Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/eTalJ2iE7TBHDtaYgB9p34IJKlI.roa
File: eTalJ2iE7TBHDtaYgB9p34IJKlI.roa (raw, json)
Hash identifier: 6W9x6ji6vy0pMK+De2iqBiQHUEQlE5en/zZ85xTMeu0=
Subject key identifier: 79:36:A5:27:68:84:ED:30:47:0E:D6:98:80:1F:69:DF:82:09:2A:52
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 018B0FD38C3F99A9E1697CDCA207D14AD548
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/eTalJ2iE7TBHDtaYgB9p34IJKlI.roa
Signing time: Sun 08 Oct 2023 15:06:44 +0000
ROA not before: Sun 08 Oct 2023 15:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205007
IP address blocks: 185.48.250.0/24 maxlen: 24
2a04:b540:3000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0f:d3:8c:3f:99:a9:e1:69:7c:dc:a2:07:d1:4a:d5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Oct 8 15:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7936a5276884ed30470ed698801f69df82092a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:5d:c5:2e:e5:04:5b:ae:e2:cf:62:10:7d:
19:97:9b:82:bb:a8:fc:c2:7d:69:1f:ce:27:2d:26:
a8:61:d0:62:d1:9c:e7:01:37:91:5e:a8:66:27:7b:
b7:34:ef:63:c9:ea:c5:b3:10:f0:0e:96:2a:c6:f6:
60:70:84:a9:69:4c:7e:c1:c9:70:8a:52:24:ff:03:
7f:67:ed:b2:25:06:b1:55:91:6a:d9:13:b1:36:1e:
60:b6:ba:fd:a5:39:f5:be:11:bf:c2:72:2e:36:ae:
bd:5a:36:c7:0e:8e:9d:0d:9d:a3:4f:3c:10:44:93:
d2:9c:a9:9e:d2:39:b3:db:a1:96:56:80:6c:67:2e:
1f:be:98:e1:4c:dd:9c:66:7b:af:b2:4c:a2:49:07:
2a:45:86:58:94:f9:9c:94:7e:49:95:cd:6d:9d:3e:
44:72:07:2c:c9:78:97:d0:69:24:52:8c:76:dc:60:
01:3b:d3:a3:af:f6:1a:06:e3:37:f0:b5:eb:18:d2:
6b:a8:e3:76:e6:32:fc:51:03:bb:f9:a2:1c:cc:f5:
ca:4f:e0:e7:e3:70:21:0f:16:49:d6:c5:24:93:ec:
a2:1c:18:ec:fc:4b:64:6f:f6:ca:da:f1:b6:c6:5b:
a5:ab:27:c9:7e:49:e0:e6:37:35:ce:0b:c8:8c:6c:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:A5:27:68:84:ED:30:47:0E:D6:98:80:1F:69:DF:82:09:2A:52
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/eTalJ2iE7TBHDtaYgB9p34IJKlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.250.0/24
IPv6:
2a04:b540:3000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:49:ca:60:07:00:ec:c2:71:7e:19:d5:a9:5a:f4:10:60:e9:
52:c3:d0:7e:77:78:14:25:9d:9a:c0:a1:c4:a5:49:27:b8:49:
43:71:cf:9b:c3:d0:6e:bb:30:e5:6e:c9:15:52:45:b1:0a:1a:
05:19:55:6e:6c:40:35:a7:27:3e:98:fd:65:0c:03:f8:f6:60:
90:6c:75:c8:66:35:ca:80:1d:0d:4c:ed:98:f4:db:12:ee:02:
27:1b:47:70:00:1d:61:ac:39:1c:8d:45:d0:88:18:7f:c8:a3:
77:aa:6e:75:8e:a8:91:ba:96:0b:74:c1:b7:d9:05:78:81:3a:
32:a2:c5:e8:2e:8e:f0:a1:b0:5a:40:3d:81:4a:e1:0a:b3:40:
d6:f7:de:ac:11:25:67:1b:ee:4f:68:5d:d0:6b:89:90:4c:9a:
78:c8:cf:d3:09:67:29:43:90:99:fb:02:e2:aa:76:87:91:0e:
63:3b:0e:a6:fe:83:1d:c6:5b:47:03:46:e6:ed:e2:68:f2:c9:
27:88:5d:91:e7:ff:7b:68:78:5d:7b:05:3c:ab:70:92:87:cc:
2a:06:05:4e:f3:7b:5e:87:d2:9a:8a:39:10:ca:35:1b:8f:f4:
36:25:53:3e:22:82:ec:84:d8:42:27:a0:5f:80:18:d8:2b:d9:
9f:dc:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net