Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/RnU0_Wtty56mYbBvTDXLY4_9zaM.roa
File: RnU0_Wtty56mYbBvTDXLY4_9zaM.roa (raw, json)
Hash identifier: GwGbQ5cAho3uqwmgT4tU+rIBYDL2ld77mcEgCRxTkso=
Subject key identifier: 46:75:34:FD:6B:6D:CB:9E:A6:61:B0:6F:4C:35:CB:63:8F:FD:CD:A3
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 018C1A52792E5494E9A3CF883613C463F092
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/RnU0_Wtty56mYbBvTDXLY4_9zaM.roa
Signing time: Wed 29 Nov 2023 09:04:21 +0000
ROA not before: Wed 29 Nov 2023 09:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59666
IP address blocks: 185.51.208.0/24 maxlen: 24
185.51.209.0/24 maxlen: 24
185.51.210.0/23 maxlen: 23
185.51.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:52:79:2e:54:94:e9:a3:cf:88:36:13:c4:63:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Nov 29 09:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=467534fd6b6dcb9ea661b06f4c35cb638ffdcda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:4a:70:b4:a4:4b:13:f8:83:75:4d:58:9a:
c3:71:3f:1c:0b:32:71:de:54:3d:16:0f:34:12:f3:
67:77:88:3b:d5:44:2e:9a:35:3f:49:bf:ba:24:5f:
5a:79:17:6b:31:bc:44:7f:28:ec:3c:39:a3:cd:39:
ec:25:26:85:7f:cf:b5:6e:3a:c0:14:3f:b7:00:e0:
eb:61:09:2c:f8:48:35:bb:fa:70:0a:b4:62:ca:dc:
9f:14:b5:6f:60:59:a9:ac:27:d5:3e:0d:a5:38:f8:
c1:17:b3:87:28:4a:b6:5d:c7:ee:40:53:3a:ce:78:
61:9d:bd:53:54:d4:0c:c6:d6:93:59:1d:ad:b3:d9:
00:2f:41:96:2f:ea:43:8b:e5:a4:f3:49:f0:79:57:
66:5f:54:db:12:17:3d:df:d2:4a:33:8b:b3:5b:e2:
9c:00:9c:50:1b:99:bd:a2:35:49:de:cc:1f:8f:9c:
a3:29:70:98:51:ea:1e:3f:ba:6b:c5:dd:cf:70:e1:
2e:15:05:4f:eb:0e:c9:0f:26:b9:40:18:85:8a:83:
44:77:58:23:61:bf:5d:4a:57:50:91:7d:d5:f1:b9:
6e:44:8d:13:c4:0d:e1:c5:b5:10:5a:85:9f:c4:18:
1f:58:df:8b:4f:6f:31:0c:03:7c:53:c6:11:ea:8d:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:34:FD:6B:6D:CB:9E:A6:61:B0:6F:4C:35:CB:63:8F:FD:CD:A3
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/RnU0_Wtty56mYbBvTDXLY4_9zaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
64:77:92:db:70:c7:cf:95:b4:e3:09:05:f7:b1:5d:61:3e:c3:
6d:20:81:ce:4f:50:0e:00:2c:6b:0d:48:16:3a:a0:8d:23:0e:
b7:54:82:ca:54:27:0b:e3:82:55:7d:6e:ec:a9:ec:c9:ca:b6:
b4:ba:b2:a5:73:a2:f2:e7:1c:0d:bc:a4:f4:9c:c4:61:d7:26:
a6:5b:a3:61:2a:74:e9:52:ae:2d:15:8a:67:e9:d4:84:82:48:
76:cb:43:ac:3c:a8:b7:f7:78:a6:ac:de:ea:d0:9d:71:38:31:
ad:d7:95:af:e2:2c:bd:95:10:c1:10:08:c7:59:8e:ce:14:2a:
55:0f:68:f3:f7:6f:41:c0:2f:68:c1:b8:96:21:ed:55:a2:13:
c8:ac:f3:2b:ff:fe:29:11:07:2e:2d:a4:79:0d:9f:12:9a:11:
8d:91:a8:f5:59:1a:71:3e:2d:41:c1:d4:bd:0f:a1:fd:02:09:
6b:68:37:f2:ac:ad:d8:9e:da:d6:f3:62:9f:af:40:3a:3a:18:
d1:37:33:8e:b8:bc:ab:d8:b1:40:86:fe:78:a7:a6:e2:38:d9:
11:c0:49:96:81:3f:fc:54:de:86:cf:44:9c:c7:66:9d:5e:b0:
c4:94:aa:50:9b:ce:ed:4f:3f:34:38:41:19:29:82:47:87:ec:
bb:97:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:54 2024 by rpki-client on console.sobornost.net