03:fc:3d:45:d8:99:b5:7e:3a:3a:9f:
5a:27:e7:83:c0:fc:d4:07:f4:e7:7b:08:5f:73:a4:27:25:1a:
40:60:eb:2f:65:9a:44:ff:1f:63:08:37:b6:83:f5:44:a7:09:
a6:98:30:5b:07:33:5d:af:0b:10:4b:c3:22:f1:fe:b1:44:7b:
12:66:22:00:ae:3c:42:63:ee:78:ca:f8:1c:b7:90:21:1b:a2:
37:82:8f:42:5f:ec:d7:bd:eb:64:c9:bd:8a:7c:37:5a:cd:81:
ae:de:ef:b9:93:df:bf:bd:c8:eb:59:71:2d:09:d8:5f:6b:80:
c8:ca:cd:9a:e1:e7:52:ff:3e:bc:81:54:78:09:bb:ba:d3:e8:
04:bf:4c:90:e2:d6:3b:ff:4f:39:49:32:78:0b:6c:5c:7e:e6:
80:21:72:02:23:6b:86:1c:4c:fe:d2:28:e3:ae:33:30:85:dc:
6c:6d:7d:5c:d7:62:1e:c6:dd:38:5b:69:a7:3b:b5:83:1d:83:
f0:f9:38:c5:cb:bf:18:41:50:7f:e4:af:4e:22:33:fc:1c:e5:
da:ac:6b:dc:48:73:28:55:0e:da:ae:25:c1:2c:53:55:98:3a:
47:cc:c5:e2:b3:c4:dc:c1:49:9e:de:f5:42:9c:b0:ba:d2:a9:
4c:bc:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:13 2024 by rpki-client on console.sobornost.net