Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/2cVS-k8dypTi4Q_XEHjM5OlYkTc.roa
File: 2cVS-k8dypTi4Q_XEHjM5OlYkTc.roa (raw, json)
Hash identifier: DY9P2bMLoBRc2BlE9pBsUMlWPkcJWk6nUgM5syMK0qs=
Subject key identifier: D9:C5:52:FA:4F:1D:CA:94:E2:E1:0F:D7:10:78:CC:E4:E9:58:91:37
Certificate issuer: /CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Certificate serial: 01856BE5C0092007C4B040405911526C986E
Authority key identifier: F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/2cVS-k8dypTi4Q_XEHjM5OlYkTc.roa
Signing time: Sun 01 Jan 2023 05:54:57 +0000
ROA not before: Sun 01 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47663
IP address blocks: 93.187.240.0/22 maxlen: 22
93.187.240.0/24 maxlen: 24
93.187.244.0/24 maxlen: 24
93.187.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:c0:09:20:07:c4:b0:40:40:59:11:52:6c:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Validity
Not Before: Jan 1 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9c552fa4f1dca94e2e10fd71078cce4e9589137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:55:5b:2f:2e:1f:c3:df:42:d4:71:24:03:
fe:80:51:6f:aa:f2:a7:a6:3a:63:84:52:2a:c8:13:
e6:b9:ee:2d:e4:61:a8:30:c9:95:da:a3:70:6f:5d:
e7:f2:af:ab:de:41:f2:14:46:22:e5:07:02:7a:f1:
9a:7d:24:0b:e9:d7:b8:52:eb:59:fc:b8:ff:3d:1a:
c8:2a:f0:77:63:9a:c4:34:fe:7d:d1:de:0e:95:af:
1c:cb:a1:ca:df:f5:ff:e0:1a:15:c4:cc:85:b0:95:
91:75:b0:f8:ee:52:28:f0:5c:76:3f:7b:e9:d9:ef:
b1:55:24:0e:04:e3:41:2a:da:c0:71:b8:99:df:31:
ba:ca:ce:ac:cd:a0:ed:29:55:42:37:ad:2e:c8:4d:
fe:5c:2e:10:7a:fb:eb:e2:37:30:3e:ab:91:41:84:
95:6d:e8:b6:1f:34:e0:90:98:90:77:12:81:e2:60:
17:4d:68:91:45:9b:09:b8:e4:45:2d:ba:a5:c6:94:
e4:dd:2d:46:7d:04:8c:42:ac:25:91:24:dd:0c:7e:
32:78:8a:7c:aa:1f:34:c7:42:7d:b5:b5:61:f7:31:
4e:bb:bf:b9:02:03:29:0c:42:a5:17:9c:09:5b:53:
46:20:e2:d5:e3:d3:37:4a:5c:db:e4:e4:cf:c0:1a:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:52:FA:4F:1D:CA:94:E2:E1:0F:D7:10:78:CC:E4:E9:58:91:37
X509v3 Authority Key Identifier:
keyid:F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/2cVS-k8dypTi4Q_XEHjM5OlYkTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/80rp_1jJNrtLYhvRP6h8V23Yc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.240.0-93.187.244.255
93.187.247.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8a:f2:ea:bd:d6:4d:33:95:a6:30:81:55:e2:6b:2f:75:80:
20:f7:9a:36:a0:1b:d3:bd:9b:c0:f2:e8:35:f2:24:2b:15:91:
9b:aa:96:58:04:2c:15:78:be:d2:83:62:ca:f2:80:8d:97:a7:
1b:c1:22:e7:a4:f2:94:4d:31:c0:ea:f5:f3:74:dc:a7:38:53:
fa:6d:f4:2a:c1:54:37:b6:c0:02:8d:cf:b3:ce:35:5e:4d:35:
42:53:dd:99:e1:3a:41:60:ad:b2:18:b1:db:cc:fd:7f:b7:4b:
e1:9c:6f:4b:ee:a6:2b:01:06:16:c2:fb:51:7b:73:8e:e2:e5:
13:84:6c:c6:4d:9b:63:e4:a2:22:f5:81:11:48:90:ef:5c:00:
74:fd:98:0e:a2:53:db:10:26:74:17:05:45:0c:c7:fe:38:72:
44:6b:b9:95:1c:15:75:d9:38:46:9f:ed:a4:cb:fc:56:97:50:
be:e3:11:0e:88:54:58:8b:ae:57:6a:79:2f:f6:84:bc:c5:b3:
f0:4e:3c:d8:33:3f:90:f0:06:25:bd:9e:49:1c:02:6b:20:57:
f3:c9:cc:84:79:33:b9:cf:f5:03:2d:b5:ce:56:ff:d4:92:3b:
35:3d:81:9e:77:6e:9e:ef:21:ca:47:82:37:0c:c5:df:cc:fc:
cb:1a:bf:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:37 2024 by rpki-client on console.sobornost.net