Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/_Y-yz9kORhD1nh16XSn-QlxAD7w.roa
File: _Y-yz9kORhD1nh16XSn-QlxAD7w.roa (raw, json)
Hash identifier: AcDbxt9ml39EerrC5HfLNCREvmlnG0zzsbVFtvqa6X4=
Subject key identifier: FD:8F:B2:CF:D9:0E:46:10:F5:9E:1D:7A:5D:29:FE:42:5C:40:0F:BC
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 01856ED4A1CCFA4CC01C39985F7DC5D369FC
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/_Y-yz9kORhD1nh16XSn-QlxAD7w.roa
Signing time: Sun 01 Jan 2023 19:35:06 +0000
ROA not before: Sun 01 Jan 2023 19:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48926
IP address blocks: 37.143.112.0/21 maxlen: 21
185.75.116.0/22 maxlen: 22
178.248.248.0/21 maxlen: 21
94.142.232.0/21 maxlen: 21
2a03:a900::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a1:cc:fa:4c:c0:1c:39:98:5f:7d:c5:d3:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jan 1 19:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd8fb2cfd90e4610f59e1d7a5d29fe425c400fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:93:ca:0e:7f:1d:87:e9:6b:ed:6d:48:66:
6c:01:a8:0a:ff:3a:0e:ad:f8:7f:d2:bf:e7:8f:c1:
e7:0f:d7:24:62:3c:94:3d:3e:b5:9f:6a:9b:31:d5:
8d:32:9e:7b:0d:36:ac:37:55:22:59:1e:b0:e0:eb:
85:9b:a4:e3:b7:ec:f1:af:7a:c5:30:93:71:66:fc:
b3:d2:1b:dd:f5:ce:f9:7d:74:9b:ea:6a:2e:6a:ef:
9e:05:9b:41:d9:d1:be:da:00:21:a1:3b:64:2a:bc:
5c:c5:12:0e:64:9d:15:75:e1:88:06:f4:ad:e3:4a:
ae:cf:24:88:0d:4f:cf:e8:2f:b9:db:1e:96:8c:7a:
72:ce:f1:ac:a5:fc:93:c4:31:95:e7:9f:4f:7f:ef:
64:7e:fc:92:74:45:b9:9c:43:f6:f5:32:5b:e5:84:
73:46:b4:e7:8b:f5:30:5c:e1:91:85:e0:69:70:4d:
2c:d1:38:d3:d2:80:d4:cc:68:96:d3:f4:e1:14:26:
35:52:f3:e2:f4:0f:5f:ba:9d:22:be:75:6b:5a:c7:
6b:a1:1c:98:77:44:9c:20:c7:60:1c:ed:be:4c:5b:
0b:6e:2d:5b:90:0e:b0:c5:18:f1:e8:12:f5:26:4a:
09:e3:86:2c:e7:6e:16:c8:b3:3f:60:1d:24:4b:15:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:B2:CF:D9:0E:46:10:F5:9E:1D:7A:5D:29:FE:42:5C:40:0F:BC
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/_Y-yz9kORhD1nh16XSn-QlxAD7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.112.0/21
94.142.232.0/21
178.248.248.0/21
185.75.116.0/22
IPv6:
2a03:a900::/32
Signature Algorithm: sha256WithRSAEncryption
08:72:5a:2b:d2:54:d3:64:64:72:ff:e1:9f:64:1d:d7:fa:95:
bf:fe:dd:1f:7d:60:ae:77:08:3b:8a:3a:8a:a6:fc:6b:2b:5d:
88:00:b2:66:bb:d9:46:84:a7:a5:16:bf:ef:0b:45:6b:c1:c8:
da:a5:82:5c:9d:15:06:da:2e:d4:cc:f8:77:fa:15:50:31:19:
cc:d5:4b:7b:51:2b:64:ea:58:e9:9a:7e:a7:0b:bd:73:93:1e:
b3:63:f3:fa:10:06:45:45:fb:49:9f:b7:6d:85:77:41:db:ae:
3b:c9:04:7d:71:35:f9:07:37:8d:24:89:f0:7f:3a:74:a4:1d:
59:5d:3c:8d:07:05:cd:79:2a:e5:9e:42:88:d3:61:08:0d:28:
01:b4:28:14:2c:08:53:2b:4b:01:af:a0:81:96:f8:b7:83:d9:
44:c8:4a:2f:c7:ce:8e:1b:4d:25:49:c7:35:78:b7:d9:fd:65:
4d:ba:60:2d:0e:e8:dc:0c:ab:88:75:f8:43:f0:72:77:79:ed:
16:ca:8f:df:d1:3b:93:50:75:da:84:71:c5:21:b9:3b:b3:0f:
6a:98:83:a3:7d:93:34:3c:82:75:9e:ef:71:2d:88:51:5a:3d:
59:40:dc:9f:02:8f:e4:8e:da:e3:c8:7a:e6:71:4a:dc:e9:01:
bf:1c:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net