Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/75vy91ILnsCkEZ0dvNEMwId6rAc.roa
File: 75vy91ILnsCkEZ0dvNEMwId6rAc.roa (raw, json)
Hash identifier: yEbpIzSh0ddReTBiVgInLUfQgEiknbkAwPbVkjSZ2SU=
Subject key identifier: EF:9B:F2:F7:52:0B:9E:C0:A4:11:9D:1D:BC:D1:0C:C0:87:7A:AC:07
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0186D172960F2A54035A60F539A48F3ADD9C
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/75vy91ILnsCkEZ0dvNEMwId6rAc.roa
Signing time: Sat 11 Mar 2023 16:13:13 +0000
ROA not before: Sat 11 Mar 2023 16:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49385
IP address blocks: 94.231.220.0/24 maxlen: 24
94.231.221.0/24 maxlen: 24
94.231.222.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:72:96:0f:2a:54:03:5a:60:f5:39:a4:8f:3a:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Mar 11 16:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef9bf2f7520b9ec0a4119d1dbcd10cc0877aac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:42:86:e6:32:19:fc:e4:cc:5a:50:e7:19:
50:fd:75:da:41:69:95:aa:c2:61:f1:ee:07:b5:9c:
f5:fe:bf:fd:49:0c:d4:d0:81:c6:4f:5b:fc:b6:74:
54:c9:31:8d:1f:3c:74:a9:10:69:1f:4d:e1:44:13:
db:c3:e3:38:5a:f5:7f:de:3e:9d:52:6e:64:b6:05:
39:d6:fd:eb:64:d2:7a:37:76:43:b2:3d:16:9e:5c:
09:fb:c7:c1:cb:8f:1b:38:d8:56:85:38:7b:8d:f7:
23:4c:b9:ed:b2:2c:ff:5e:12:de:00:7f:4d:c6:a3:
4c:69:83:c7:2b:f8:78:d8:e6:ac:70:8f:ca:2d:30:
f0:f6:d0:55:70:f4:d2:24:40:3a:6d:15:10:7a:1a:
c4:6a:ee:c9:97:c6:05:1d:d8:b0:e8:46:10:7e:7e:
76:3b:c7:14:c5:23:9f:f5:e0:e1:cd:b1:4b:3b:b4:
fc:e8:ce:f3:89:d9:c3:10:40:5b:25:49:07:b8:79:
4a:0f:4b:8c:57:d8:b5:83:00:90:c8:4c:0a:24:9a:
3a:00:2e:18:7f:0a:74:06:97:40:80:e8:a1:d9:d4:
a6:b3:07:46:51:7c:13:62:3d:c7:fc:18:16:5c:57:
a7:97:50:21:dc:d7:9c:85:ad:19:5d:44:93:68:26:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:F2:F7:52:0B:9E:C0:A4:11:9D:1D:BC:D1:0C:C0:87:7A:AC:07
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/75vy91ILnsCkEZ0dvNEMwId6rAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:c9:34:46:a3:92:b2:c7:b4:06:1d:01:d5:de:9a:31:ec:46:
f0:07:fe:bf:ee:16:6a:39:12:57:2e:30:fe:6d:af:99:98:76:
3a:68:fb:e0:6b:54:36:61:ca:17:d0:04:39:5e:e2:9a:b9:4c:
e2:e8:3b:b3:5e:37:2b:d0:54:85:dd:bf:5a:55:40:fe:a6:c9:
3a:84:15:45:c0:4c:d2:16:e0:4b:02:84:a5:fd:1c:b8:a8:ee:
09:d9:05:14:38:98:36:3d:26:af:03:94:29:24:11:20:96:f9:
cc:2e:46:2d:5c:66:c3:ef:9f:26:cb:20:61:82:91:42:ca:ef:
bc:57:fb:9d:44:ac:6b:3b:ae:c8:fd:ff:f0:e4:dd:09:be:e6:
0a:5f:50:9f:5a:45:1b:24:18:83:db:92:dc:d0:71:44:ee:4b:
81:66:cc:26:ac:52:53:6a:f4:ca:d7:4b:cd:7d:03:43:e9:d0:
c2:7c:12:4c:4a:ec:15:dd:6a:5f:23:69:5b:7f:16:11:92:ed:
7c:0c:15:fa:ea:a9:d7:6b:31:94:ac:78:48:82:9e:22:99:84:
88:a9:fb:9c:e9:1c:bc:1c:33:05:0c:32:0a:3a:2c:8d:62:6e:
6f:36:1b:31:9a:0f:12:3c:fc:dc:9c:6d:8b:f1:3d:dd:f5:5e:
6d:bd:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:13 2024 by rpki-client on console.sobornost.net