Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/q-B-WG6DcGs_tjQNHkTu_MO5Tho.roa
File: q-B-WG6DcGs_tjQNHkTu_MO5Tho.roa (raw, json)
Hash identifier: eriIxycpVtoL4HHjIejDtfIPlPEdjona/5Rw/TyloOE=
Subject key identifier: AB:E0:7E:58:6E:83:70:6B:3F:B6:34:0D:1E:44:EE:FC:C3:B9:4E:1A
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 01856FA6EE53BCD78191FEA8F9B8125B5B63
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/q-B-WG6DcGs_tjQNHkTu_MO5Tho.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25581
IP address blocks: 185.170.216.0/21 maxlen: 21
91.207.130.0/23 maxlen: 23
185.34.149.0/24 maxlen: 24
185.34.148.0/22 maxlen: 22
2a00:da60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ee:53:bc:d7:81:91:fe:a8:f9:b8:12:5b:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abe07e586e83706b3fb6340d1e44eefcc3b94e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:08:d0:42:41:b0:18:e8:67:75:1f:55:49:
62:9d:38:06:fd:c9:52:f2:6e:6e:72:fc:c7:b2:6a:
42:b2:35:d7:bd:10:84:37:36:1b:69:b7:1d:44:28:
e0:e4:72:a5:be:ad:a8:45:ce:ab:b0:d6:eb:d6:99:
48:54:d2:b9:a8:04:20:dd:00:41:16:7e:44:98:da:
57:c1:18:00:ad:a6:d8:c6:ca:ab:6b:57:10:a1:f9:
1f:9b:17:bc:b4:44:fa:a4:14:49:45:fb:1d:96:52:
78:48:71:fe:c9:7e:2e:74:9c:7e:12:f5:37:36:06:
b4:0a:c0:47:09:37:dd:2c:96:bb:38:39:3e:32:f6:
0a:31:b1:fd:d3:f3:cf:63:34:8a:91:dd:33:5d:aa:
5c:da:d1:37:89:33:3d:f2:b5:6d:53:61:73:0b:d5:
dd:ac:00:e6:b1:43:46:4a:ec:17:b1:af:f6:fa:6b:
b8:2a:c8:4d:64:1d:0f:75:3d:55:ac:0f:14:83:6f:
0e:86:4c:4b:78:d6:f7:e8:27:91:f3:83:e8:53:1d:
14:05:7a:85:bc:d4:61:e1:b4:a3:20:05:7a:97:0f:
be:c8:05:93:ef:f9:d2:c5:97:a9:75:ca:33:6b:04:
d0:97:a4:61:7c:85:ae:27:76:46:6a:7a:55:3f:53:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:7E:58:6E:83:70:6B:3F:B6:34:0D:1E:44:EE:FC:C3:B9:4E:1A
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/q-B-WG6DcGs_tjQNHkTu_MO5Tho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.130.0/23
185.34.148.0/22
185.170.216.0/21
IPv6:
2a00:da60::/32
Signature Algorithm: sha256WithRSAEncryption
16:de:fe:a2:f5:13:cb:19:d9:a1:e5:6f:66:8a:2b:58:63:51:
5f:fb:05:4b:ba:51:6e:27:52:1f:d0:77:36:06:e5:5d:d5:09:
c6:1e:11:da:1b:b4:e6:04:c7:e6:54:51:63:7b:bc:02:cd:92:
b0:30:fa:c3:b5:42:f4:0e:49:8f:ba:43:f1:5a:ad:1b:07:7d:
a6:fa:62:d6:b0:2d:bb:79:4e:d8:cf:5d:cd:47:64:71:78:da:
03:63:ad:18:8e:6c:f7:69:2a:31:7f:16:df:a6:65:3b:62:04:
ec:f2:4f:32:47:97:53:d2:7b:be:66:f3:91:fb:d3:b7:b8:47:
b0:5d:fa:a7:15:7e:de:bc:c7:95:fc:7b:da:94:48:1d:67:3b:
86:d0:65:d2:82:e6:9d:b5:58:36:74:11:5a:5c:bf:f5:5b:53:
bf:d8:b4:1b:3f:a4:dd:b1:21:fa:2a:80:6a:3b:59:41:06:11:
74:d9:0a:3a:0d:25:e5:1f:ce:14:76:42:38:33:80:60:e8:e9:
83:cc:d8:bd:74:93:7b:2a:a8:9a:b7:52:40:88:ba:13:5a:bc:
b7:b8:71:b8:21:8f:4d:7d:70:e2:7f:cb:72:1a:d1:b6:f4:f1:
92:8c:bd:d2:5e:05:98:67:99:5b:25:b2:16:cc:1a:ec:aa:88:
86:28:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:44 2023 by rpki-client on console.sobornost.net