Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/pN_E-x8g9KQLYu-LJSIs8jN0bqU.roa
File: pN_E-x8g9KQLYu-LJSIs8jN0bqU.roa (raw, json)
Hash identifier: 2mzIDVc7bwhygSEfbf4l8y6EjT+pVnQfQ3WLpdYgpJw=
Subject key identifier: A4:DF:C4:FB:1F:20:F4:A4:0B:62:EF:8B:25:22:2C:F2:33:74:6E:A5
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 018C52D7C1795A0A6E706B4292B27CBCF2F5
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/pN_E-x8g9KQLYu-LJSIs8jN0bqU.roa
Signing time: Sun 10 Dec 2023 08:28:40 +0000
ROA not before: Sun 10 Dec 2023 08:28:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42428
IP address blocks: 212.11.164.0/24 maxlen: 24
212.11.165.0/24 maxlen: 24
212.11.162.0/24 maxlen: 24
212.11.163.0/24 maxlen: 24
212.11.160.0/23 maxlen: 23
212.11.166.0/24 maxlen: 24
212.11.171.0/24 maxlen: 24
212.11.172.0/24 maxlen: 24
212.11.170.0/24 maxlen: 24
212.11.167.0/24 maxlen: 24
212.11.168.0/23 maxlen: 23
212.11.178.0/23 maxlen: 23
212.11.176.0/24 maxlen: 24
212.11.177.0/24 maxlen: 24
212.11.174.0/23 maxlen: 23
212.11.173.0/24 maxlen: 24
87.230.160.0/19 maxlen: 19
212.11.180.0/24 maxlen: 24
87.230.128.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:d7:c1:79:5a:0a:6e:70:6b:42:92:b2:7c:bc:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Dec 10 08:28:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4dfc4fb1f20f4a40b62ef8b25222cf233746ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:4e:8a:19:43:27:e4:08:ee:49:40:23:70:
f0:e0:b7:65:71:f8:c7:20:70:f0:53:51:5e:af:be:
67:f5:a2:ee:48:c2:34:b6:cc:d9:f6:59:5a:f1:e6:
2c:87:29:f6:10:f4:0c:fb:7e:87:37:79:1c:6c:c8:
0b:da:7b:41:3e:18:53:79:ec:1b:9d:96:c5:c1:b3:
10:de:fc:24:40:06:db:b7:8e:6c:26:c7:8a:a9:dd:
78:5c:52:8e:6b:69:65:e7:85:80:44:a2:97:5d:76:
00:11:29:ac:39:7a:2a:78:7d:11:4e:7b:9c:76:d4:
94:4d:c5:4e:95:de:32:a3:91:df:41:8a:d9:c3:89:
86:18:56:f5:1f:c0:68:09:0c:b5:5c:7b:40:7e:ea:
ba:fc:2e:98:b9:ef:1f:18:15:6e:12:5a:b0:12:b4:
ee:cf:93:57:ee:33:9a:8e:76:18:55:f2:c0:2d:03:
02:36:fc:db:6e:dc:6d:3a:b8:0f:42:da:2f:d1:b7:
f8:27:26:fe:03:70:dd:71:4e:36:1a:ee:49:2a:93:
48:d7:70:eb:95:53:57:34:f8:a8:03:c2:08:13:28:
02:95:d1:93:db:44:e4:b1:5e:5b:a6:de:90:89:ad:
8e:db:33:e7:16:16:06:e9:4c:68:5d:75:cf:77:39:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DF:C4:FB:1F:20:F4:A4:0B:62:EF:8B:25:22:2C:F2:33:74:6E:A5
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/pN_E-x8g9KQLYu-LJSIs8jN0bqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.230.128.0/18
212.11.160.0-212.11.180.255
Signature Algorithm: sha256WithRSAEncryption
7d:ca:dd:d5:78:20:1f:f4:84:24:25:ac:8c:ec:6d:33:49:22:
a6:16:be:1d:6a:c5:69:86:bf:89:5b:1f:4b:b8:25:b0:c8:2c:
f8:56:94:a2:bc:58:1b:ac:52:4b:00:f0:25:14:6a:f6:e4:52:
0c:c7:3b:b1:76:81:f4:d9:fe:bf:b9:ce:97:d2:df:b8:c1:0a:
03:89:e4:b0:b8:32:fd:6c:a9:0d:ff:0a:9e:3c:19:6f:7b:c3:
d1:d7:80:53:57:48:6d:16:32:89:2e:90:de:bb:b7:d4:12:46:
f0:ba:ba:bb:a7:e2:9d:47:88:ef:6c:6b:19:6f:e7:97:7d:64:
32:b6:6f:07:4e:f8:69:46:06:9e:69:4f:8d:b5:f7:69:f2:b6:
91:b8:ae:b2:4e:3d:db:7f:5c:bb:50:bc:f9:cf:6e:b3:75:58:
ba:52:bb:b9:f3:7b:9b:41:56:a7:b2:2a:66:21:f1:76:63:ea:
d7:15:2d:2d:75:32:2a:ec:4d:fd:93:1a:9b:46:cd:9a:05:2e:
ed:e3:8a:cd:92:06:87:4a:4a:52:7f:3c:de:1a:f6:c0:57:78:
06:2a:f6:9c:a3:ca:4b:48:f7:5d:ec:a4:2b:f9:90:02:64:41:
b5:4c:35:f0:2f:f7:d5:cc:44:db:f7:bb:0d:35:d5:b4:7e:cc:
e4:7b:f4:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net