Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/r_1iEZphm8wgJsS5yxUWwHfpoEc.roa
File: r_1iEZphm8wgJsS5yxUWwHfpoEc.roa (raw, json)
Hash identifier: x6wDW1+sJOvIXWgAEydocHqD93BClOpGmEKgIJ3iJT8=
Subject key identifier: AF:FD:62:11:9A:61:9B:CC:20:26:C4:B9:CB:15:16:C0:77:E9:A0:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 01856D41AEC5278DCC87841A79E24FFFBB3F
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/r_1iEZphm8wgJsS5yxUWwHfpoEc.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206758
IP address blocks: 185.150.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ae:c5:27:8d:cc:87:84:1a:79:e2:4f:ff:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=affd62119a619bcc2026c4b9cb1516c077e9a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:18:70:8b:d2:29:7c:07:e0:e6:06:63:b6:
8b:6b:5b:7b:b1:bb:e7:7e:76:41:20:9b:2a:03:b0:
df:7a:98:07:cd:34:d5:24:4a:b2:ec:a9:39:93:3c:
7a:cd:e9:c8:00:af:d8:ef:bd:30:1c:36:b8:2f:e1:
5b:fa:f3:94:04:ab:07:25:e9:b0:b4:0f:a4:d5:28:
25:a6:b5:c0:76:b1:da:40:5e:5f:f1:8a:c0:70:5c:
59:e6:91:de:ea:84:70:64:8e:ff:b0:df:4c:eb:a2:
f6:72:0f:7e:9b:2d:9b:32:c2:bd:4e:b1:d6:7e:4b:
73:30:2a:14:2f:a2:3e:91:ca:94:35:67:88:48:10:
98:dc:e0:4b:1e:3e:b2:c1:4e:7e:65:3e:54:6b:7d:
10:58:90:79:9e:2c:e4:4a:e4:50:52:15:cc:08:21:
11:e0:e6:c3:cd:23:d4:3d:c7:4d:c5:0d:fa:e7:2b:
28:36:b3:8a:f4:a6:98:07:5a:f5:8e:72:3e:c8:65:
dc:91:3f:b4:99:34:c6:fe:39:b9:3f:1b:c1:fd:1f:
1e:0d:34:90:64:49:0b:16:07:b1:b6:91:53:4e:6f:
cd:a1:66:2a:c9:8b:b5:ac:52:64:a9:6c:f8:d9:84:
e8:9e:c8:95:d9:85:b6:ea:a3:5c:71:14:69:ca:4c:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:62:11:9A:61:9B:CC:20:26:C4:B9:CB:15:16:C0:77:E9:A0:47
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/r_1iEZphm8wgJsS5yxUWwHfpoEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
03:63:09:1b:83:80:87:8f:95:95:81:46:88:e5:2f:12:2c:02:
aa:d1:6f:f8:d0:a3:ac:c4:79:dc:c8:dd:7f:70:cc:9e:2d:9c:
e6:fb:51:ed:2a:72:06:50:e1:ce:c7:85:e2:0f:69:fd:c6:30:
e0:17:fe:cf:73:50:a0:6f:f4:75:67:ef:5d:5b:d0:98:a5:f5:
d6:40:42:08:c1:6a:3c:31:61:21:a5:12:39:e2:98:52:a5:6a:
15:86:71:9e:28:40:b1:43:91:03:df:d8:45:2a:68:53:eb:fd:
2f:9c:93:04:e1:52:3a:70:0b:7e:5e:50:e9:63:50:0a:10:57:
ff:36:5e:43:96:55:13:d3:1e:9a:20:2e:d9:88:4f:67:72:9a:
88:4a:45:10:93:a2:30:8c:b9:a0:6f:40:26:08:38:d6:47:b6:
d1:53:e0:ba:80:e9:7f:99:ce:a7:80:e6:fc:18:7f:c4:0c:db:
d1:22:61:b8:b8:b3:f9:b8:87:85:eb:ac:8c:61:ff:07:e0:01:
ca:16:61:3e:60:c5:30:eb:ae:5e:ad:0b:4d:04:66:4e:dc:67:
7d:66:5f:4f:29:19:34:08:fc:f4:a8:3b:0f:4f:b9:62:08:98:
c9:24:6b:f4:96:16:37:a2:5e:74:3e:7c:69:c2:07:26:b0:e5:
f1:2a:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:13 2024 by rpki-client on console.sobornost.net