Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CWnTtDUqJQbjZl8nCyD18nXL4W0.roa
File: CWnTtDUqJQbjZl8nCyD18nXL4W0.roa (raw, json)
Hash identifier: ihVHRWvzxvU5DdMNE2yq0GUu7BN/CCCd7q8cGJ4OvF0=
Subject key identifier: 09:69:D3:B4:35:2A:25:06:E3:66:5F:27:0B:20:F5:F2:75:CB:E1:6D
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018570CBFD15B6C25F5451A62242EEB1DFD7
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CWnTtDUqJQbjZl8nCyD18nXL4W0.roa
Signing time: Mon 02 Jan 2023 04:44:54 +0000
ROA not before: Mon 02 Jan 2023 04:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49549
IP address blocks: 178.250.189.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
2a0f:cdc2::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:fd:15:b6:c2:5f:54:51:a6:22:42:ee:b1:df:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 04:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0969d3b4352a2506e3665f270b20f5f275cbe16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cd:03:cf:e7:57:8a:aa:94:e1:a6:fc:41:84:
0a:e0:38:7d:44:7c:89:da:d3:97:d1:01:1a:a9:ab:
a0:9d:3c:8e:07:2b:d3:e4:90:73:d3:81:c7:d7:49:
34:ab:df:42:73:de:80:f5:f1:a6:42:ad:ee:f0:96:
60:f0:4f:ca:e1:9e:24:d2:08:78:32:86:f5:52:1d:
2d:6b:6b:63:bc:ff:51:b5:26:ad:54:03:89:a0:99:
d8:78:f1:76:9b:f6:96:bb:e6:43:9f:9c:0b:39:11:
4b:82:31:be:e8:2b:f9:64:54:aa:0b:b0:e9:7a:c1:
cc:50:e7:36:3a:03:a3:37:ad:b6:5a:ca:90:2c:76:
b4:24:ed:57:14:f2:d4:fd:c9:81:30:d9:d6:14:3f:
52:b5:d9:04:7b:77:80:60:20:80:d8:b0:85:e2:eb:
09:ad:a3:93:e0:39:d6:50:70:31:ae:0a:54:65:5f:
72:7f:9f:26:e1:36:17:20:ab:7d:c7:44:8e:ac:02:
6f:3e:d3:a7:1c:d5:e5:e6:55:af:4a:48:09:1b:20:
b4:e5:b6:f9:2b:68:33:2e:50:65:b5:b0:9f:13:93:
6b:fa:1f:f9:58:37:6b:43:97:d0:36:58:7f:11:97:
05:35:78:9a:86:4c:93:22:f4:36:f5:d9:1d:11:96:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:D3:B4:35:2A:25:06:E3:66:5F:27:0B:20:F5:F2:75:CB:E1:6D
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CWnTtDUqJQbjZl8nCyD18nXL4W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.189.0/24
193.0.230.0/24
IPv6:
2a0f:cdc2::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f7:e7:c7:33:e2:80:56:bf:e1:f8:c7:3f:fa:d3:d3:90:48:
0c:1a:06:6e:29:c0:76:7e:ae:d0:2e:d9:84:d8:b1:1a:db:2d:
a3:95:75:64:92:6a:b5:4b:9b:b6:a8:03:8a:38:f4:85:62:fb:
0d:bf:23:de:b1:9d:9d:22:71:ee:b4:13:26:4c:39:55:43:f8:
71:6a:1f:2f:cb:64:fc:d1:2a:51:bf:7f:a6:d6:bb:29:cc:45:
75:5d:b3:ee:60:fc:a1:4a:7c:d1:89:e7:40:73:29:da:82:01:
10:78:4e:f8:14:72:31:7b:16:aa:55:23:77:94:60:8f:9c:57:
24:ac:62:46:4a:c8:df:1a:71:bc:88:ce:59:4d:23:cd:00:f0:
99:96:fb:84:77:46:72:ee:24:b5:62:1b:62:ad:62:db:09:b4:
ac:89:e9:8a:dd:65:33:e0:2f:2b:f4:ae:da:fd:ad:44:3a:d9:
38:e2:ce:dc:8b:a5:6b:26:09:b6:93:89:b5:42:44:31:f4:a6:
29:33:55:54:08:bc:5f:c1:31:d0:9f:fa:4b:ac:1f:df:5c:ce:
24:d8:d4:45:2e:b3:e4:c0:54:65:34:bd:47:c1:44:b9:3c:ba:
68:15:f0:21:e1:14:05:5c:9f:5d:9e:cb:21:64:f4:0e:1f:8e:
70:d9:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net