Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fuKKRshjm2WVnFdrHcziSJSUqIM.roa
File: fuKKRshjm2WVnFdrHcziSJSUqIM.roa (raw, json)
Hash identifier: IQu6x6qVIpfvX9MVNoU9sBlbbC2pXiHOQX5M/UvlbJc=
Subject key identifier: 7E:E2:8A:46:C8:63:9B:65:95:9C:57:6B:1D:CC:E2:48:94:94:A8:83
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 01892160F93E4FDDC11178FFB67F82F6127F
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fuKKRshjm2WVnFdrHcziSJSUqIM.roa
Signing time: Tue 04 Jul 2023 14:49:10 +0000
ROA not before: Tue 04 Jul 2023 14:49:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.82.0/24 maxlen: 24
155.140.83.0/24 maxlen: 24
155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
159.50.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:60:f9:3e:4f:dd:c1:11:78:ff:b6:7f:82:f6:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jul 4 14:49:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee28a46c8639b65959c576b1dcce2489494a883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:78:1a:07:09:e0:3f:9a:ae:2f:e4:fb:e8:
20:03:2b:95:ed:90:d1:26:7a:f1:b4:39:2d:f0:b6:
1e:e4:7d:21:46:8d:30:a0:78:53:fd:01:4b:79:e3:
5d:2b:33:86:44:dd:ad:b1:bc:5e:d9:bd:10:22:87:
c9:69:70:9c:8c:6b:95:59:70:36:b0:3c:e3:e5:37:
29:17:47:6b:1e:0d:95:4a:d4:5a:81:96:c5:72:51:
65:a6:b8:99:52:0f:e3:88:98:31:02:e2:17:b2:bc:
da:57:55:62:82:ea:86:b2:53:74:e8:0b:14:17:f3:
25:a6:1e:aa:d7:f9:0d:94:46:5f:38:ea:97:c5:d6:
94:ff:28:2f:61:59:73:a5:28:36:d4:f1:17:da:f8:
57:e2:6b:48:dd:2c:64:76:14:27:bc:77:ad:1f:3e:
bb:ea:97:b3:80:8d:c1:97:8f:eb:6d:f2:cb:a8:42:
89:ba:0b:90:c5:25:30:fe:70:60:8b:20:63:a2:40:
3b:0a:84:5f:1e:8d:aa:2a:39:83:17:d0:82:bf:22:
45:96:d4:c4:68:3c:8b:d1:1a:35:25:56:92:0b:ed:
96:ef:93:d4:46:99:b6:ca:f0:17:69:ac:5a:77:fd:
e1:cc:06:33:00:6c:2d:d1:21:e4:0d:d7:f6:3e:93:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:8A:46:C8:63:9B:65:95:9C:57:6B:1D:CC:E2:48:94:94:A8:83
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fuKKRshjm2WVnFdrHcziSJSUqIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.82.0/23
155.140.90.0/23
159.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:52:a0:dc:d6:20:c2:34:b8:51:e7:e0:85:e1:cd:3b:51:a5:
82:ae:64:d5:3c:89:d3:b9:73:54:fd:8d:19:74:94:fb:a3:59:
e2:d9:60:a1:c4:eb:65:f2:b9:92:0d:cc:a1:c2:15:cb:6a:0e:
86:1e:c4:d2:3d:6b:65:ea:29:dd:0e:09:1c:e4:65:38:59:82:
a3:42:db:13:3e:c2:05:02:81:6b:40:a1:b6:fb:76:62:e8:81:
0d:10:cc:a0:3f:84:46:63:ea:38:64:3b:88:da:37:ac:bc:16:
82:8d:8e:dd:bb:15:96:61:b3:f5:b2:f7:bc:7d:a6:53:7b:6f:
c3:74:b7:58:97:34:9b:2b:5d:1c:e9:25:8c:89:da:15:99:f8:
b8:73:7d:be:a2:5a:26:b8:44:4d:79:f9:24:a8:86:ad:e1:51:
de:c9:c6:bc:c9:37:44:44:45:76:50:1c:ba:48:99:41:8e:8b:
65:b8:5e:ab:df:bf:ca:29:04:47:e5:49:f5:a4:11:5e:d7:75:
32:9a:39:ff:48:ba:6f:4e:25:59:e6:ce:dd:c4:7e:cd:f1:0f:
e6:f4:31:71:d7:8b:34:a5:e0:e6:2d:fd:5e:e6:ba:b1:4a:8b:
e7:23:8f:b0:8d:38:81:c7:d2:8c:10:42:9c:fe:7f:28:01:ac:
3e:a2:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net