Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/pNrrNUPP2YqedWV18TUqHoO9BTU.roa
File: pNrrNUPP2YqedWV18TUqHoO9BTU.roa (raw, json)
Hash identifier: VS2GOfiKU3v2XlIbkZdjy9Cme+EOZ+BY/yh8R/G5rxE=
Subject key identifier: A4:DA:EB:35:43:CF:D9:8A:9E:75:65:75:F1:35:2A:1E:83:BD:05:35
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 018C5B6D69FFE73DF43BE41A53C23B789C00
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/pNrrNUPP2YqedWV18TUqHoO9BTU.roa
Signing time: Tue 12 Dec 2023 00:29:06 +0000
ROA not before: Tue 12 Dec 2023 00:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25160
IP address blocks: 185.120.204.0/22 maxlen: 24
158.41.64.0/18 maxlen: 24
193.221.128.0/19 maxlen: 24
165.65.0.0/16 maxlen: 24
206.245.208.0/20 maxlen: 24
206.245.224.0/19 maxlen: 24
91.238.221.0/24 maxlen: 24
185.237.48.0/22 maxlen: 24
185.28.240.0/22 maxlen: 24
144.98.0.0/16 maxlen: 24
82.163.192.0/19 maxlen: 24
193.0.176.0/23 maxlen: 24
5.10.144.0/20 maxlen: 24
194.8.254.0/23 maxlen: 24
2a00:e346::/32 maxlen: 48
2a00:e347::/32 maxlen: 48
2a00:e345::/32 maxlen: 48
2a00:e340::/29 maxlen: 48
2a00:e342::/32 maxlen: 48
2a00:e340:3::/48 maxlen: 48
2a00:e341::/32 maxlen: 48
2a00:e344::/32 maxlen: 48
2a00:e344:3f00::/48 maxlen: 48
2a00:e340::/32 maxlen: 48
2a00:e343::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:6d:69:ff:e7:3d:f4:3b:e4:1a:53:c2:3b:78:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Dec 12 00:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4daeb3543cfd98a9e756575f1352a1e83bd0535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:6f:6e:56:5a:24:a8:23:5f:07:15:b5:32:
97:dc:d3:71:ea:e4:b5:f3:8e:59:27:db:60:47:03:
66:b9:8b:97:4e:e7:55:13:25:5a:ba:44:af:65:14:
a2:51:cb:ba:be:e8:c0:7d:77:ce:da:40:c9:cb:e5:
8d:45:bc:7d:b7:9a:24:cb:b1:fb:27:13:7b:5e:06:
39:c9:36:60:bb:e0:f6:ce:b7:bc:93:58:cf:97:42:
f9:66:c6:18:89:2d:0f:b8:0b:c1:43:a1:9d:9b:c8:
c9:54:f4:90:e2:9f:b7:21:cf:fd:45:ff:74:ec:1d:
c3:8c:cd:28:8f:6c:46:df:1d:e1:2b:bb:46:dd:df:
68:c4:ef:1d:d4:fa:f3:a3:c1:fb:51:d4:d6:70:3d:
1d:07:9c:db:c7:28:42:f8:51:9b:2e:30:01:8d:6b:
88:58:49:35:d5:ac:fc:d5:d5:05:7a:da:29:58:d6:
68:c6:b5:6e:91:63:84:ab:d5:63:77:d6:01:36:34:
bc:42:ab:3f:46:45:76:5f:ee:a7:3b:b8:90:87:a9:
94:b8:4e:b7:ea:01:a9:46:b9:80:3f:bf:26:c7:e2:
66:f1:ce:05:40:30:e2:8c:cc:4e:f9:25:9e:1c:c6:
bc:b5:08:07:64:08:04:97:3b:d3:a9:9d:63:12:2c:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DA:EB:35:43:CF:D9:8A:9E:75:65:75:F1:35:2A:1E:83:BD:05:35
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/pNrrNUPP2YqedWV18TUqHoO9BTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
82.163.192.0/19
91.238.221.0/24
144.98.0.0/16
158.41.64.0/18
165.65.0.0/16
185.28.240.0/22
185.120.204.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
206.245.208.0-206.245.255.255
IPv6:
2a00:e340::/29
Signature Algorithm: sha256WithRSAEncryption
aa:a9:b1:d8:c0:52:cf:fe:01:57:b4:a6:d5:3b:26:9a:ba:35:
cb:a8:df:9b:0f:de:2e:01:b9:75:78:db:be:84:a7:dd:e6:64:
7e:03:8f:cc:d3:a0:a2:b3:39:f1:b8:fe:f4:fe:4d:b6:7e:52:
39:62:f4:cb:c4:b2:82:e0:70:87:42:e8:3a:a1:00:00:2b:d0:
4a:45:9d:c9:4f:10:c5:1a:47:6c:9e:08:aa:a7:71:36:c1:3a:
c5:73:8d:6b:7f:0a:8b:42:9c:9f:2f:fa:73:48:7e:aa:65:53:
1b:b1:ef:a1:d6:d7:a4:2f:86:f3:5f:67:13:a8:f0:25:24:2d:
96:6c:05:c8:2c:11:53:7b:06:13:64:cd:a5:80:4d:22:b3:3d:
59:ba:5a:dd:e7:ae:1c:3b:2e:9a:58:22:f4:f5:5f:57:10:b0:
06:a8:91:f1:c8:24:50:11:41:a1:49:75:d0:58:63:63:c8:21:
6a:45:2d:1d:dc:83:92:15:fe:f6:25:5e:86:d7:5c:71:62:e2:
69:39:b5:e7:e0:ea:79:b1:f1:50:c4:91:30:cf:89:59:05:24:
91:7a:e0:bb:2b:c5:9b:85:6f:e3:9b:1f:e1:07:17:f1:90:aa:
76:28:71:69:27:5e:3f:27:43:cc:30:e7:4f:ed:4f:1a:65:eb:
ac:87:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:02 2024 by rpki-client on console.sobornost.net