Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/eb3FsfNucAXftExbdx4C7LeuLKk.roa
File: eb3FsfNucAXftExbdx4C7LeuLKk.roa (raw, json)
Hash identifier: HqJjfG6roddXDq19KNoAk8mP+LtHf1cm2Hf5MJPHKjk=
Subject key identifier: 79:BD:C5:B1:F3:6E:70:05:DF:B4:4C:5B:77:1E:02:EC:B7:AE:2C:A9
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 01862B7BA6FB37EB348DFD36CDB0AA2D1823
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/eb3FsfNucAXftExbdx4C7LeuLKk.roa
Signing time: Tue 07 Feb 2023 10:46:09 +0000
ROA not before: Tue 07 Feb 2023 10:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205644
IP address blocks: 185.68.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:7b:a6:fb:37:eb:34:8d:fd:36:cd:b0:aa:2d:18:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Feb 7 10:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79bdc5b1f36e7005dfb44c5b771e02ecb7ae2ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:c1:5b:42:bb:69:85:57:c5:39:4f:a6:33:
f5:a3:64:52:9e:74:d5:03:4b:11:3c:a7:65:64:e3:
19:83:b0:45:59:13:df:1e:2f:fa:40:e0:60:c3:d0:
4c:07:af:7b:69:f1:f0:7e:72:8f:36:d7:51:b2:b2:
d9:46:38:5a:4a:68:c4:43:5b:39:92:33:92:a2:bd:
ac:41:ba:e9:7d:0a:0f:f0:7b:c6:a6:d0:55:d4:e8:
82:91:89:fd:f6:7f:92:ee:30:4b:0b:8d:79:5a:4b:
45:0a:d2:bc:91:d6:dd:71:5c:04:8c:8e:05:9a:2f:
e7:49:34:8f:64:75:ef:07:7e:f4:e5:77:b7:1e:93:
b4:f7:11:1f:29:91:54:2f:18:71:40:ea:ce:1e:d7:
64:3e:f5:76:01:03:92:11:b8:d8:8d:b7:e8:a7:48:
df:ef:e8:9f:64:41:39:82:6f:ee:9b:c3:b4:42:92:
dd:ee:59:a3:03:9c:e3:a8:ff:f8:ed:a1:62:c0:30:
14:48:3c:71:5f:8a:50:b6:db:64:60:6c:68:83:f0:
2d:ae:da:ac:a7:73:c4:be:bb:b5:73:a9:e8:99:1b:
21:f4:02:96:f1:28:27:b7:d2:f3:2a:c8:2d:9b:c4:
d8:80:3e:b7:7b:1a:79:11:ec:4c:65:f8:4e:15:bc:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:C5:B1:F3:6E:70:05:DF:B4:4C:5B:77:1E:02:EC:B7:AE:2C:A9
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/eb3FsfNucAXftExbdx4C7LeuLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4f:32:54:68:49:3e:f9:e5:5c:6c:3b:9c:07:08:e8:c9:be:
48:8a:46:99:32:f5:ba:1e:b1:84:6f:db:4d:d5:b2:9c:f5:a9:
0f:9c:a2:45:20:d5:02:14:ed:d4:f5:fb:87:6d:40:51:aa:ac:
01:27:ff:58:1a:d1:00:37:9e:bc:0a:d5:3d:a0:8c:dd:7f:cf:
65:d5:1a:d9:41:4d:c0:5c:ea:3f:5a:3c:e0:c3:bf:da:15:37:
91:51:ce:a1:7b:6d:a2:60:a8:ee:9b:6e:29:08:45:ea:8e:82:
b5:2a:d6:3f:cd:1b:13:93:aa:a0:c2:69:36:34:37:b9:98:22:
c8:f3:fc:97:02:9a:4a:c1:ce:7e:0e:5b:50:ac:68:c8:9e:1e:
be:4e:41:8f:25:4f:cd:ee:a2:49:65:1d:ec:c1:0c:22:b9:4e:
be:1e:44:fb:1f:9f:7e:db:24:04:06:be:f4:0a:76:d4:79:7d:
4c:35:3a:0c:1e:af:9c:51:48:20:42:82:db:50:36:92:cb:45:
70:36:15:b3:f8:ac:57:7a:94:10:31:37:45:3b:1f:fd:c0:19:
7c:22:22:98:a3:64:0d:ca:b5:3b:2b:1f:b0:38:9d:03:ff:d9:
9e:06:63:3c:d5:0c:8d:f5:2d:96:ea:a1:da:a3:41:4a:f8:41:
20:4e:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net