Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/lldSrF-8fhZqIC1DLhTkaOVvr1c.roa
File: lldSrF-8fhZqIC1DLhTkaOVvr1c.roa (raw, json)
Hash identifier: PO5oqrjLIgKLfPsl7yQPTxUeFYiHIIaDSR7wEjAKkys=
Subject key identifier: 96:57:52:AC:5F:BC:7E:16:6A:20:2D:43:2E:14:E4:68:E5:6F:AF:57
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 018903DA7C44B8F581749F5F384A6712FF03
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/lldSrF-8fhZqIC1DLhTkaOVvr1c.roa
Signing time: Wed 28 Jun 2023 21:13:17 +0000
ROA not before: Wed 28 Jun 2023 21:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51449
IP address blocks: 82.144.136.0/24 maxlen: 24
82.144.143.0/24 maxlen: 24
82.144.146.0/24 maxlen: 24
82.144.147.0/24 maxlen: 24
2a02:d07::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:da:7c:44:b8:f5:81:74:9f:5f:38:4a:67:12:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jun 28 21:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965752ac5fbc7e166a202d432e14e468e56faf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:9f:b4:5c:42:60:44:94:75:0f:8c:13:6e:
d6:e2:07:57:ac:19:34:97:d8:6f:f8:50:ef:cb:1e:
71:d6:ee:37:f2:20:c4:b8:47:f9:2e:f0:2d:96:ee:
8d:c6:39:15:68:22:1c:36:36:49:ec:77:40:10:ed:
da:3b:d0:4f:7e:b4:07:69:16:e0:d0:af:75:70:ce:
c5:d2:c1:36:e8:8f:c4:d5:88:9a:4a:16:80:13:37:
6f:48:57:ea:94:d7:d7:d4:c4:da:38:66:d9:85:7f:
05:b5:19:70:f2:06:63:fa:28:91:e5:72:0d:9f:bc:
36:9a:09:16:fe:a1:e2:6a:61:c3:ac:08:f1:e2:86:
56:a8:bf:1b:c6:24:72:96:4e:92:c7:50:b9:fc:90:
93:d0:8d:21:3b:c5:48:71:ac:83:37:bc:50:e0:da:
58:7d:a0:a8:f6:e5:8a:6c:0c:e3:e6:94:04:d5:c0:
a3:32:84:a8:d9:b4:57:b0:70:5c:7f:5f:db:0a:b3:
e6:31:5b:8c:b5:d2:03:57:d8:a3:c5:75:83:e8:b0:
1b:9a:55:3a:df:f8:40:33:f9:fa:60:c6:bd:87:96:
44:d4:ae:17:3c:a6:53:d8:28:fd:dc:2f:02:f4:80:
bb:31:67:dc:c3:76:f4:9f:26:32:fe:9c:cc:c9:c8:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:57:52:AC:5F:BC:7E:16:6A:20:2D:43:2E:14:E4:68:E5:6F:AF:57
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/lldSrF-8fhZqIC1DLhTkaOVvr1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.136.0/24
82.144.143.0/24
82.144.146.0/23
IPv6:
2a02:d07::/32
Signature Algorithm: sha256WithRSAEncryption
23:ae:cf:7c:86:67:a4:ea:35:f5:d0:d0:83:20:5b:8f:f9:7a:
e4:95:59:cc:16:61:02:e8:4f:8f:97:fb:b7:3e:e0:ac:32:a2:
9d:35:41:1c:34:f1:43:60:83:18:3c:42:99:0d:44:82:51:84:
ce:48:04:81:24:52:31:73:20:71:f5:49:bc:36:f5:f3:bc:22:
cf:ec:60:f4:6a:80:22:e9:4c:27:ed:57:22:80:e9:53:fb:37:
11:c1:1e:fc:d2:5a:e4:2b:67:99:e1:a3:9b:ee:3d:12:ae:3f:
92:1f:a6:d6:f0:d6:86:2f:62:a7:d1:ab:b7:96:a7:94:04:05:
29:ad:9a:39:a0:0b:44:be:e0:3d:70:3d:fc:ac:1d:81:da:bd:
10:11:32:19:3f:86:f3:26:a9:90:aa:66:14:25:c0:81:9b:b9:
61:b3:c8:4d:da:88:77:5e:77:9e:af:bf:32:65:cc:e1:6e:5f:
8a:14:ff:1c:a7:53:ff:82:32:26:63:d5:1f:84:17:1c:c9:08:
62:e2:c6:6b:69:49:12:ca:52:db:83:7b:53:6f:07:00:83:ef:
c3:bb:ff:03:fe:a1:d5:05:4e:7f:ed:2e:8c:d5:30:ba:c5:db:
76:77:c9:0d:5b:50:0a:42:db:c5:e6:ee:f1:85:49:07:a8:b3:
a0:bf:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:31 2024 by rpki-client on console.sobornost.net