Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/v1EcVcnDMOs0r_65PuQKC8xLowE.roa
File: v1EcVcnDMOs0r_65PuQKC8xLowE.roa (raw, json)
Hash identifier: KXaxepDvpQiomRsD3BUjpZIOqAFwhRJ41//qMtdWAsU=
Subject key identifier: BF:51:1C:55:C9:C3:30:EB:34:AF:FE:B9:3E:E4:0A:0B:CC:4B:A3:01
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 018570398E19C6E78D264CB434BEAE156771
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/v1EcVcnDMOs0r_65PuQKC8xLowE.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205187
IP address blocks: 185.226.248.0/22 maxlen: 24
2a0c:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:8e:19:c6:e7:8d:26:4c:b4:34:be:ae:15:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf511c55c9c330eb34affeb93ee40a0bcc4ba301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:4d:df:80:04:89:1a:4b:88:e3:f5:70:84:
6f:29:8d:4d:35:30:4c:3e:17:94:a2:0a:c8:c3:38:
22:b7:81:80:bc:d5:7f:d7:a6:6c:1e:d6:5c:82:f8:
44:99:6a:d5:a5:6d:a2:d5:0c:35:3a:18:a0:43:8e:
8a:21:d3:fc:4a:47:fa:cc:f1:f3:a5:a5:b0:60:3e:
ce:e0:19:b3:43:ed:1a:14:27:d5:02:90:8b:94:1c:
90:19:e1:1c:8b:bf:20:a7:27:f8:f8:a3:7b:b2:c6:
0a:80:63:de:33:7e:95:fc:9c:14:90:c8:7a:96:ad:
6c:80:88:12:a5:fc:77:43:18:d2:3d:13:60:41:d7:
f8:be:ba:21:fb:d8:da:2d:de:70:d6:35:14:30:53:
69:6b:fe:0a:a3:c2:2c:ae:cc:97:58:ed:70:ab:db:
29:bc:e2:24:21:b1:ce:d7:d9:49:38:12:b2:7b:91:
2a:17:a9:f2:99:3d:fc:9e:df:1c:6c:d0:57:48:68:
8a:c2:98:da:60:b3:9f:ae:98:99:1a:bb:1f:eb:fb:
66:8f:82:53:6e:26:2f:aa:e5:99:64:61:a3:a9:05:
27:2b:94:09:58:4f:85:c3:46:c4:c0:79:5a:75:14:
07:2d:4a:76:b0:51:39:77:76:8b:03:45:ca:74:b1:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:1C:55:C9:C3:30:EB:34:AF:FE:B9:3E:E4:0A:0B:CC:4B:A3:01
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/v1EcVcnDMOs0r_65PuQKC8xLowE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.248.0/22
IPv6:
2a0c:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
95:92:df:13:5f:de:74:bb:64:bb:51:dd:76:6a:ce:30:94:be:
3e:fa:60:13:6b:c6:24:be:20:bd:f0:ad:9b:db:c5:63:68:f8:
8d:3a:c1:ad:e0:aa:e1:24:b9:25:02:9c:2a:ac:a5:03:e4:92:
56:a1:44:7b:02:6a:cb:08:c1:02:58:42:49:57:3d:f9:5f:d7:
10:48:c9:e8:7b:1f:b4:69:2f:ef:33:77:02:39:7a:a3:83:7a:
6a:be:2d:96:ff:5d:09:11:64:22:59:1f:6a:ac:cf:4f:27:87:
ac:c2:f2:0c:0f:91:19:bf:ea:f2:7e:84:c1:a0:d0:45:b3:77:
16:07:56:e5:2e:06:a0:fe:97:21:09:9d:db:c5:9e:d6:88:f5:
86:9c:e1:5e:bf:6a:02:71:12:d7:10:b8:c5:34:02:c7:23:59:
23:5f:15:5f:2f:db:6e:e7:fc:bf:c4:eb:65:26:aa:b4:74:a4:
84:bd:8c:04:b1:0a:1b:37:cd:04:7a:47:cc:be:32:98:03:c0:
bb:8f:8e:70:25:85:1a:1d:34:07:9e:84:dd:72:37:f9:33:68:
e1:bc:10:a2:fe:36:35:c2:89:d3:f6:af:32:db:b7:13:2a:80:
97:92:18:a7:16:0c:80:a0:8b:48:21:c3:d9:0c:df:1e:c6:0d:
40:0f:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:13 2024 by rpki-client on console.sobornost.net